Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78c2ef79-af94-3eb9-b1ee-ec8f6d5e4919.roa
File:                     78c2ef79-af94-3eb9-b1ee-ec8f6d5e4919.roa (raw, json)
Hash identifier:          W8DGOqzyICiFngeGs2qR75I05KrByhASouc2MX/VEaQ=
Subject key identifier:   84:B1:1F:4D:F6:43:5F:5A:07:BC:96:84:FA:DE:90:22:B7:FE:0F:FB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A506308367FF7E01EA64D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78c2ef79-af94-3eb9-b1ee-ec8f6d5e4919.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     63949
IP address blocks:        64.71.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:50:63:08:36:7f:f7:e0:1e:a6:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=d435cb97-0b2b-4c44-a7db-870e56cadeee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:13:5e:53:d5:38:95:9f:b5:8c:e2:38:59:6e:
                    81:7a:ea:6c:4c:b3:b2:cc:67:88:31:31:a8:43:85:
                    bb:3e:54:f0:b3:6c:c1:0b:b5:dc:73:c8:a4:8f:f8:
                    fc:47:14:44:75:dc:fc:75:62:75:65:85:6b:be:78:
                    17:00:1b:68:0e:fd:e5:de:8e:1a:ee:ae:b4:fd:fd:
                    bd:a1:15:39:f8:b0:36:35:e5:66:d8:c8:37:35:4f:
                    76:fd:7b:3c:04:8e:3b:3c:ef:8c:e0:dc:3b:36:0b:
                    7b:63:3d:9b:23:34:e8:b7:93:50:cd:f1:31:ab:01:
                    53:75:bf:37:97:eb:13:2b:91:b3:87:39:e3:67:d4:
                    f0:9c:1c:bf:a3:b1:af:5f:cb:54:94:ee:ca:54:2c:
                    06:01:c8:6f:2f:cb:3b:0b:dc:f5:e4:e9:bc:8b:1b:
                    0f:0f:92:9a:e0:94:f8:13:4a:dd:93:15:07:d9:b3:
                    15:c8:55:6a:be:d4:82:d9:2b:a6:60:2a:a1:ea:ee:
                    46:00:f5:3f:4a:33:f4:e4:6d:43:92:21:9c:eb:c7:
                    e2:17:b0:5f:ad:6f:fa:26:e5:85:4a:ff:6a:be:ca:
                    36:5c:8c:ff:91:56:71:77:29:d2:e1:eb:32:ea:5a:
                    c4:f7:7f:8b:05:4e:d5:88:b4:4a:98:a3:b9:3a:ae:
                    f7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B1:1F:4D:F6:43:5F:5A:07:BC:96:84:FA:DE:90:22:B7:FE:0F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78c2ef79-af94-3eb9-b1ee-ec8f6d5e4919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:10:c4:87:e4:3b:df:b3:dc:52:21:7e:3f:f0:3a:43:f6:41:
         7c:61:af:96:0c:f0:c8:a6:38:14:0a:b8:1c:6b:53:bb:22:57:
         be:f7:d3:9a:de:45:5c:ba:ee:fd:48:4e:c0:1d:9f:74:f5:43:
         6f:9c:c2:fc:70:8d:c7:b9:76:5e:84:97:a4:0a:32:20:3a:59:
         fe:f0:14:de:d9:5e:17:4f:ee:4e:5b:1d:a6:57:18:66:b6:34:
         d7:00:fa:67:13:05:ed:65:8d:58:a8:71:0f:c8:06:53:03:77:
         61:30:28:47:a0:8e:77:89:31:0a:f3:59:3c:ec:06:1b:a0:87:
         44:9c:66:ca:1a:65:d9:f0:29:14:e9:76:ac:b8:66:8b:c3:8a:
         6e:02:37:a9:61:b2:6e:6c:0e:a4:c0:5b:f4:65:d3:94:3d:19:
         15:a4:4a:2d:10:81:2f:4b:bf:1e:2d:34:24:06:27:16:a9:e3:
         90:b9:cf:47:e8:01:f3:da:17:c3:21:4c:5b:81:b9:34:8b:db:
         c9:75:c3:5e:21:de:eb:ba:b4:59:b5:b5:ec:6e:0b:9f:1b:38:
         51:9d:a2:34:c6:4e:6a:22:f0:82:88:21:95:2b:21:f7:42:99:
         f6:46:8e:64:99:57:4a:0b:cb:ea:2f:99:e6:cc:3e:47:d3:a2:
         61:c2:72:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKUGMINn/34B6mTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDQzNWNiOTctMGIyYi00YzQ0LWE3ZGItODcwZTU2Y2FkZWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBNeU9U4lZ+1jOI4WW6BeupsTLOyzGeIMTGo
Q4W7PlTws2zBC7Xcc8ikj/j8RxREddz8dWJ1ZYVrvngXABtoDv3l3o4a7q60/f29
oRU5+LA2NeVm2Mg3NU92/Xs8BI47PO+M4Nw7Ngt7Yz2bIzTot5NQzfExqwFTdb83
l+sTK5GzhznjZ9TwnBy/o7GvX8tUlO7KVCwGAchvL8s7C9z15Om8ixsPD5Ka4JT4
E0rdkxUH2bMVyFVqvtSC2SumYCqh6u5GAPU/SjP05G1DkiGc68fiF7BfrW/6JuWF
Sv9qvso2XIz/kVZxdynS4esy6lrE93+LBU7ViLRKmKO5Oq73HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFISxH032Q19aB7yWhPrekCK3/g/7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzhjMmVmNzktYWY5NC0z
ZWI5LWIxZWUtZWM4ZjZkNWU0OTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEeYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALwQxIfkO9+z3FIhfj/wOkP2QXxhr5YM8MimOBQKuBxrU7siV77305re
RVy67v1ITsAdn3T1Q2+cwvxwjce5dl6El6QKMiA6Wf7wFN7ZXhdP7k5bHaZXGGa2
NNcA+mcTBe1ljViocQ/IBlMDd2EwKEegjneJMQrzWTzsBhugh0ScZsoaZdnwKRTp
dqy4ZovDim4CN6lhsm5sDqTAW/Rl05Q9GRWkSi0QgS9Lvx4tNCQGJxap45C5z0fo
AfPaF8MhTFuBuTSL28l1w14h3uu6tFm1texuC58bOFGdojTGTmoi8IKIIZUrIfdC
mfZGjmSZV0oLy+ovmebMPkfTomHCcjw=
-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:04 2023 by rpki-client on console-fra.rpki-client.org