Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dca127c8-3c17-3e77-b16d-73d784cad5b5.roa
File:                     dca127c8-3c17-3e77-b16d-73d784cad5b5.roa (raw, json)
Hash identifier:          gLjTJxgEtxnwwz9q8fSe1FGkqSMgbSLT+XHRX9MVScY=
Subject key identifier:   1B:14:1A:05:60:11:3E:91:35:AE:E5:41:69:42:EA:56:68:1C:5B:B4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648EAB847045D2955C86B380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dca127c8-3c17-3e77-b16d-73d784cad5b5.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     56484
IP address blocks:        216.66.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:ab:84:70:45:d2:95:5c:86:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=92b938b2-a86b-48ad-af91-d70e1b5c63b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c0:d1:98:a0:7d:4e:4d:7b:92:11:72:a8:1a:
                    95:b5:79:2b:28:b9:50:90:ce:35:a5:ad:97:f8:00:
                    ce:c1:32:58:e1:7d:e0:f7:a1:06:0c:1f:f4:67:9e:
                    a2:40:88:11:af:f4:01:67:e4:88:b9:90:79:d5:22:
                    44:b7:db:b0:5d:89:d0:ab:3d:df:06:c4:35:68:82:
                    0d:68:41:92:88:1e:d6:9a:5a:e7:93:7b:49:8c:a6:
                    0c:a0:54:2e:5b:62:8d:1f:31:31:dc:86:1e:11:7b:
                    76:bc:7e:5d:2f:88:8e:80:85:ef:58:0f:c2:0a:ec:
                    ce:fe:27:15:3f:c2:36:7b:8b:4f:41:ff:9c:c1:da:
                    e3:4e:6f:c9:09:e0:2c:da:33:15:05:85:99:ad:e1:
                    f8:ab:c1:73:da:f2:87:e3:8e:78:00:1f:92:2c:87:
                    7d:51:73:43:36:01:58:da:d0:f6:24:57:97:6b:1b:
                    8c:f2:69:37:0b:90:86:11:b2:b8:f8:ab:1a:40:a9:
                    2d:91:bb:df:03:fb:74:3f:65:95:05:c0:3b:e1:60:
                    ac:ee:8b:1e:bb:fd:af:d8:e4:38:b7:13:16:0d:b3:
                    bc:22:d2:3a:9b:05:61:29:e8:74:04:07:f9:65:8d:
                    8f:80:e9:80:e2:18:98:16:80:d6:f7:b4:ad:69:16:
                    b1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:14:1A:05:60:11:3E:91:35:AE:E5:41:69:42:EA:56:68:1C:5B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dca127c8-3c17-3e77-b16d-73d784cad5b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:e3:de:67:53:f8:98:16:2b:77:aa:77:08:eb:cf:04:3c:4f:
         8c:53:6d:1c:bc:ed:44:d1:7e:2a:58:a1:a7:b0:73:41:64:0b:
         f4:ac:aa:88:8b:b9:89:4e:bb:fb:96:59:28:dd:ba:5b:ec:88:
         d1:0a:94:5a:4b:bd:8d:c0:5a:ff:a5:73:8e:fb:c1:f1:dd:1f:
         f0:d7:6b:a6:43:a4:a3:c0:e9:53:bf:5c:85:b1:2c:81:b4:40:
         e9:0d:10:70:7a:35:dc:78:2f:0a:96:1d:36:ca:c0:f8:76:1f:
         f7:41:80:73:99:69:70:54:68:c5:bc:27:2c:5c:59:94:ef:e1:
         a5:5f:a9:9a:bd:6f:c6:e3:b2:5e:a0:9f:79:54:3a:a6:f2:40:
         a6:8e:7b:df:fb:bf:fc:b1:2c:82:d6:3c:d3:dc:2b:4f:6d:1e:
         0b:d0:2a:6d:2c:c1:e1:d8:c5:17:51:17:9d:cd:ac:fb:51:33:
         ca:86:0d:09:0a:27:06:89:5c:98:59:6a:6e:79:40:ad:da:64:
         10:0e:2d:a5:35:6c:78:90:4b:8c:fd:bb:99:3b:16:54:ad:cd:
         45:1e:25:fc:a9:fa:06:3b:9a:5b:e9:65:08:3d:46:fd:92:0a:
         39:8e:d8:52:df:7f:e9:41:cb:d7:25:b6:28:12:2f:c4:90:e6:
         b9:3b:83:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9kjquEcEXSlVyGs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkyNzEyMDAwMFoXDTIzMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk
OTJiOTM4YjItYTg2Yi00OGFkLWFmOTEtZDcwZTFiNWM2M2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsDRmKB9Tk17khFyqBqVtXkrKLlQkM41pa2X
+ADOwTJY4X3g96EGDB/0Z56iQIgRr/QBZ+SIuZB51SJEt9uwXYnQqz3fBsQ1aIIN
aEGSiB7Wmlrnk3tJjKYMoFQuW2KNHzEx3IYeEXt2vH5dL4iOgIXvWA/CCuzO/icV
P8I2e4tPQf+cwdrjTm/JCeAs2jMVBYWZreH4q8Fz2vKH4454AB+SLId9UXNDNgFY
2tD2JFeXaxuM8mk3C5CGEbK4+KsaQKktkbvfA/t0P2WVBcA74WCs7oseu/2v2OQ4
txMWDbO8ItI6mwVhKeh0BAf5ZY2PgOmA4hiYFoDW97StaRaxBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBsUGgVgET6RNa7lQWlC6lZoHFu0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGNhMTI3YzgtM2MxNy0z
ZTc3LWIxNmQtNzNkNzg0Y2FkNWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2EJcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzj3mdT+JgWK3eqdwjrzwQ8T4xTbRy87UTRfipYoaewc0FkC/SsqoiL
uYlOu/uWWSjdulvsiNEKlFpLvY3AWv+lc477wfHdH/DXa6ZDpKPA6VO/XIWxLIG0
QOkNEHB6Ndx4LwqWHTbKwPh2H/dBgHOZaXBUaMW8JyxcWZTv4aVfqZq9b8bjsl6g
n3lUOqbyQKaOe9/7v/yxLILWPNPcK09tHgvQKm0sweHYxRdRF53NrPtRM8qGDQkK
JwaJXJhZam55QK3aZBAOLaU1bHiQS4z9u5k7FlStzUUeJfyp+gY7mlvpZQg9Rv2S
CjmO2FLff+lBy9cltigSL8SQ5rk7g8g=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:48 2023 by rpki-client on console-fra.rpki-client.org