Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed6d7e34-e532-3c4a-ae67-0927cd58ca01.roa
File:                     ed6d7e34-e532-3c4a-ae67-0927cd58ca01.roa (raw, json)
Hash identifier:          ZQw0tCGz5PyuP9xya6HVSh/WtEJOKbkDeygz7ZFAMJU=
Subject key identifier:   BF:53:24:55:43:F2:00:C7:43:2E:4D:93:54:F6:D0:BF:B4:CF:A0:3E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA6948A63F05266DD440780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed6d7e34-e532-3c4a-ae67-0927cd58ca01.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     393670
IP address blocks:        216.66.12.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:94:8a:63:f0:52:66:dd:44:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=32ce6bda-e611-42eb-91c8-0b71712dbe4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d5:cc:13:f2:9c:33:c5:09:bb:09:17:e9:4c:
                    a5:17:1b:46:5e:b5:51:d5:1b:8d:b5:14:cb:da:ce:
                    56:74:f9:48:df:ec:97:45:dc:1c:74:41:5d:37:57:
                    12:93:c3:d6:3c:8a:e9:77:64:53:2d:73:17:60:9a:
                    c4:d1:4c:55:36:c4:c9:2e:ae:4f:ab:23:8b:9a:ea:
                    35:98:9e:ed:40:35:62:6e:2d:e2:90:fa:b3:09:02:
                    20:6b:a0:b6:dd:35:8c:58:82:5b:94:4b:92:18:a6:
                    a5:b9:69:3d:e1:09:d9:5c:e0:95:ca:f3:71:50:d8:
                    2c:f5:6d:28:c3:74:4e:5f:0b:19:88:9e:64:69:79:
                    c7:88:1f:3b:bb:0c:da:b8:90:5d:6e:0a:d4:7e:96:
                    9a:7c:27:eb:d0:2c:43:8d:e8:f9:f6:cd:83:7c:8e:
                    29:b6:c4:75:d3:40:49:f3:80:c8:08:c8:19:9e:8f:
                    9e:d0:17:29:7c:9a:3c:63:77:6a:8a:00:6e:4a:95:
                    c7:57:1f:6e:6b:6b:5e:6c:0a:9c:3c:22:c6:16:db:
                    2a:ab:ff:3f:3f:44:64:8d:86:d2:d5:8f:dc:6b:6c:
                    32:e9:3a:0b:da:23:a2:3f:d6:f7:3a:d9:0b:54:a0:
                    70:0f:70:6c:58:fc:eb:22:5e:68:8c:b9:2b:5b:dd:
                    85:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:53:24:55:43:F2:00:C7:43:2E:4D:93:54:F6:D0:BF:B4:CF:A0:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ed6d7e34-e532-3c4a-ae67-0927cd58ca01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9f:ca:c8:85:72:56:51:78:5f:5a:cc:d0:77:16:3d:6b:12:
         1b:80:cf:cb:b5:88:12:62:da:69:d7:ff:0e:07:83:3a:c1:8f:
         a2:f9:31:fe:12:40:a4:d9:d0:42:36:91:b6:d7:40:90:da:8f:
         64:3b:7a:11:24:e4:58:0b:24:77:ef:72:f3:6f:e0:6c:f0:c2:
         39:eb:71:9f:45:5e:d8:6b:b9:0c:2a:28:c4:9d:09:74:15:ca:
         3d:66:ab:46:05:d6:68:48:9c:c6:43:46:ca:0c:93:1b:90:bb:
         e5:c2:e5:5a:e0:7b:d2:16:d5:75:31:15:8f:94:b0:b0:c7:4f:
         51:2c:d0:a5:82:7c:e2:1f:8f:65:30:48:24:f9:d9:e3:45:6c:
         a7:b6:a6:71:ae:80:0a:c8:07:df:cb:5d:5b:5e:c0:dd:9f:6a:
         2c:11:4a:5c:7e:be:0c:33:02:21:ca:d1:8a:62:49:ef:d0:b7:
         44:cb:2f:ac:24:71:98:59:7c:84:2c:0e:29:9e:74:ec:6a:43:
         ed:4d:a3:ce:c0:db:e8:68:5f:5e:05:2d:47:19:54:ec:06:b3:
         c9:c6:3b:19:4f:cf:97:9b:a0:dd:cd:f8:25:30:a6:8f:36:58:
         2b:0d:28:54:bb:d5:a9:1d:41:0e:64:d1:45:df:10:c5:0b:1e:
         4b:ce:0e:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDv9ppSKY/BSZt1EB4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIxMTEyMDA1MDAwMFoXDTIyMDUyMDA0MDAwMFowLzEtMCsGA1UEAxMk
MzJjZTZiZGEtZTYxMS00MmViLTkxYzgtMGI3MTcxMmRiZTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9XME/KcM8UJuwkX6UylFxtGXrVR1RuNtRTL
2s5WdPlI3+yXRdwcdEFdN1cSk8PWPIrpd2RTLXMXYJrE0UxVNsTJLq5PqyOLmuo1
mJ7tQDVibi3ikPqzCQIga6C23TWMWIJblEuSGKaluWk94QnZXOCVyvNxUNgs9W0o
w3ROXwsZiJ5kaXnHiB87uwzauJBdbgrUfpaafCfr0CxDjej59s2DfI4ptsR100BJ
84DICMgZno+e0BcpfJo8Y3dqigBuSpXHVx9ua2tebAqcPCLGFtsqq/8/P0RkjYbS
1Y/ca2wy6ToL2iOiP9b3OtkLVKBwD3BsWPzrIl5ojLkrW92FuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL9TJFVD8gDHQy5Nk1T20L+0z6A+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZWQ2ZDdlMzQtZTUzMi0z
YzRhLWFlNjctMDkyN2NkNThjYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2EIMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6fysiFclZReF9azNB3Fj1rEhuAz8u1iBJi2mnX/w4HgzrBj6L5Mf4S
QKTZ0EI2kbbXQJDaj2Q7ehEk5FgLJHfvcvNv4GzwwjnrcZ9FXthruQwqKMSdCXQV
yj1mq0YF1mhInMZDRsoMkxuQu+XC5Vrge9IW1XUxFY+UsLDHT1Es0KWCfOIfj2Uw
SCT52eNFbKe2pnGugArIB9/LXVtewN2faiwRSlx+vgwzAiHK0YpiSe/Qt0TLL6wk
cZhZfIQsDimedOxqQ+1No87A2+hoX14FLUcZVOwGs8nGOxlPz5eboN3N+CUwpo82
WCsNKFS71akdQQ5k0UXfEMULHkvODnA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:49 2023 by rpki-client on console-fra.rpki-client.org