Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2ff27b04-5b3c-38a8-b243-a8dd3f05b02d.roa
File:                     2ff27b04-5b3c-38a8-b243-a8dd3f05b02d.roa (raw, json)
Hash identifier:          XqAoKiEXLXTZo/gec+TQCZx26Om4hnl23zUVRsDb7G0=
Subject key identifier:   E9:3C:08:5C:E5:A1:E3:3B:2E:00:FE:DF:4B:EF:3D:64:52:18:90:A6
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F43285841E46D94AD2009E1F54D0CFD5C
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2ff27b04-5b3c-38a8-b243-a8dd3f05b02d.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Tue 04 Jul 2023 19:51:01 +0000
asID:                     54203
IP address blocks:        69.16.157.0/24 maxlen: 24
                          69.16.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:94:ad:20:09:e1:f5:4d:0c:fd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul  4 19:51:01 2023 GMT
        Subject: CN=757db7f8-ae64-4d3d-ac79-7a37ae24743c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:00:7d:30:99:8a:46:3a:c0:51:47:bb:3c:
                    06:09:ce:5f:66:5c:17:4f:ca:bd:4b:dc:a6:b0:3f:
                    11:89:d2:9e:f0:ac:57:70:c0:16:30:67:40:92:28:
                    92:63:a3:f6:bd:17:7d:17:bb:b4:0c:bd:58:05:98:
                    df:1e:9d:fb:2f:bf:0a:a2:44:54:59:30:d5:b5:ec:
                    3b:b5:0f:10:63:9f:81:4f:1a:15:cd:94:bd:a8:51:
                    6c:ef:0c:f0:f3:bf:1e:5e:3d:2d:5f:fb:cd:c3:c1:
                    f0:38:6d:35:fb:54:5d:d9:89:44:b0:41:bf:a6:82:
                    cf:68:47:58:38:f2:20:8b:ff:f6:31:ce:d0:ca:1d:
                    b4:90:11:b2:ce:18:92:48:17:e1:98:c6:cf:53:08:
                    56:29:9a:c2:62:c6:ff:ab:b3:c2:5c:de:1e:71:21:
                    a8:02:2b:f4:56:e2:04:64:65:41:fd:58:c5:cc:b6:
                    1c:a6:a9:91:51:42:97:56:b7:0f:6c:fd:80:6f:54:
                    50:01:47:53:ef:0e:2f:c0:99:37:e9:07:37:70:28:
                    ad:53:04:b2:c7:c8:b2:ac:92:b9:26:be:e3:89:37:
                    14:6f:90:0b:ad:cf:6d:87:48:68:7d:31:0f:e7:4b:
                    8e:66:c0:84:e4:9b:7a:6f:1c:60:3f:5c:42:cc:c3:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3C:08:5C:E5:A1:E3:3B:2E:00:FE:DF:4B:EF:3D:64:52:18:90:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/2ff27b04-5b3c-38a8-b243-a8dd3f05b02d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.16.147.0/24
                  69.16.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c0:65:f6:87:ae:bb:67:3a:f6:b0:f4:6e:f2:7a:c0:9f:3b:
         67:a9:36:60:1d:77:c5:2e:57:5c:d0:ae:52:3d:02:05:fe:56:
         0c:b1:92:e6:51:6c:ec:89:e4:d6:4a:87:30:07:e4:20:8b:3b:
         d8:fa:5d:37:6a:87:6d:3d:d1:69:04:97:44:bf:ae:cc:d9:08:
         b8:00:bf:f7:de:fe:e0:35:05:90:95:d4:dd:12:f7:55:e5:5f:
         11:87:21:e6:a2:09:07:49:a1:f4:ca:99:b7:f9:78:1a:7a:5c:
         0d:4e:91:76:f4:31:e8:74:00:17:bb:94:d7:13:f6:e3:dc:75:
         05:88:57:2a:0a:5d:ff:dc:ad:aa:59:f1:17:c4:e5:92:20:f3:
         ca:f3:86:f6:40:27:26:24:ff:39:bf:83:fc:dc:3c:4d:30:8b:
         bf:4d:5c:84:3a:fe:db:72:54:ea:33:fe:6b:b2:74:f5:96:ee:
         44:04:c4:fe:25:f9:63:e6:20:4a:e6:1d:b6:1c:d3:0c:62:32:
         1f:2c:5f:c2:80:5e:51:d7:83:2b:68:a1:f0:35:bb:41:fd:8a:
         b5:e9:de:04:5b:e7:a3:27:a7:d1:16:e6:5b:76:9a:11:92:59:
         d7:44:7f:b2:37:a7:5c:2c:63:a6:9b:8d:e8:de:8b:a0:6b:95:
         89:0b:95:62
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEHkbZStIAnh9U0M/VwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz
OGFhMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDcwNDE5NTEwMVowLzEtMCsGA1UEAxMk
NzU3ZGI3ZjgtYWU2NC00ZDNkLWFjNzktN2EzN2FlMjQ3NDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXQAfTCZikY6wFFHuzwGCc5fZlwXT8q9S9ym
sD8RidKe8KxXcMAWMGdAkiiSY6P2vRd9F7u0DL1YBZjfHp37L78KokRUWTDVtew7
tQ8QY5+BTxoVzZS9qFFs7wzw878eXj0tX/vNw8HwOG01+1Rd2YlEsEG/poLPaEdY
OPIgi//2Mc7Qyh20kBGyzhiSSBfhmMbPUwhWKZrCYsb/q7PCXN4ecSGoAiv0VuIE
ZGVB/VjFzLYcpqmRUUKXVrcPbP2Ab1RQAUdT7w4vwJk36Qc3cCitUwSyx8iyrJK5
Jr7jiTcUb5ALrc9th0hofTEP50uOZsCE5Jt6bxxgP1xCzMN//QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFOk8CFzloeM7LgD+30vvPWRSGJCmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk
MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMmZmMjdiMDQtNWIzYy0z
OGE4LWIyNDMtYThkZDNmMDViMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2
ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy
MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4
ZDYzMjM4YWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQARRCTAwQA
RRCdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHLAZfaHrrtnOvaw9G7yesCfO2epNmAdd8UuV1zQrlI9AgX+
VgyxkuZRbOyJ5NZKhzAH5CCLO9j6XTdqh2090WkEl0S/rszZCLgAv/fe/uA1BZCV
1N0S91XlXxGHIeaiCQdJofTKmbf5eBp6XA1OkXb0Meh0ABe7lNcT9uPcdQWIVyoK
Xf/crapZ8RfE5ZIg88rzhvZAJyYk/zm/g/zcPE0wi79NXIQ6/ttyVOoz/muydPWW
7kQExP4l+WPmIErmHbYc0wxiMh8sX8KAXlHXgytoofA1u0H9irXp3gRb56Mnp9EW
5lt2mhGSWddEf7I3p1wsY6abjejei6BrlYkLlWI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:56 2024 by rpki-client on console-fra.rpki-client.org