Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25c9feb1-91f9-378e-b1f2-f9aab8fb7d37.roa
File:                     25c9feb1-91f9-378e-b1f2-f9aab8fb7d37.roa (raw, json)
Hash identifier:          LBCwERHv9dRhd3JBKeKj7LdJ1g5cXaQ8JiDfZ2SoiWM=
Subject key identifier:   78:C3:A3:4C:0B:25:13:05:46:BA:18:D0:55:F6:AC:62:E0:AD:2B:7C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449315591ED13E034DB4C98CC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25c9feb1-91f9-378e-b1f2-f9aab8fb7d37.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     21552
IP address blocks:        206.47.134.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:15:59:1e:d1:3e:03:4d:b4:c9:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=fee3cbe9-18cc-4405-a7d6-f956db84aefa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:47:4b:a7:0d:3a:7c:9d:a8:d8:32:5d:8f:f4:
                    6d:d3:e1:9d:1f:9e:91:45:04:0d:fe:4f:06:f0:06:
                    f8:ea:4c:b4:ec:3e:cb:9e:d8:68:fe:32:98:50:1e:
                    7a:9e:c9:4e:0d:f2:5e:97:85:d9:9b:82:cc:12:d6:
                    51:1b:8f:ea:07:65:5d:9d:07:17:42:52:11:0b:52:
                    4c:38:d9:41:a9:81:b2:a0:90:75:7c:5d:5c:ee:05:
                    dc:c4:3b:0a:cd:d0:a6:4a:57:66:41:a9:0c:a3:8b:
                    7b:9f:01:62:0b:09:9d:37:68:78:b5:14:43:d4:19:
                    89:1a:82:d0:c7:23:21:05:80:19:75:70:87:e6:03:
                    80:32:27:6b:bd:0d:45:8d:f8:5c:f0:d9:0a:45:68:
                    3c:0b:a2:4e:38:a6:ed:96:c2:31:ab:dc:67:d9:a3:
                    54:a3:32:f4:25:66:4e:d8:e4:7f:5f:fd:f8:c0:79:
                    26:20:bd:08:7d:ed:27:9a:ef:ab:6b:ae:0f:7d:94:
                    3b:f2:95:ef:cb:1c:6a:82:0b:35:e9:9a:d2:dc:d5:
                    f0:6f:f5:e1:fb:8b:26:67:6b:c0:a5:10:06:5f:98:
                    17:78:7c:ab:2f:0f:e1:c2:82:97:52:92:2f:5e:4b:
                    42:52:d8:7f:1b:37:21:fc:b1:c8:c5:d6:8f:7b:89:
                    fe:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C3:A3:4C:0B:25:13:05:46:BA:18:D0:55:F6:AC:62:E0:AD:2B:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/25c9feb1-91f9-378e-b1f2-f9aab8fb7d37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:30:8f:fd:97:ef:f4:99:09:49:eb:09:ed:53:17:bb:0c:16:
         2d:73:88:30:d2:b4:7f:e5:4e:c4:f8:c1:5d:9b:11:6b:1c:52:
         90:30:f5:7b:fe:22:bc:71:8e:64:86:6e:da:f9:99:8e:cc:aa:
         20:51:8c:9b:dd:3d:c8:17:81:17:26:35:d9:69:ac:0d:c5:42:
         2b:5d:4c:9c:62:24:dc:11:ea:96:e9:d7:77:15:46:26:9a:ee:
         c2:f3:d4:6e:a5:ce:61:c8:69:f6:06:bc:b4:a8:70:b9:ab:45:
         51:3b:cf:be:60:d7:44:ed:bd:ff:33:05:df:02:0a:33:3a:4e:
         98:bc:74:b7:24:9a:f6:7c:29:a1:24:87:a4:88:f5:bf:24:53:
         53:74:dd:81:8a:5b:8b:56:bd:67:77:f1:aa:f4:b3:9a:92:13:
         a1:80:11:5b:70:df:c3:97:7a:66:84:68:c9:33:a2:80:76:e5:
         a4:3a:0a:ac:18:f8:ba:e9:65:45:1f:d9:db:71:68:b8:58:4b:
         a1:93:89:ad:85:08:3b:87:f3:65:7f:6c:de:f1:a5:f9:73:25:
         e4:a7:fd:65:02:10:cd:1d:47:1b:2d:c5:1a:61:18:92:45:90:
         50:3a:00:05:22:3e:23:bd:37:03:fe:7b:b9:1e:20:1d:2b:a2:
         f7:ea:18:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFVke0T4DTbTJjMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZmVlM2NiZTktMThjYy00NDA1LWE3ZDYtZjk1NmRiODRhZWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0dLpw06fJ2o2DJdj/Rt0+GdH56RRQQN/k8G
8Ab46ky07D7Lntho/jKYUB56nslODfJel4XZm4LMEtZRG4/qB2VdnQcXQlIRC1JM
ONlBqYGyoJB1fF1c7gXcxDsKzdCmSldmQakMo4t7nwFiCwmdN2h4tRRD1BmJGoLQ
xyMhBYAZdXCH5gOAMidrvQ1Fjfhc8NkKRWg8C6JOOKbtlsIxq9xn2aNUozL0JWZO
2OR/X/34wHkmIL0Ife0nmu+ra64PfZQ78pXvyxxqggs16ZrS3NXwb/Xh+4smZ2vA
pRAGX5gXeHyrLw/hwoKXUpIvXktCUth/Gzch/LHIxdaPe4n+fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHjDo0wLJRMFRroY0FX2rGLgrSt8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMjVjOWZlYjEtOTFmOS0z
NzhlLWIxZjItZjlhYWI4ZmI3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi+GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAswj/2X7/SZCUnrCe1TF7sMFi1ziDDStH/lTsT4wV2bEWscUpAw9Xv+
IrxxjmSGbtr5mY7MqiBRjJvdPcgXgRcmNdlprA3FQitdTJxiJNwR6pbp13cVRiaa
7sLz1G6lzmHIafYGvLSocLmrRVE7z75g10Ttvf8zBd8CCjM6Tpi8dLckmvZ8KaEk
h6SI9b8kU1N03YGKW4tWvWd38ar0s5qSE6GAEVtw38OXemaEaMkzooB25aQ6CqwY
+LrpZUUf2dtxaLhYS6GTia2FCDuH82V/bN7xpflzJeSn/WUCEM0dRxstxRphGJJF
kFA6AAUiPiO9NwP+e7keIB0rovfqGLg=
-----END CERTIFICATE-----
Generated at Tue Apr 16 06:24:04 2024 by rpki-client on console-ams.rpki-client.org