Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/917f5ad4-47d7-3271-825f-59142b33a285.roa
File:                     917f5ad4-47d7-3271-825f-59142b33a285.roa (raw, json)
Hash identifier:          A4bXz/+UOj+HB3QKUojCdv9sZayGsA3I6pR7Ko/r060=
Subject key identifier:   93:E6:76:C2:D6:E5:1C:B0:4F:54:3E:79:02:E1:39:E0:75:64:72:04
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858441DB02065672887485A2DE500
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/917f5ad4-47d7-3271-825f-59142b33a285.roa
Signing time:             Mon 04 Dec 2023 12:00:00 +0000
ROA not before:           Mon 04 Dec 2023 12:00:00 +0000
ROA not after:            Tue 16 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        206.47.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:1d:b0:20:65:67:28:87:48:5a:2d:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  4 12:00:00 2023 GMT
            Not After : Jan 16 05:00:00 2024 GMT
        Subject: CN=30d48069-cca4-4afd-a9d3-45e56c209e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e0:a4:c8:9a:c3:3c:54:7a:ef:0c:23:e0:57:
                    2e:86:13:90:7c:f1:1a:cc:0f:95:cd:07:5b:49:e0:
                    c5:93:29:0f:06:1f:3c:22:7c:fc:31:66:c2:12:04:
                    63:bc:6b:94:08:c9:82:49:1c:2e:d4:e1:8a:c5:12:
                    bf:a6:e6:7a:cf:52:f6:4c:f6:52:12:b0:3d:a8:b5:
                    2a:a8:04:6d:ae:57:21:a8:4f:be:f5:5e:17:09:33:
                    09:e7:af:76:b5:64:d5:21:a6:d2:f8:71:78:e8:c9:
                    ec:ea:15:bf:59:f9:36:51:5d:e4:d4:51:c9:bb:04:
                    97:fa:93:0c:33:2a:07:c7:f8:f1:a1:63:d2:1e:89:
                    49:9a:54:3e:21:b4:a6:ef:02:1c:19:0a:75:6f:a0:
                    01:ff:ea:9c:7c:1c:b4:a4:ae:3a:4b:d4:af:e1:ce:
                    f5:8f:24:5e:28:a7:f8:da:a2:83:e0:d0:b5:ef:ea:
                    59:26:b0:19:3d:52:fc:24:25:d8:ef:e7:01:c9:99:
                    57:95:4e:b5:55:16:ba:13:75:1c:15:73:1b:5d:46:
                    23:84:27:c1:30:26:ae:39:5a:ee:55:45:fe:10:5c:
                    2e:71:17:b6:66:86:94:8b:8a:b7:09:c6:11:96:c7:
                    94:b6:00:83:7c:48:bb:58:87:14:d7:97:16:2b:e0:
                    cc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E6:76:C2:D6:E5:1C:B0:4F:54:3E:79:02:E1:39:E0:75:64:72:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/917f5ad4-47d7-3271-825f-59142b33a285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:93:2f:18:14:b0:8b:d0:cd:50:1e:fa:5c:45:ff:0c:c9:a4:
         05:0e:b7:b3:e6:9e:89:2b:79:ea:05:66:36:d2:73:88:bd:3a:
         53:35:45:6d:9b:e0:0a:c2:b2:2f:61:a5:9d:74:bb:f1:c7:31:
         3a:d3:84:48:db:bd:ff:d3:01:58:d4:0c:cd:e9:9e:77:bc:e9:
         9d:f2:88:dd:f1:f7:73:ef:22:34:02:b2:c0:9a:94:19:18:88:
         63:13:af:f3:64:b4:3f:ed:03:22:be:f2:a2:9e:4f:cc:f0:5d:
         3c:6b:e9:e2:e4:7c:ef:fe:d4:a5:08:27:0d:4a:0e:c1:3b:97:
         b0:53:75:ba:28:c7:d1:85:f9:c7:fa:46:38:98:85:8e:d6:7c:
         73:88:67:b4:f0:1d:09:34:6c:93:83:0c:92:a6:b4:7c:12:3c:
         ed:db:a3:fe:7c:1f:ef:96:be:b6:42:3d:74:63:72:a3:ec:85:
         c9:56:81:eb:04:8e:72:b4:60:43:f5:9f:f6:bb:19:53:7b:21:
         5b:63:29:76:df:77:92:f8:20:c3:a4:5c:1f:da:34:df:a5:20:
         cc:27:0a:2d:f3:39:93:0d:55:02:ef:18:40:11:3b:88:d9:2f:
         12:dc:74:6e:7d:04:15:68:45:1a:8f:e6:87:26:0d:7f:52:cf:
         24:27:9f:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQdsCBlZyiHSFot5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTIwNDEyMDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
MzBkNDgwNjktY2NhNC00YWZkLWE5ZDMtNDVlNTZjMjA5ZTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeCkyJrDPFR67wwj4FcuhhOQfPEazA+VzQdb
SeDFkykPBh88Inz8MWbCEgRjvGuUCMmCSRwu1OGKxRK/puZ6z1L2TPZSErA9qLUq
qARtrlchqE++9V4XCTMJ5692tWTVIabS+HF46Mns6hW/Wfk2UV3k1FHJuwSX+pMM
MyoHx/jxoWPSHolJmlQ+IbSm7wIcGQp1b6AB/+qcfBy0pK46S9Sv4c71jyReKKf4
2qKD4NC17+pZJrAZPVL8JCXY7+cByZlXlU61VRa6E3UcFXMbXUYjhCfBMCauOVru
VUX+EFwucRe2ZoaUi4q3CcYRlseUtgCDfEi7WIcU15cWK+DMPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJPmdsLW5RywT1Q+eQLhOeB1ZHIEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvOTE3ZjVhZDQtNDdkNy0z
MjcxLTgyNWYtNTkxNDJiMzNhMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGTLxgUsIvQzVAe+lxF/wzJpAUOt7PmnokreeoFZjbSc4i9OlM1RW2b
4ArCsi9hpZ10u/HHMTrThEjbvf/TAVjUDM3pnne86Z3yiN3x93PvIjQCssCalBkY
iGMTr/NktD/tAyK+8qKeT8zwXTxr6eLkfO/+1KUIJw1KDsE7l7BTdboox9GF+cf6
RjiYhY7WfHOIZ7TwHQk0bJODDJKmtHwSPO3bo/58H++WvrZCPXRjcqPshclWgesE
jnK0YEP1n/a7GVN7IVtjKXbfd5L4IMOkXB/aNN+lIMwnCi3zOZMNVQLvGEARO4jZ
LxLcdG59BBVoRRqP5ocmDX9SzyQnnwo=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:11 2024 by rpki-client on console-fra.rpki-client.org