Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cf4fcb14-ada4-3645-a397-179417773138.roa
File:                     cf4fcb14-ada4-3645-a397-179417773138.roa (raw, json)
Hash identifier:          RR9yOFrk9+keRbYgcHON3IrAHKbex/18AgO/XjdTvI0=
Subject key identifier:   81:CD:27:36:F0:24:C3:90:5F:FB:6A:52:8D:FC:27:A4:79:E8:3B:F4
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE502C7FB69F82FB2755998
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cf4fcb14-ada4-3645-a397-179417773138.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     577
IP address blocks:        184.150.96.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:02:c7:fb:69:f8:2f:b2:75:59:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=9e380467-b210-4e20-a2ab-5668592804da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:69:a6:da:54:c1:5c:99:ed:d5:77:80:1d:f2:
                    a0:5f:8f:e0:fe:b3:ec:68:24:2e:7d:20:f6:55:af:
                    46:ab:91:53:04:86:b1:05:83:6c:67:0e:c1:f9:a1:
                    ff:44:eb:ca:52:a4:44:1c:e1:6c:63:68:dc:03:9f:
                    67:aa:93:7a:1f:59:99:f9:66:f8:e0:9e:2f:05:17:
                    41:24:e2:38:ae:cd:38:c6:08:a1:65:b4:62:dd:db:
                    c5:ae:aa:29:a1:6a:61:70:de:6c:d4:77:d9:4b:01:
                    02:b2:34:9c:71:9f:d8:e3:91:1d:57:01:8b:31:d0:
                    2e:82:d3:3a:f7:7c:53:13:48:54:61:59:2a:39:e3:
                    33:51:f1:4d:9d:81:d8:85:e9:22:af:83:7f:17:14:
                    ad:f7:9d:d2:74:0f:2d:bd:9a:ca:a4:22:7f:9c:05:
                    29:37:16:21:53:9c:b9:46:74:e5:da:16:fa:82:4c:
                    76:39:e1:ba:54:89:69:df:35:43:12:20:e2:13:ee:
                    cf:75:df:89:67:3e:6c:22:56:4c:40:ae:97:53:fc:
                    65:eb:6b:d9:29:5a:db:00:b8:be:d9:d9:30:2d:c8:
                    d5:60:b0:7a:91:27:3a:50:b5:f1:b7:0f:ea:31:4d:
                    70:3e:41:33:6a:5c:98:f2:f0:06:61:92:31:8a:1b:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CD:27:36:F0:24:C3:90:5F:FB:6A:52:8D:FC:27:A4:79:E8:3B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/cf4fcb14-ada4-3645-a397-179417773138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9f:8f:c0:53:fc:d7:c8:d9:77:94:2c:4c:b4:bf:de:68:e6:
         f2:cd:ef:28:5c:bd:d1:b8:53:03:1a:21:71:86:af:62:0e:05:
         72:d8:f5:4b:32:5e:f2:0a:b4:ed:37:c7:8f:af:23:ba:ae:f3:
         f4:9f:e3:8d:b7:60:fa:51:ec:bf:50:3e:d1:cd:2a:2b:f5:f2:
         61:a3:e9:c2:68:a0:e1:ba:1a:3a:96:6d:25:1a:f2:9a:3c:7a:
         c1:25:30:f2:0a:bc:c7:24:e2:f6:4a:3b:0d:03:97:6b:a8:5b:
         c5:ac:54:f0:9e:a2:c4:d5:63:59:5b:02:6d:b7:da:77:7d:23:
         7b:0a:d6:f4:95:20:49:26:db:22:d0:b4:16:23:90:8a:af:c4:
         ac:f5:63:3f:9b:d5:5d:cb:21:65:9d:b5:39:f4:4a:04:16:7a:
         2a:ae:17:61:b0:e1:fa:0a:14:40:9b:83:f4:b8:2f:d8:e5:41:
         f6:4f:07:85:4b:a7:50:30:02:1c:a4:d8:c7:26:fd:fe:f6:ac:
         ad:16:cc:a7:63:b6:89:bc:d0:b3:e6:f3:05:ee:33:d8:15:be:
         4f:de:d1:fc:7d:be:c2:2c:26:14:2f:f3:22:27:2f:8b:b6:70:
         a1:3b:d2:55:af:75:36:2b:6c:b2:cd:14:9c:82:56:ad:56:a8:
         73:75:3e:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5QLH+2n4L7J1WZgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
OWUzODA0NjctYjIxMC00ZTIwLWEyYWItNTY2ODU5MjgwNGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGmm2lTBXJnt1XeAHfKgX4/g/rPsaCQufSD2
Va9Gq5FTBIaxBYNsZw7B+aH/ROvKUqREHOFsY2jcA59nqpN6H1mZ+Wb44J4vBRdB
JOI4rs04xgihZbRi3dvFrqopoWphcN5s1HfZSwECsjSccZ/Y45EdVwGLMdAugtM6
93xTE0hUYVkqOeMzUfFNnYHYhekir4N/FxSt953SdA8tvZrKpCJ/nAUpNxYhU5y5
RnTl2hb6gkx2OeG6VIlp3zVDEiDiE+7Pdd+JZz5sIlZMQK6XU/xl62vZKVrbALi+
2dkwLcjVYLB6kSc6ULXxtw/qMU1wPkEzalyY8vAGYZIxihvG2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIHNJzbwJMOQX/tqUo38J6R56Dv0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvY2Y0ZmNiMTQtYWRhNC0z
NjQ1LWEzOTctMTc5NDE3NzczMTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuJZgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAImfj8BT/NfI2XeULEy0v95o5vLN7yhcvdG4UwMaIXGGr2IOBXLY9Usy
XvIKtO03x4+vI7qu8/Sf4423YPpR7L9QPtHNKiv18mGj6cJooOG6GjqWbSUa8po8
esElMPIKvMck4vZKOw0Dl2uoW8WsVPCeosTVY1lbAm232nd9I3sK1vSVIEkm2yLQ
tBYjkIqvxKz1Yz+b1V3LIWWdtTn0SgQWeiquF2Gw4foKFECbg/S4L9jlQfZPB4VL
p1AwAhyk2Mcm/f72rK0WzKdjtom80LPm8wXuM9gVvk/e0fx9vsIsJhQv8yInL4u2
cKE70lWvdTYrbLLNFJyCVq1WqHN1Pqc=
-----END CERTIFICATE-----
Generated at Thu Jan 18 07:41:15 2024 by rpki-client on console-fra.rpki-client.org