Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/76509fbb-50ff-37c0-8bde-9fd3618c631d.roa
File:                     76509fbb-50ff-37c0-8bde-9fd3618c631d.roa (raw, json)
Hash identifier:          ljf/zltnnG0PiW0vAarY3DhvGZGwMTIXHbmBN6Z7BMU=
Subject key identifier:   FF:A3:B5:8A:31:AF:08:C3:CA:ED:E7:11:6D:2B:4B:CD:9B:CE:B0:2B
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F432858436675097B56D384C2BF28D340
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/76509fbb-50ff-37c0-8bde-9fd3618c631d.roa
Signing time:             Sun 01 Oct 2023 01:00:23 +0000
ROA not before:           Sun 01 Oct 2023 01:00:23 +0000
ROA not after:            Sat 30 Dec 2023 02:00:23 +0000
asID:                     7018
IP address blocks:        72.14.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:66:75:09:7b:56:d3:84:c2:bf:28:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Oct  1 01:00:23 2023 GMT
            Not After : Dec 30 02:00:23 2023 GMT
        Subject: CN=49c46d5d-19a2-4d7d-8bd2-552ec847d018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d5:ce:b5:d7:98:05:51:15:bd:a3:32:59:82:
                    78:69:94:98:d2:3c:3a:57:23:fd:b1:aa:a6:9d:e9:
                    f0:0c:1b:36:51:ff:c2:f2:8e:5f:91:ef:fa:fc:3a:
                    72:1b:22:83:85:6b:b8:d2:38:e7:20:03:e0:99:b6:
                    35:c9:66:e6:9d:3b:53:67:e0:44:3c:a0:57:4a:0b:
                    3b:28:50:6e:fb:67:6e:c0:8c:21:ad:c9:7c:c2:94:
                    17:da:6e:94:98:af:05:4c:fe:8c:cf:7b:38:fb:a6:
                    91:0a:97:e1:c1:54:ad:1b:4f:1a:97:42:31:ed:9e:
                    54:c7:b2:51:ff:b1:62:63:c1:92:43:07:75:23:9a:
                    21:16:28:e2:55:6a:43:79:e5:db:6c:54:90:df:d9:
                    55:48:34:34:e1:10:bc:12:81:c7:af:f3:49:13:05:
                    ac:d1:3e:e3:f2:06:09:fc:5e:c3:05:3d:bc:8e:f2:
                    07:07:96:64:47:1d:70:2b:a5:72:01:3b:91:58:10:
                    94:d3:71:21:94:66:cf:d1:db:ee:0f:33:30:1f:da:
                    a6:f8:13:bd:11:97:d7:99:53:6b:1d:6d:7f:87:ff:
                    1f:5d:e5:14:7a:a1:d9:39:2c:64:9f:db:c9:57:25:
                    6c:94:1d:9c:d8:59:90:98:b8:6c:da:d6:cf:25:85:
                    4d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A3:B5:8A:31:AF:08:C3:CA:ED:E7:11:6D:2B:4B:CD:9B:CE:B0:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/76509fbb-50ff-37c0-8bde-9fd3618c631d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:78:d4:47:54:a8:e5:fa:c0:0d:93:52:5f:56:4d:f2:6e:d6:
         9a:90:7e:5a:13:33:ab:7a:ec:35:cf:d5:82:84:d5:cd:ed:a8:
         fa:9a:29:f0:12:49:1b:6c:5a:5f:5b:58:ca:e8:ff:d2:1d:8b:
         23:d8:72:28:90:06:dc:76:1f:54:c5:94:33:ea:17:e8:32:6c:
         55:e5:71:1b:7c:7f:16:06:cf:50:72:6a:3e:9f:21:47:2f:7d:
         48:37:db:ad:5c:f0:8b:46:f8:4a:42:ae:cc:7a:7b:56:a4:fc:
         2f:44:ce:a8:e9:da:7e:15:e6:4f:6e:1b:9f:af:0a:ad:24:7f:
         ba:7a:1f:6c:53:73:7b:fa:a4:dc:c9:52:a5:a8:1c:99:33:4f:
         be:55:13:a9:bb:51:bd:cf:68:96:ff:63:2d:a0:cd:a0:97:70:
         ab:63:3f:a3:72:5f:fc:42:89:0d:a4:25:c6:a1:77:d7:8d:d8:
         67:0a:20:06:d5:0e:0b:c4:8d:0b:84:b0:88:9d:63:91:a1:4e:
         99:d8:68:cc:86:cc:1a:c5:02:1b:8e:a4:0e:49:3c:a4:8b:fe:
         4b:a1:99:c0:b4:76:cf:b9:a8:cd:19:71:8f:55:70:22:1b:85:
         87:04:2f:13:4a:f9:85:23:01:8a:bb:fb:de:51:3e:fe:93:73:
         b0:ad:1a:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWENmdQl7VtOEwr8o00AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTIzMTAwMTAxMDAyM1oXDTIzMTIzMDAyMDAyM1owLzEtMCsGA1UEAxMk
NDljNDZkNWQtMTlhMi00ZDdkLThiZDItNTUyZWM4NDdkMDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9XOtdeYBVEVvaMyWYJ4aZSY0jw6VyP9saqm
nenwDBs2Uf/C8o5fke/6/DpyGyKDhWu40jjnIAPgmbY1yWbmnTtTZ+BEPKBXSgs7
KFBu+2duwIwhrcl8wpQX2m6UmK8FTP6Mz3s4+6aRCpfhwVStG08al0Ix7Z5Ux7JR
/7FiY8GSQwd1I5ohFijiVWpDeeXbbFSQ39lVSDQ04RC8EoHHr/NJEwWs0T7j8gYJ
/F7DBT28jvIHB5ZkRx1wK6VyATuRWBCU03EhlGbP0dvuDzMwH9qm+BO9EZfXmVNr
HW1/h/8fXeUUeqHZOSxkn9vJVyVslB2c2FmQmLhs2tbPJYVNnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP+jtYoxrwjDyu3nEW0rS82bzrArMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNzY1MDlmYmItNTBmZi0z
N2MwLThiZGUtOWZkMzYxOGM2MzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEF41EdUqOX6wA2TUl9WTfJu1pqQfloTM6t67DXP1YKE1c3tqPqaKfAS
SRtsWl9bWMro/9IdiyPYciiQBtx2H1TFlDPqF+gybFXlcRt8fxYGz1Byaj6fIUcv
fUg3261c8ItG+EpCrsx6e1ak/C9Ezqjp2n4V5k9uG5+vCq0kf7p6H2xTc3v6pNzJ
UqWoHJkzT75VE6m7Ub3PaJb/Yy2gzaCXcKtjP6NyX/xCiQ2kJcahd9eN2GcKIAbV
DgvEjQuEsIidY5GhTpnYaMyGzBrFAhuOpA5JPKSL/kuhmcC0ds+5qM0ZcY9VcCIb
hYcELxNK+YUjAYq7+95RPv6Tc7CtGsY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:52:05 2024 by rpki-client on console-fra.rpki-client.org