Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7999dae4-a6d8-35e2-9c45-cd4238cd3858.roa
File:                     7999dae4-a6d8-35e2-9c45-cd4238cd3858.roa (raw, json)
Hash identifier:          SalIRTXuZrhbkF0BsFTaeaW2SAXltAyt73hyHrgAPlA=
Subject key identifier:   C6:81:E9:85:B7:2F:0A:12:9F:25:D7:A6:AF:89:F8:C0:EB:47:5E:B7
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285837144DBEE6C1B6E0E168806800
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7999dae4-a6d8-35e2-9c45-cd4238cd3858.roa
Signing time:             Thu 18 Oct 2018 04:00:00 +0000
ROA not before:           Thu 18 Oct 2018 04:00:00 +0000
ROA not after:            Tue 29 Nov 2022 05:00:00 +0000
asID:                     14061
IP address blocks:        138.68.240.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:14:4d:be:e6:c1:b6:e0:e1:68:80:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Oct 18 04:00:00 2018 GMT
            Not After : Nov 29 05:00:00 2022 GMT
        Subject: CN=5a1f918b-6635-427f-ae92-e7c7291d9baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c6:ee:46:9f:70:3b:e7:bf:cd:03:be:b1:0f:
                    e7:80:93:a9:12:38:26:14:e8:22:a2:f1:df:8c:39:
                    8a:c8:e6:a1:f8:84:bb:42:a0:44:71:29:d7:4a:af:
                    30:85:51:b0:58:94:81:6f:08:f8:cc:30:f6:7f:d4:
                    a4:c4:cd:e6:f8:69:2a:ca:07:14:f9:16:2b:2b:23:
                    dc:95:4d:5c:95:dc:a8:aa:8c:fe:cb:93:0d:df:6a:
                    95:5c:78:e1:49:9f:29:1d:8b:1e:23:f1:b0:b3:d0:
                    34:a3:06:6f:df:46:03:b5:d0:c5:05:ee:90:63:cd:
                    d1:b0:af:bd:a7:03:25:f1:6b:d9:75:30:e6:e3:a8:
                    20:f0:e8:26:31:c5:d0:19:43:b8:da:4f:c2:76:c1:
                    2f:90:42:3e:22:7d:1a:61:98:ad:62:aa:8d:78:4d:
                    5d:d9:6a:17:ff:bf:08:98:3b:7d:32:d1:f2:1d:be:
                    cc:a0:81:1c:67:b2:8c:e0:1a:82:d4:a4:a7:e6:40:
                    0e:9f:ef:cf:76:fa:29:cc:be:27:4f:26:42:57:ac:
                    8f:98:4a:66:90:4d:06:60:23:62:f5:53:2c:31:99:
                    5f:b1:fa:78:03:8f:cc:c3:2c:5d:46:cd:cf:c9:46:
                    8e:d5:eb:cb:2c:4c:a4:fa:27:ea:3b:66:b3:a3:66:
                    d3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:81:E9:85:B7:2F:0A:12:9F:25:D7:A6:AF:89:F8:C0:EB:47:5E:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/7999dae4-a6d8-35e2-9c45-cd4238cd3858.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.68.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:dc:20:28:54:35:0e:94:1f:10:4e:3b:99:df:88:5c:6b:91:
         ba:b2:dc:8c:fc:b9:e7:7b:7c:d2:6a:da:ff:cf:63:4c:ec:e6:
         f2:60:5c:6b:5b:6f:c8:cf:ed:a9:dd:38:09:04:50:37:3b:c6:
         d2:50:ae:b8:b7:aa:eb:6a:20:34:a1:21:46:c2:04:94:17:e9:
         51:ca:94:93:b4:20:da:37:36:c3:3f:09:fa:d0:c3:41:15:14:
         76:87:48:27:1a:f8:03:71:87:a3:a1:8c:60:aa:87:82:12:9e:
         57:09:30:ec:64:9e:db:43:c2:1e:d6:99:a1:f1:60:f7:99:24:
         19:3f:ce:8a:2c:e8:50:5c:25:c5:6d:1f:d3:30:c7:bd:ca:97:
         67:af:9f:e2:5a:7c:67:f7:f4:c5:ad:5a:7f:e6:4b:70:2c:ec:
         af:8e:cf:8f:ee:cf:21:0e:5c:b3:f8:a0:eb:1d:10:11:3b:79:
         83:bd:f1:a6:4f:1b:c3:e1:de:39:f0:80:c6:fc:74:18:66:34:
         4a:b3:8c:d4:92:1b:e4:46:7b:a4:a1:a1:ef:10:8a:bf:76:59:
         ce:4d:ef:b4:f1:cc:e5:12:f3:fd:de:5e:7e:cd:c3:b2:20:6e:
         76:db:a9:96:ba:bc:94:38:33:98:87:0d:df:71:e6:5c:a0:ad:
         7c:04:a2:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDcUTb7mwbbg4WiAaAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTE4MTAxODA0MDAwMFoXDTIyMTEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
NWExZjkxOGItNjYzNS00MjdmLWFlOTItZTdjNzI5MWQ5YmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMbuRp9wO+e/zQO+sQ/ngJOpEjgmFOgiovHf
jDmKyOah+IS7QqBEcSnXSq8whVGwWJSBbwj4zDD2f9SkxM3m+GkqygcU+RYrKyPc
lU1cldyoqoz+y5MN32qVXHjhSZ8pHYseI/Gws9A0owZv30YDtdDFBe6QY83RsK+9
pwMl8WvZdTDm46gg8OgmMcXQGUO42k/CdsEvkEI+In0aYZitYqqNeE1d2WoX/78I
mDt9MtHyHb7MoIEcZ7KM4BqC1KSn5kAOn+/PdvopzL4nTyZCV6yPmEpmkE0GYCNi
9VMsMZlfsfp4A4/MwyxdRs3PyUaO1evLLEyk+ifqO2azo2bTWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMaB6YW3LwoSnyXXpq+J+MDrR163MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNzk5OWRhZTQtYTZkOC0z
NWUyLTljNDUtY2Q0MjM4Y2QzODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEikTwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA3cIChUNQ6UHxBOO5nfiFxrkbqy3Iz8ued7fNJq2v/PY0zs5vJgXGtb
b8jP7andOAkEUDc7xtJQrri3qutqIDShIUbCBJQX6VHKlJO0INo3NsM/CfrQw0EV
FHaHSCca+ANxh6OhjGCqh4ISnlcJMOxknttDwh7WmaHxYPeZJBk/zoos6FBcJcVt
H9Mwx73Kl2evn+JafGf39MWtWn/mS3As7K+Oz4/uzyEOXLP4oOsdEBE7eYO98aZP
G8Ph3jnwgMb8dBhmNEqzjNSSG+RGe6Shoe8Qir92Wc5N77TxzOUS8/3eXn7Nw7Ig
bnbbqZa6vJQ4M5iHDd9x5lygrXwEogo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:03 2023 by rpki-client on console-fra.rpki-client.org