Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/232e317a-4437-3cd8-bf9e-765b38cdb68f.roa
File:                     232e317a-4437-3cd8-bf9e-765b38cdb68f.roa (raw, json)
Hash identifier:          40vtSvK8SDSb3EkVLgd1kGqJ2ToUCl4Ai2wBfLOXf1Q=
Subject key identifier:   E1:3E:97:DD:6B:9E:12:0B:8C:F3:5A:27:02:FB:87:8E:51:A4:C5:CF
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732A4DFE05
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/232e317a-4437-3cd8-bf9e-765b38cdb68f.roa
Signing time:             Tue 07 Jul 2020 17:23:41 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Mon 10 Oct 2022 04:00:00 +0000
asID:                     20473
IP address blocks:        108.165.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:4d:fe:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Oct 10 04:00:00 2022 GMT
        Subject: CN=62102304-afd6-4dac-a1ce-f56ef2dfff08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:46:29:17:8e:3b:8c:3f:96:fc:d0:23:69:d0:
                    e9:c6:e4:57:e2:c8:f5:d3:ed:3e:3f:fc:58:c8:e0:
                    c8:0f:bc:f7:9b:b3:ac:46:c7:5c:9a:83:3d:fa:f6:
                    52:45:22:19:e7:d6:58:27:0a:59:d1:96:8b:66:10:
                    a8:24:db:22:51:ab:66:34:44:2b:ac:62:29:8e:70:
                    f6:e6:cf:6d:88:4d:33:3a:10:e1:09:ae:68:ec:a4:
                    e1:e4:b1:4e:13:3a:f1:9d:76:bd:09:37:b6:db:2e:
                    58:1f:a5:89:73:90:cf:17:66:34:48:00:90:48:9b:
                    89:85:7b:a6:09:19:b6:10:39:0c:6a:24:4e:de:5e:
                    5e:4f:c1:7a:31:a8:b4:a3:b9:14:4c:49:1f:c9:62:
                    93:bd:38:e4:bc:f6:b0:ab:da:a5:0c:8d:97:8b:a5:
                    d7:17:44:1e:22:20:a8:e1:b3:f7:05:ff:d3:d1:7e:
                    51:5c:6d:48:11:0a:3e:1a:57:50:d3:f2:17:51:a1:
                    b7:aa:17:b8:b1:9e:c9:34:de:68:68:97:b8:60:be:
                    7b:72:1c:0f:ba:08:c2:e9:f6:37:24:25:45:ef:e6:
                    cd:00:54:7d:8e:b5:87:0c:88:4c:77:6e:bc:ff:ec:
                    8f:33:9d:20:e2:d8:1c:2e:69:48:ff:e5:a7:1b:bb:
                    02:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3E:97:DD:6B:9E:12:0B:8C:F3:5A:27:02:FB:87:8E:51:A4:C5:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/232e317a-4437-3cd8-bf9e-765b38cdb68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:db:4f:d3:57:8b:ca:76:58:1a:64:a4:df:9c:ac:b2:7d:1c:
         1a:70:25:7a:ae:09:58:63:df:bc:7c:74:be:e0:f5:6d:2c:94:
         c2:78:e0:de:97:ef:70:70:cb:ea:4c:47:be:12:f5:8d:09:ba:
         8e:aa:1d:da:18:2c:e3:3a:2f:53:02:2c:1d:8a:11:ce:8f:ad:
         85:8e:9b:c2:19:8d:8b:c7:bd:b8:29:3f:68:d2:fb:80:5e:26:
         9d:90:35:85:24:5c:2a:cf:c3:38:32:bb:d0:f3:76:54:08:3e:
         61:a8:d8:83:f8:a7:84:70:01:a6:2a:45:f7:1d:42:a1:ab:5d:
         94:d6:6d:aa:4c:e2:87:50:f2:4b:53:65:86:c6:58:99:0b:9b:
         ac:13:05:a2:e4:cb:cf:d3:7a:6c:b5:f2:34:68:76:4a:36:85:
         43:86:22:81:d1:1c:b8:86:fd:98:ed:30:cd:41:45:0a:da:82:
         ff:79:26:7c:95:de:1e:ac:b1:c6:59:37:1b:a2:da:81:1e:39:
         c6:ae:0f:83:17:42:07:09:13:78:73:c0:6b:b3:5f:91:e1:54:
         91:5b:0e:34:6c:20:08:15:54:96:2d:25:a2:62:79:93:ee:47:
         db:c2:24:c6:14:f2:3a:0f:0d:46:77:95:0a:33:05:f1:f3:89:
         49:8d:ca:8c
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcypN/gUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2UyMGMw
OTAeFw0yMDA1MDUwNDAwMDBaFw0yMjEwMTAwNDAwMDBaMC8xLTArBgNVBAMTJDYy
MTAyMzA0LWFmZDYtNGRhYy1hMWNlLWY1NmVmMmRmZmYwODCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKRGKReOO4w/lvzQI2nQ6cbkV+LI9dPtPj/8WMjg
yA+895uzrEbHXJqDPfr2UkUiGefWWCcKWdGWi2YQqCTbIlGrZjREK6xiKY5w9ubP
bYhNMzoQ4QmuaOyk4eSxThM68Z12vQk3ttsuWB+liXOQzxdmNEgAkEibiYV7pgkZ
thA5DGokTt5eXk/BejGotKO5FExJH8lik7045Lz2sKvapQyNl4ul1xdEHiIgqOGz
9wX/09F+UVxtSBEKPhpXUNPyF1Ght6oXuLGeyTTeaGiXuGC+e3IcD7oIwun2NyQl
Re/mzQBUfY61hwyITHduvP/sjzOdIOLYHC5pSP/lpxu7ApsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBThPpfda54SC4zzWicC+4eOUaTFzzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEy
YTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIwYzA5LzIzMmUzMTdhLTQ0MzctM2Nk
OC1iZjllLTc2NWIzOGNkYjY4Zi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzY2ZGVhMmE1LTgzN2QtNDZkOC04Zjhl
LTk0NDdlY2UyMGMwOS82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBj
MDkuY3JsMB8GA1UdIwQYMBaAFMOGrYv0GUs1lCSbkLqdgBHCCHHJMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2Vj
ZTIwYzA5LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGyl9zBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAOdtP01eLynZYGmSk35yssn0cGnAleq4JWGPfvHx0vuD1bSyUwnjg3pfvcHDL
6kxHvhL1jQm6jqod2hgs4zovUwIsHYoRzo+thY6bwhmNi8e9uCk/aNL7gF4mnZA1
hSRcKs/DODK70PN2VAg+YajYg/inhHABpipF9x1CoatdlNZtqkzih1DyS1NlhsZY
mQubrBMFouTLz9N6bLXyNGh2SjaFQ4YigdEcuIb9mO0wzUFFCtqC/3kmfJXeHqyx
xlk3G6LagR45xq4PgxdCBwkTeHPAa7NfkeFUkVsONGwgCBVUli0lomJ5k+5H28Ik
xhTyOg8NRneVCjMF8fOJSY3KjA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-ams.rpki-client.org