Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2abe080c-2af6-3eb0-8ea0-943c23f69aef.roa
File:                     2abe080c-2af6-3eb0-8ea0-943c23f69aef.roa (raw, json)
Hash identifier:          rha3ZNLaetpUwcQfzxCW7WLtd0xFh4CZHuhr+RS1DYs=
Subject key identifier:   92:50:F6:70:28:2E:00:F5:9D:4F:B7:03:DD:CE:E5:BB:AC:55:C9:25
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285843AB282435C03688D994A29A48
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2abe080c-2af6-3eb0-8ea0-943c23f69aef.roa
Signing time:             Tue 24 Oct 2023 12:00:00 +0000
ROA not before:           Tue 24 Oct 2023 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        172.69.9.0/24 maxlen: 24
                          172.69.10.0/24 maxlen: 24
                          172.69.11.0/24 maxlen: 24
                          172.69.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ab:28:24:35:c0:36:88:d9:94:a2:9a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Oct 24 12:00:00 2023 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=0407119f-e078-486d-83f5-67426587e081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:48:e5:aa:65:67:aa:8f:09:68:23:07:50:1a:
                    46:ec:28:55:83:15:f8:35:bb:89:7f:13:4e:3e:02:
                    f0:e3:5e:dc:bb:f4:2a:f8:2d:1b:32:f5:be:cd:25:
                    d0:d9:7a:79:b2:69:d0:9e:f9:f6:36:8a:99:39:44:
                    6a:7c:e0:ea:af:5e:0c:df:64:f4:05:05:26:dc:8e:
                    0d:69:4b:a5:62:e1:ac:a5:5b:45:7f:1d:a7:c1:08:
                    0e:15:6f:06:32:13:3e:dc:0f:dc:d6:69:66:8a:87:
                    1d:d2:a4:c8:a7:5c:01:50:7b:b7:e0:0b:ff:87:2e:
                    1d:02:b8:24:a8:7c:bd:ae:86:cd:63:28:33:09:11:
                    56:3f:1a:b2:af:13:fa:a5:41:c8:75:8b:0b:07:55:
                    3c:42:d7:b2:06:79:a9:b5:ee:a8:8d:d0:3f:b0:0c:
                    ff:ad:65:71:66:32:3c:a4:17:46:32:43:d1:5b:e5:
                    79:1a:42:5d:ec:1f:19:94:32:0a:7b:d4:24:0f:d7:
                    fb:36:d7:1e:95:e4:69:39:7c:09:5a:5c:57:3b:05:
                    a0:1e:86:4c:8c:b8:52:7d:0e:e2:74:6b:6f:86:88:
                    b5:11:9c:d5:58:d5:91:bc:a2:f2:2e:d9:fe:12:dc:
                    51:de:32:8b:90:9a:e2:93:55:60:da:c6:ec:b2:12:
                    47:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:50:F6:70:28:2E:00:F5:9D:4F:B7:03:DD:CE:E5:BB:AC:55:C9:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2abe080c-2af6-3eb0-8ea0-943c23f69aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.9.0-172.69.11.255
                  172.69.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:38:86:97:7d:ff:8a:bf:ca:5d:19:6e:5a:2d:f4:aa:c3:c0:
         f0:89:7e:e2:5e:ac:9d:c9:04:b8:96:a3:70:f2:b8:79:fd:86:
         de:09:21:a0:ce:28:f4:d3:00:a6:0e:9a:37:cf:b7:c2:df:ff:
         0c:ef:0a:e1:7e:1c:dd:71:04:c5:06:92:4b:05:49:82:e5:a1:
         87:14:da:9f:3f:09:0a:a5:88:d5:92:96:ef:96:d3:d2:17:a6:
         7f:e8:dd:2b:ad:06:d4:58:cc:bb:80:f7:ff:f1:a1:0d:1a:03:
         09:0a:21:07:7a:0c:59:d8:1f:0e:2a:72:58:32:58:bc:28:e8:
         de:d8:2c:c5:92:d1:90:24:ff:86:61:5a:6f:71:11:47:dd:f9:
         ad:14:a1:63:a3:74:ea:5a:5c:9f:30:ca:97:3c:a1:74:d7:d0:
         4f:fa:a1:c5:23:7e:e8:d8:e3:1d:2b:24:97:5b:70:1c:72:a5:
         e1:9f:2d:2c:a1:27:de:c0:28:2c:0f:94:99:c6:7e:3a:5f:7f:
         ec:98:04:34:39:48:15:8d:8f:b6:35:a4:36:64:51:dd:a8:88:
         f3:cb:a4:da:89:21:db:03:bb:24:00:ea:dd:2b:e2:7c:14:8e:
         c5:83:3b:00:cb:73:5a:aa:f4:f1:44:04:91:9d:ea:80:97:8e:
         39:0b:e7:3b
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEOrKCQ1wDaI2ZSimkgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTIzMTAyNDEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MDQwNzExOWYtZTA3OC00ODZkLTgzZjUtNjc0MjY1ODdlMDgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEjlqmVnqo8JaCMHUBpG7ChVgxX4NbuJfxNO
PgLw417cu/Qq+C0bMvW+zSXQ2Xp5smnQnvn2NoqZOURqfODqr14M32T0BQUm3I4N
aUulYuGspVtFfx2nwQgOFW8GMhM+3A/c1mlmiocd0qTIp1wBUHu34Av/hy4dArgk
qHy9robNYygzCRFWPxqyrxP6pUHIdYsLB1U8QteyBnmpte6ojdA/sAz/rWVxZjI8
pBdGMkPRW+V5GkJd7B8ZlDIKe9QkD9f7NtceleRpOXwJWlxXOwWgHoZMjLhSfQ7i
dGtvhoi1EZzVWNWRvKLyLtn+EtxR3jKLkJrik1Vg2sbsshJHvQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFJJQ9nAoLgD1nU+3A93O5busVcklMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmFiZTA4MGMtMmFmNi0z
ZWIwLThlYTAtOTQzYzIzZjY5YWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACsRQkD
BAKsRQgDBACsRXIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAhTiGl33/ir/KXRluWi30qsPA8Il+4l6snckE
uJajcPK4ef2G3gkhoM4o9NMApg6aN8+3wt//DO8K4X4c3XEExQaSSwVJguWhhxTa
nz8JCqWI1ZKW75bT0hemf+jdK60G1FjMu4D3//GhDRoDCQohB3oMWdgfDipyWDJY
vCjo3tgsxZLRkCT/hmFab3ERR935rRShY6N06lpcnzDKlzyhdNfQT/qhxSN+6Njj
HSskl1twHHKl4Z8tLKEn3sAoLA+UmcZ+Ol9/7JgENDlIFY2PtjWkNmRR3aiI88uk
2okh2wO7JADq3SvifBSOxYM7AMtzWqr08UQEkZ3qgJeOOQvnOw==
-----END CERTIFICATE-----
Generated at Mon Sep 16 08:56:53 2024 by rpki-client on console-ams.rpki-client.org