Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8628064a-5ee7-33e1-9f56-75da36dda93f.roa
File:                     8628064a-5ee7-33e1-9f56-75da36dda93f.roa (raw, json)
Hash identifier:          ZDouPsw2p4QIcOAfR8c/TvGMlwcsj/WLdzkliUv45nY=
Subject key identifier:   73:E4:E9:D5:8D:6B:4C:C9:F3:D8:DB:52:7C:9F:AB:05:DF:90:77:EA
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285846191EC79D81CB132D9D45B280
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8628064a-5ee7-33e1-9f56-75da36dda93f.roa
Signing time:             Mon 03 Jun 2024 12:00:00 +0000
ROA not before:           Mon 03 Jun 2024 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        162.159.198.0/24 maxlen: 24
                          162.159.199.0/24 maxlen: 24
                          2606:4700:103::/48 maxlen: 48
                          2606:4700:104::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:19:1e:c7:9d:81:cb:13:2d:9d:45:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun  3 12:00:00 2024 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=5d3a841c-3c45-4574-add0-01d17d0a5ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:62:b6:f9:54:81:bc:df:f7:4b:5f:d1:ee:be:
                    57:15:b1:23:b7:98:03:b0:fa:fd:34:69:4e:23:cb:
                    a2:f6:d6:42:81:d1:84:09:36:a1:67:f5:41:c3:e7:
                    0a:6a:05:78:bb:bf:41:35:71:32:2c:b9:c8:08:de:
                    8d:4f:3b:1f:a5:7b:ff:dc:fe:d6:40:43:55:31:03:
                    1b:33:f1:32:00:58:2e:c7:e1:ad:36:dd:e0:a3:46:
                    dc:6c:76:c1:6a:00:8b:28:09:01:a3:2b:6d:c3:29:
                    cb:20:d2:8f:2f:78:e5:35:7c:27:79:49:a4:68:83:
                    7a:80:24:21:4e:8e:31:4a:f0:f8:09:4c:d9:13:49:
                    09:a2:3c:f7:91:b8:ef:d9:c2:81:f6:41:9a:95:10:
                    dd:fc:23:00:27:45:42:3e:5e:fa:46:cd:b4:41:55:
                    f8:30:11:a1:52:55:4f:d5:18:e0:66:f5:66:65:e5:
                    ea:11:11:a8:43:a0:fb:15:12:f5:24:0c:e5:fc:9d:
                    39:4e:e0:8c:69:d6:1f:b2:64:df:1b:64:66:f6:91:
                    30:b7:83:39:1a:16:45:2d:7b:c6:7c:17:12:4c:8e:
                    68:16:a5:7c:3a:ce:26:e6:17:3b:5b:60:b3:67:9d:
                    5f:f8:c0:b1:05:f8:6a:12:14:32:56:f8:e0:04:1a:
                    a6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E4:E9:D5:8D:6B:4C:C9:F3:D8:DB:52:7C:9F:AB:05:DF:90:77:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8628064a-5ee7-33e1-9f56-75da36dda93f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.198.0/23
                IPv6:
                  2606:4700:103::-2606:4700:104:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:bd:74:17:f8:cf:b2:7a:ab:67:b0:a5:91:2d:9b:fc:a7:9f:
         0f:5e:57:f6:6b:93:4a:fe:32:f4:72:fd:8d:b9:14:d6:df:d1:
         83:32:1f:f5:aa:92:b3:e8:d7:c6:41:4e:e0:9b:6b:2e:71:90:
         b4:1b:a4:3a:08:8c:e5:e3:ee:6c:24:ec:da:95:e6:cc:4d:a1:
         df:32:04:58:d7:98:bb:ca:8a:cf:0f:6c:58:8a:3d:00:cf:02:
         4d:0a:9b:a4:71:8b:a2:b0:af:79:4b:5c:18:3a:ad:c8:61:ca:
         4e:c5:a6:b5:37:f8:b1:48:d3:99:b3:c2:6f:03:82:d0:03:be:
         00:fa:37:91:b0:12:4b:f7:71:30:be:5d:1d:73:96:b2:33:85:
         12:44:45:9b:e1:7c:1b:38:75:d9:eb:66:42:c8:20:69:66:f8:
         19:7b:c2:fc:cd:8f:ee:60:1b:93:89:a2:ff:8d:fc:62:75:8e:
         7a:24:36:c6:d3:57:66:fe:e1:2e:a2:9d:06:43:5f:ed:d1:9e:
         7d:7d:3d:0d:d5:7a:8a:6d:90:36:ad:ce:86:8e:cb:60:8f:01:
         67:df:49:b5:95:e3:eb:ed:d6:23:c7:da:62:a6:72:13:bd:43:
         c9:ba:56:0d:6b:72:9f:26:5b:df:de:af:36:a5:d7:b4:10:7a:
         17:db:10:7f
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWEYZHsedgcsTLZ1FsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MDYwMzEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NWQzYTg0MWMtM2M0NS00NTc0LWFkZDAtMDFkMTdkMGE1YWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWK2+VSBvN/3S1/R7r5XFbEjt5gDsPr9NGlO
I8ui9tZCgdGECTahZ/VBw+cKagV4u79BNXEyLLnICN6NTzsfpXv/3P7WQENVMQMb
M/EyAFgux+GtNt3go0bcbHbBagCLKAkBoyttwynLINKPL3jlNXwneUmkaIN6gCQh
To4xSvD4CUzZE0kJojz3kbjv2cKB9kGalRDd/CMAJ0VCPl76Rs20QVX4MBGhUlVP
1RjgZvVmZeXqERGoQ6D7FRL1JAzl/J05TuCMadYfsmTfG2Rm9pEwt4M5GhZFLXvG
fBcSTI5oFqV8Os4m5hc7W2CzZ51f+MCxBfhqEhQyVvjgBBqm6QIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFHPk6dWNa0zJ89jbUnyfqwXfkHfqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODYyODA2NGEtNWVlNy0z
M2UxLTlmNTYtNzVkYTM2ZGRhOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQBop/GMBoE
AgACMBQwEgMHACYGRwABAwMHACYGRwABBDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCavXQX+M+yeqtnsKWR
LZv8p58PXlf2a5NK/jL0cv2NuRTW39GDMh/1qpKz6NfGQU7gm2sucZC0G6Q6CIzl
4+5sJOzalebMTaHfMgRY15i7yorPD2xYij0AzwJNCpukcYuisK95S1wYOq3IYcpO
xaa1N/ixSNOZs8JvA4LQA74A+jeRsBJL93Ewvl0dc5ayM4USREWb4XwbOHXZ62ZC
yCBpZvgZe8L8zY/uYBuTiaL/jfxidY56JDbG01dm/uEuop0GQ1/t0Z59fT0N1XqK
bZA2rc6GjstgjwFn30m1lePr7dYjx9pipnITvUPJulYNa3KfJlvf3q82pde0EHoX
2xB/
-----END CERTIFICATE-----