Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/26f5dcd6-9cd4-355a-a9ac-40bb0f876dcd.roa
File:                     26f5dcd6-9cd4-355a-a9ac-40bb0f876dcd.roa (raw, json)
Hash identifier:          tZN2I3UiMmCske6EdWbzLqzz7yzHGCR+MkpFGgsb9pI=
Subject key identifier:   80:70:4B:C2:A1:B8:A1:82:0A:4A:D8:43:D1:50:26:EA:34:3F:D5:A6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583C2A5F7CC784AC6BA0915B1FC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/26f5dcd6-9cd4-355a-a9ac-40bb0f876dcd.roa
Signing time:             Mon 06 Dec 2021 05:00:00 +0000
ROA not before:           Mon 06 Dec 2021 05:00:00 +0000
ROA not after:            Sat 09 Mar 2024 05:00:00 +0000
asID:                     395973
IP address blocks:        104.134.158.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:2a:5f:7c:c7:84:ac:6b:a0:91:5b:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Dec  6 05:00:00 2021 GMT
            Not After : Mar  9 05:00:00 2024 GMT
        Subject: CN=7f8bf565-9c5d-4c84-86f4-a20d6c556318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a1:a8:b6:a3:da:c2:8b:0d:8f:ff:02:0a:75:
                    6e:03:b5:e9:5e:1f:71:8c:fc:02:05:ad:33:4c:3d:
                    57:2c:20:b7:73:7c:d1:f7:21:3d:5e:6f:5b:53:9f:
                    c5:f6:57:58:9f:69:59:3f:29:b7:a9:6b:3d:61:c3:
                    86:1b:cc:d6:36:9c:fc:09:09:20:9c:c4:57:ca:35:
                    79:04:98:e0:66:f8:b0:e6:a0:13:64:e8:fb:ca:49:
                    ab:ea:ae:83:43:61:fa:b4:64:01:2f:93:ad:be:9c:
                    24:1f:4a:e0:3a:37:fd:a4:62:df:fa:7d:f7:56:cf:
                    87:98:51:85:7a:c4:88:4b:9c:00:bc:3c:6a:0f:39:
                    14:ba:aa:4b:d0:81:b1:9a:1c:03:3d:77:85:dc:b9:
                    a6:85:97:e3:fd:88:23:67:96:a4:ea:8c:43:5a:8c:
                    d9:34:10:c0:e8:e7:aa:12:03:f2:42:c6:0f:ad:54:
                    dd:b3:e9:de:7f:fc:69:24:55:d2:1e:ab:8c:e8:33:
                    b1:85:44:70:4b:f4:b1:b1:5b:9c:b0:cc:80:c5:1e:
                    a8:dc:9b:9d:67:ef:c8:85:45:c7:4b:b9:36:50:ad:
                    3f:3f:34:e9:c9:09:b3:0a:b9:5e:8e:18:99:59:1e:
                    ac:26:32:b4:64:ee:e8:7d:9c:00:0a:5b:69:e2:18:
                    88:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:70:4B:C2:A1:B8:A1:82:0A:4A:D8:43:D1:50:26:EA:34:3F:D5:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/26f5dcd6-9cd4-355a-a9ac-40bb0f876dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:6f:08:38:5f:bb:d5:42:87:2e:22:e2:56:8b:24:4e:a3:be:
         45:b3:2e:01:14:f6:bc:23:6f:cd:b0:e7:e1:4a:96:10:c5:04:
         80:c2:53:7a:ab:8d:e4:d5:24:57:64:8b:ef:f4:19:6f:07:71:
         d4:d7:45:65:99:5b:ec:fc:5e:58:7c:a7:bd:42:73:ae:35:a9:
         ea:06:44:8d:dc:81:f4:2b:02:f0:ac:93:52:b9:2f:42:a2:e5:
         e4:7e:06:d5:36:6f:a3:af:0c:5a:e4:5c:34:07:db:d0:6a:52:
         94:6c:78:a5:0d:a0:2e:73:66:72:d0:fa:ac:a4:ce:03:e8:b3:
         80:b4:b2:a9:17:b1:37:84:03:6c:87:b0:3e:f6:37:4a:05:25:
         55:9b:c9:4a:b7:6b:b6:5c:5f:6f:4d:06:96:13:66:e4:08:5d:
         be:d4:9f:a2:96:a7:d8:10:b8:0e:c1:b9:4e:bf:d4:33:49:1f:
         32:05:29:37:4f:b8:82:47:a2:a1:13:1a:29:f2:21:f2:f6:66:
         f9:f9:fb:9d:60:e9:b2:e6:58:62:33:e0:c8:85:f8:25:ab:cd:
         68:5f:13:38:1a:14:fa:2e:d3:2e:12:76:ad:6b:b5:80:b1:07:
         14:87:f6:ef:9c:38:c3:9d:c0:5d:cb:dd:42:4c:c4:44:01:3b:
         59:c6:eb:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDwqX3zHhKxroJFbH8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMTIwNjA1MDAwMFoXDTI0MDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk
N2Y4YmY1NjUtOWM1ZC00Yzg0LTg2ZjQtYTIwZDZjNTU2MzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qGotqPawosNj/8CCnVuA7XpXh9xjPwCBa0z
TD1XLCC3c3zR9yE9Xm9bU5/F9ldYn2lZPym3qWs9YcOGG8zWNpz8CQkgnMRXyjV5
BJjgZviw5qATZOj7ykmr6q6DQ2H6tGQBL5OtvpwkH0rgOjf9pGLf+n33Vs+HmFGF
esSIS5wAvDxqDzkUuqpL0IGxmhwDPXeF3LmmhZfj/YgjZ5ak6oxDWozZNBDA6Oeq
EgPyQsYPrVTds+nef/xpJFXSHquM6DOxhURwS/SxsVucsMyAxR6o3JudZ+/IhUXH
S7k2UK0/PzTpyQmzCrlejhiZWR6sJjK0ZO7ofZwACltp4hiIcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBwS8KhuKGCCkrYQ9FQJuo0P9WmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjZmNWRjZDYtOWNkNC0z
NTVhLWE5YWMtNDBiYjBmODc2ZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJvCDhfu9VChy4i4laLJE6jvkWzLgEU9rwjb82w5+FKlhDFBIDCU3qr
jeTVJFdki+/0GW8HcdTXRWWZW+z8Xlh8p71Cc641qeoGRI3cgfQrAvCsk1K5L0Ki
5eR+BtU2b6OvDFrkXDQH29BqUpRseKUNoC5zZnLQ+qykzgPos4C0sqkXsTeEA2yH
sD72N0oFJVWbyUq3a7ZcX29NBpYTZuQIXb7Un6KWp9gQuA7BuU6/1DNJHzIFKTdP
uIJHoqETGinyIfL2Zvn5+51g6bLmWGIz4MiF+CWrzWhfEzgaFPou0y4Sdq1rtYCx
BxSH9u+cOMOdwF3L3UJMxEQBO1nG60I=
-----END CERTIFICATE-----
Generated at Sat Mar 9 05:38:57 2024 by rpki-client on console-fra.rpki-client.org