Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/aa0d5e9f-0ef5-3b3c-a1ab-a0e29ccfcb09.roa
File:                     aa0d5e9f-0ef5-3b3c-a1ab-a0e29ccfcb09.roa (raw, json)
Hash identifier:          HClP6lHJ2jECclXYK4XE+nujFpXBS22R9efVU9e+TpI=
Subject key identifier:   16:2B:C6:20:BC:81:4B:C8:C5:AA:38:F1:CC:91:49:FE:E1:E0:4A:7C
Certificate issuer:       /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial:       010D0C9F4328584221384ECE83CD1EE5AA898600
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/aa0d5e9f-0ef5-3b3c-a1ab-a0e29ccfcb09.roa
Signing time:             Tue 06 Jun 2023 13:00:19 +0000
ROA not before:           Tue 06 Jun 2023 13:00:19 +0000
ROA not after:            Mon 04 Sep 2023 13:00:19 +0000
asID:                     13638
IP address blocks:        76.76.40.0/21 maxlen: 21
                          76.76.32.0/21 maxlen: 21
                          76.76.32.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:21:38:4e:ce:83:cd:1e:e5:aa:89:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
        Validity
            Not Before: Jun  6 13:00:19 2023 GMT
            Not After : Sep  4 13:00:19 2023 GMT
        Subject: CN=8fec1492-e27c-40fa-90f6-c858260921ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d3:66:93:1a:9a:31:9a:a7:80:c1:ab:80:c4:
                    0e:c9:f5:a8:9b:37:42:58:1d:98:2f:4b:ac:0f:e2:
                    91:6e:3a:04:0b:bc:5c:5d:47:d9:04:52:bc:3d:3f:
                    66:d3:5f:35:7c:b9:74:4f:a4:00:92:dc:1a:78:c5:
                    15:fd:a7:de:c8:96:98:f8:86:d6:ee:28:39:c8:5c:
                    e0:22:cc:43:3a:d1:ec:d7:3d:31:80:2c:b9:90:cc:
                    93:4f:70:bd:9d:30:8a:d7:fb:f1:36:45:32:f8:6d:
                    15:b8:05:0a:98:50:7d:40:78:5f:57:a3:d4:9e:7e:
                    34:4d:c1:80:3f:d4:3a:13:d9:44:50:75:3e:dc:aa:
                    ee:17:84:9a:20:02:3b:81:e0:34:d8:d3:6c:66:f3:
                    6d:c8:2e:58:98:1e:7c:c9:72:70:a8:f5:94:ad:72:
                    47:3e:96:88:0b:cf:f0:66:2d:89:f2:c7:1f:bd:ef:
                    9d:33:f5:a8:6e:8c:5f:f2:78:cc:d2:0b:6d:70:f7:
                    30:0d:7f:f6:94:2c:3c:9a:e2:2f:f0:88:01:d1:f6:
                    f3:08:c0:71:66:f3:12:c0:9b:d5:1a:8a:92:ce:9e:
                    9e:67:6b:47:8e:76:78:0a:58:1a:73:2e:b1:75:9c:
                    b9:a7:f4:a5:3c:8e:96:0b:56:21:e8:f5:25:70:11:
                    39:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2B:C6:20:BC:81:4B:C8:C5:AA:38:F1:CC:91:49:FE:E1:E0:4A:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/aa0d5e9f-0ef5-3b3c-a1ab-a0e29ccfcb09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl

            X509v3 Authority Key Identifier:
                keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.76.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:1a:bd:74:1b:1a:94:5b:cf:9a:9b:64:1c:12:aa:5f:9c:9a:
         fd:c3:01:47:2c:74:bb:bf:ce:f6:8f:aa:5e:db:e5:68:37:61:
         84:56:24:24:b5:b8:e2:c7:41:91:55:5f:01:fd:0e:ea:c4:99:
         c5:5c:f2:20:fd:73:4a:ed:9a:52:3e:f2:96:91:7b:50:10:db:
         4a:a4:5f:5e:1d:0d:ee:9e:e2:dc:45:4e:e5:55:1e:fb:1c:f2:
         e5:f8:e0:d7:dd:86:ed:8f:32:3f:3f:66:3a:ca:d4:04:7e:df:
         08:22:96:5c:6b:c4:ea:6b:8a:41:88:b8:e9:bb:3f:21:cb:09:
         b4:1e:bb:d9:84:d1:96:37:cd:77:22:f5:5f:81:60:5d:7c:e9:
         74:ce:14:6a:8f:21:25:1f:7d:1d:ec:9d:0a:47:fb:77:09:5d:
         2d:62:3c:9e:8f:d1:5d:21:86:bd:3d:75:fa:ed:3e:79:5a:db:
         cd:7a:ae:50:af:ef:99:7f:a9:c8:24:d1:82:40:c1:a3:9e:8e:
         7e:b2:8f:39:49:be:d1:71:cf:b8:bb:e3:ba:96:5c:33:ee:4d:
         4e:a5:dc:59:03:25:79:a0:d6:75:82:4b:ee:8d:30:24:1e:71:
         e2:b1:3d:96:bd:9e:d3:6a:64:40:60:c9:fb:10:1a:80:61:51:
         79:59:59:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEIhOE7Og80e5aqJhgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4
ZmI3MB4XDTIzMDYwNjEzMDAxOVoXDTIzMDkwNDEzMDAxOVowLzEtMCsGA1UEAxMk
OGZlYzE0OTItZTI3Yy00MGZhLTkwZjYtYzg1ODI2MDkyMWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9NmkxqaMZqngMGrgMQOyfWomzdCWB2YL0us
D+KRbjoEC7xcXUfZBFK8PT9m0181fLl0T6QAktwaeMUV/afeyJaY+IbW7ig5yFzg
IsxDOtHs1z0xgCy5kMyTT3C9nTCK1/vxNkUy+G0VuAUKmFB9QHhfV6PUnn40TcGA
P9Q6E9lEUHU+3KruF4SaIAI7geA02NNsZvNtyC5YmB58yXJwqPWUrXJHPpaIC8/w
Zi2J8scfve+dM/Woboxf8njM0gttcPcwDX/2lCw8muIv8IgB0fbzCMBxZvMSwJvV
GoqSzp6eZ2tHjnZ4Clgacy6xdZy5p/SlPI6WC1Yh6PUlcBE5VwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBYrxiC8gUvIxao48cyRSf7h4Ep8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2
YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvYWEwZDVlOWYtMGVmNS0z
YjNjLWExYWItYTBlMjljY2ZjYjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3
NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy
OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5
MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETEwgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABgavXQbGpRbz5qbZBwSql+cmv3DAUcsdLu/zvaPql7b5Wg3YYRWJCS1
uOLHQZFVXwH9DurEmcVc8iD9c0rtmlI+8paRe1AQ20qkX14dDe6e4txFTuVVHvsc
8uX44Nfdhu2PMj8/ZjrK1AR+3wgillxrxOprikGIuOm7PyHLCbQeu9mE0ZY3zXci
9V+BYF186XTOFGqPISUffR3snQpH+3cJXS1iPJ6P0V0hhr09dfrtPnla2816rlCv
75l/qcgk0YJAwaOejn6yjzlJvtFxz7i747qWXDPuTU6l3FkDJXmg1nWCS+6NMCQe
ceKxPZa9ntNqZEBgyfsQGoBhUXlZWXU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:13 2024 by rpki-client on console-fra.rpki-client.org