Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/51cd9549-6f82-3a69-917c-b3d41f3be7e6.roa
File:                     51cd9549-6f82-3a69-917c-b3d41f3be7e6.roa (raw, json)
Hash identifier:          ExCXuaBBbaXxkTMlpE2S3u+TuooAWzBkqyce7RldT5Q=
Subject key identifier:   58:CE:A3:87:23:6B:3B:C2:CD:A8:33:A5:3E:04:41:6F:FD:DE:BA:94
Certificate issuer:       /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial:       010D0C9F43285845053E5CE5822B5D3F2FB90800
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/51cd9549-6f82-3a69-917c-b3d41f3be7e6.roa
Signing time:             Mon 26 Feb 2024 14:50:46 +0000
ROA not before:           Mon 26 Feb 2024 14:50:46 +0000
ROA not after:            Sun 26 May 2024 13:50:46 +0000
asID:                     30399
IP address blocks:        23.131.185.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:3e:5c:e5:82:2b:5d:3f:2f:b9:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
        Validity
            Not Before: Feb 26 14:50:46 2024 GMT
            Not After : May 26 13:50:46 2024 GMT
        Subject: CN=94cfa8e6-2cba-4c6c-ab81-8b95e73c5231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:22:37:3e:1f:60:62:48:9c:f3:62:d3:87:
                    51:3b:12:51:bc:f2:3e:ac:0e:9e:d8:fe:8b:93:21:
                    c2:74:1b:42:cf:59:c4:7e:1e:49:76:12:43:de:50:
                    7a:1a:dc:32:ac:34:ce:16:15:7b:a2:06:96:77:cd:
                    66:6f:15:4a:52:f3:5f:f5:eb:fd:26:21:fb:43:76:
                    07:44:4d:4d:b6:01:f7:75:f1:d3:dd:bc:f3:ad:82:
                    22:09:87:81:1d:89:99:ac:6b:a3:81:60:ad:10:46:
                    d3:27:ca:a9:cd:15:8d:f9:88:57:dd:6f:8f:8d:97:
                    23:4a:88:dd:e7:88:f8:25:d7:f7:91:44:b5:44:9a:
                    64:d9:cf:5f:02:06:31:da:f7:93:6d:39:20:76:b3:
                    e9:61:34:51:cf:81:6c:4d:60:97:12:be:93:f9:39:
                    e6:d5:eb:c1:1c:c3:2c:ee:a1:6d:e1:a5:8f:de:1d:
                    0d:e5:86:23:e6:d7:ea:1a:4f:d8:83:63:13:92:23:
                    6c:4c:dc:9a:2c:63:9c:61:dd:02:43:31:46:60:17:
                    34:fd:5e:a4:52:36:70:28:68:e1:15:ff:12:05:8d:
                    ad:5f:47:10:27:b1:4c:29:09:cc:ab:1b:fa:ba:16:
                    06:96:b4:9a:b9:a1:94:95:f4:02:15:ef:fc:d7:39:
                    62:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:CE:A3:87:23:6B:3B:C2:CD:A8:33:A5:3E:04:41:6F:FD:DE:BA:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/51cd9549-6f82-3a69-917c-b3d41f3be7e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl

            X509v3 Authority Key Identifier:
                keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ac:eb:f8:ed:f4:fe:12:3f:e3:61:b6:02:1f:c7:79:7b:e4:
         0b:56:b8:46:4e:8d:8f:0c:0c:9f:d6:b1:fd:aa:53:0b:5a:3c:
         8d:08:48:c4:26:18:c6:aa:b8:c5:03:73:39:59:34:32:dc:f9:
         fb:b2:4f:19:f6:ff:da:b8:3d:4c:50:22:2f:21:96:af:4e:3b:
         81:32:d7:e3:8e:ac:79:de:e8:07:04:ae:7a:a8:ff:de:c9:b8:
         c0:01:12:9c:15:56:87:98:c9:27:ad:ed:ff:ca:aa:75:63:8e:
         bc:2d:76:8e:fd:3d:06:bc:76:ce:5a:d3:da:0a:53:2b:55:97:
         7f:94:57:76:e4:b7:11:20:58:93:c0:20:3c:88:ce:2b:3b:c6:
         b9:73:10:9e:b6:11:98:7c:20:38:38:83:1f:43:62:0a:eb:18:
         f1:51:0e:60:eb:72:15:1a:f4:b7:5d:76:0e:3b:bf:b3:fd:37:
         fe:a0:0a:d1:9f:df:b5:6d:d9:48:b1:d1:0e:0b:eb:05:51:c1:
         3e:b9:c4:4c:fd:27:d0:85:21:f8:29:23:c0:8c:e5:49:50:bc:
         f7:27:03:44:b5:a7:e4:40:29:69:9d:ff:96:3b:b3:24:89:d6:
         d5:7f:9e:a7:1c:3a:82:93:97:41:40:10:66:44:16:76:ba:bf:
         fe:12:67:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUFPlzlgitdPy+5CAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2
NTFkMB4XDTI0MDIyNjE0NTA0NloXDTI0MDUyNjEzNTA0NlowLzEtMCsGA1UEAxMk
OTRjZmE4ZTYtMmNiYS00YzZjLWFiODEtOGI5NWU3M2M1MjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm34iNz4fYGJInPNi04dROxJRvPI+rA6e2P6L
kyHCdBtCz1nEfh5JdhJD3lB6GtwyrDTOFhV7ogaWd81mbxVKUvNf9ev9JiH7Q3YH
RE1NtgH3dfHT3bzzrYIiCYeBHYmZrGujgWCtEEbTJ8qpzRWN+YhX3W+PjZcjSojd
54j4Jdf3kUS1RJpk2c9fAgYx2veTbTkgdrPpYTRRz4FsTWCXEr6T+Tnm1evBHMMs
7qFt4aWP3h0N5YYj5tfqGk/Yg2MTkiNsTNyaLGOcYd0CQzFGYBc0/V6kUjZwKGjh
Ff8SBY2tX0cQJ7FMKQnMqxv6uhYGlrSauaGUlfQCFe/81zliFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFjOo4cjazvCzagzpT4EQW/93rqUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1
ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvNTFjZDk1NDktNmY4Mi0z
YTY5LTkxN2MtYjNkNDFmM2JlN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi
NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2
NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri
ZDVlNjY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4O5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFes6/jt9P4SP+NhtgIfx3l75AtWuEZOjY8MDJ/Wsf2qUwtaPI0ISMQm
GMaquMUDczlZNDLc+fuyTxn2/9q4PUxQIi8hlq9OO4Ey1+OOrHne6AcErnqo/97J
uMABEpwVVoeYySet7f/KqnVjjrwtdo79PQa8ds5a09oKUytVl3+UV3bktxEgWJPA
IDyIzis7xrlzEJ62EZh8IDg4gx9DYgrrGPFRDmDrchUa9Ldddg47v7P9N/6gCtGf
37Vt2Uix0Q4L6wVRwT65xEz9J9CFIfgpI8CM5UlQvPcnA0S1p+RAKWmd/5Y7sySJ
1tV/nqccOoKTl0FAEGZEFna6v/4SZ0U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:50 2024 by rpki-client on console-ams.rpki-client.org