Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/0b34a5a3-9951-3d9d-b920-50f2d8c494b1.roa
File:                     0b34a5a3-9951-3d9d-b920-50f2d8c494b1.roa (raw, json)
Hash identifier:          XZV7xSyOZvsTqLzCLb73y2ad7qDFggdv/YZhzt17tLY=
Subject key identifier:   F3:6A:8E:D4:1E:40:79:D7:C3:B2:E8:44:A0:68:11:5D:42:28:2E:9D
Certificate issuer:       /CN=5402024b-7d23-4041-8713-daddd547282a
Certificate serial:       010D0C9F432858428691A59AABC75AA51913D3C0
Authority key identifier: 2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/0b34a5a3-9951-3d9d-b920-50f2d8c494b1.roa
Signing time:             Wed 12 Jul 2023 20:17:02 +0000
ROA not before:           Wed 12 Jul 2023 20:17:02 +0000
ROA not after:            Tue 10 Oct 2023 20:17:02 +0000
asID:                     15731
IP address blocks:        68.170.2.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:86:91:a5:9a:ab:c7:5a:a5:19:13:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5402024b-7d23-4041-8713-daddd547282a
        Validity
            Not Before: Jul 12 20:17:02 2023 GMT
            Not After : Oct 10 20:17:02 2023 GMT
        Subject: CN=bb970b3a-0783-4eba-81b6-3423141d0e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:34:52:a7:25:00:cd:25:76:f5:0a:f8:d9:
                    1e:43:aa:4e:c2:0e:2c:87:bf:3c:2a:fa:85:2d:d3:
                    94:77:17:3b:9a:7b:5e:27:b9:41:6c:33:69:19:ec:
                    36:6c:b4:2b:79:02:f2:df:26:d7:45:2f:18:17:a9:
                    4a:1a:67:33:40:a0:df:b1:aa:e4:b6:97:8a:89:a8:
                    f3:88:5e:e5:fb:14:a7:75:ad:ef:14:0b:b9:3c:86:
                    d8:f6:29:c9:7e:ec:e1:a4:c6:ad:3c:8f:ff:b7:af:
                    bb:43:83:c6:bd:b4:d4:e1:be:e9:c0:e7:ff:09:d3:
                    c2:4b:d5:cd:b6:e7:6e:d3:ef:8c:03:c3:a4:fd:4d:
                    06:be:92:81:e2:60:62:f1:5c:af:0d:3e:58:75:b5:
                    31:89:a8:18:e5:cd:fb:78:96:e8:3e:15:53:97:cd:
                    59:a5:5c:f6:06:1b:b4:6a:17:d2:e4:14:ef:72:9b:
                    96:97:72:90:93:f1:89:36:07:be:73:3c:e1:0d:9b:
                    13:b7:85:9e:c2:9f:bb:f6:3a:d7:27:0b:fb:f2:32:
                    80:6f:75:8f:b1:a0:19:ce:64:65:d1:5f:9a:fb:bf:
                    09:d7:ec:d4:74:12:d3:cd:5c:2a:ff:77:ed:8d:6c:
                    44:5e:08:df:42:bf:71:24:03:d5:98:d7:2a:4b:2f:
                    d4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6A:8E:D4:1E:40:79:D7:C3:B2:E8:44:A0:68:11:5D:42:28:2E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/0b34a5a3-9951-3d9d-b920-50f2d8c494b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a/5402024b-7d23-4041-8713-daddd547282a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:93:B3:23:3E:35:A4:76:5D:62:BC:8A:D1:8E:2B:42:C8:FF:D5:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5402024b-7d23-4041-8713-daddd547282a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:8f:01:c0:46:2c:f8:c9:65:81:03:94:a5:6e:49:bd:6c:ef:
         02:30:e3:86:09:ce:18:08:e1:65:5b:e3:2d:d2:b8:73:69:91:
         da:0f:6b:61:21:42:de:47:da:fa:c6:ed:50:63:01:e5:91:d8:
         5e:c3:ef:5c:30:30:11:0f:b6:86:f3:b4:08:96:0f:33:70:9d:
         38:5e:08:ec:34:08:f8:90:13:76:c8:7d:b1:79:af:c2:dc:cc:
         ab:ee:37:b6:61:c5:a9:2d:a8:c1:8e:f7:8b:ce:80:43:e9:d5:
         bb:33:ee:1d:ca:ca:ac:32:8e:93:ce:12:b2:07:f4:46:6b:42:
         87:93:ac:c1:fc:97:b1:a0:46:4c:10:d8:12:6e:dd:7f:9b:27:
         cc:1e:ad:79:a0:25:73:07:1b:80:1f:80:1b:c9:1c:d9:ab:10:
         af:3f:16:7b:98:2d:a2:ad:90:7c:6e:97:6b:65:0f:0c:7a:6a:
         bd:91:44:90:e0:57:e5:39:4a:60:3a:d9:5d:84:06:0f:4f:07:
         ea:14:0d:a5:13:93:43:31:c6:e1:96:06:36:52:29:cc:2d:4d:
         9d:95:82:e1:74:67:a8:a8:dd:0c:44:a3:5a:53:ce:df:84:43:
         93:e8:01:33:12:d1:54:5f:4e:af:d6:ad:14:00:58:44:e3:56:
         21:6c:8d:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEKGkaWaq8dapRkT08AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTQwMjAyNGItN2QyMy00MDQxLTg3MTMtZGFkZGQ1NDcy
ODJhMB4XDTIzMDcxMjIwMTcwMloXDTIzMTAxMDIwMTcwMlowLzEtMCsGA1UEAxMk
YmI5NzBiM2EtMDc4My00ZWJhLTgxYjYtMzQyMzE0MWQwZTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UA0UqclAM0ldvUK+NkeQ6pOwg4sh788KvqF
LdOUdxc7mnteJ7lBbDNpGew2bLQreQLy3ybXRS8YF6lKGmczQKDfsarktpeKiajz
iF7l+xSnda3vFAu5PIbY9inJfuzhpMatPI//t6+7Q4PGvbTU4b7pwOf/CdPCS9XN
tudu0++MA8Ok/U0GvpKB4mBi8VyvDT5YdbUxiagY5c37eJboPhVTl81ZpVz2Bhu0
ahfS5BTvcpuWl3KQk/GJNge+czzhDZsTt4Wewp+79jrXJwv78jKAb3WPsaAZzmRl
0V+a+78J1+zUdBLTzVwq/3ftjWxEXgjfQr9xJAPVmNcqSy/UJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPNqjtQeQHnXw7LoRKBoEV1CKC6dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NDAy
MDI0Yi03ZDIzLTQwNDEtODcxMy1kYWRkZDU0NzI4MmEvMGIzNGE1YTMtOTk1MS0z
ZDlkLWI5MjAtNTBmMmQ4YzQ5NGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTQwMjAyNGItN2QyMy00MDQxLTg3
MTMtZGFkZGQ1NDcyODJhLzU0MDIwMjRiLTdkMjMtNDA0MS04NzEzLWRhZGRkNTQ3
MjgyYS5jcmwwHwYDVR0jBBgwFoAULpOzIz41pHZdYryK0Y4rQsj/1WgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81NDAyMDI0Yi03ZDIzLTQwNDEtODcxMy1kYWRk
ZDU0NzI4MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRKoCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFePAcBGLPjJZYEDlKVuSb1s7wIw44YJzhgI4WVb4y3SuHNpkdoPa2Eh
Qt5H2vrG7VBjAeWR2F7D71wwMBEPtobztAiWDzNwnTheCOw0CPiQE3bIfbF5r8Lc
zKvuN7ZhxaktqMGO94vOgEPp1bsz7h3KyqwyjpPOErIH9EZrQoeTrMH8l7GgRkwQ
2BJu3X+bJ8werXmgJXMHG4AfgBvJHNmrEK8/FnuYLaKtkHxul2tlDwx6ar2RRJDg
V+U5SmA62V2EBg9PB+oUDaUTk0MxxuGWBjZSKcwtTZ2VguF0Z6io3QxEo1pTzt+E
Q5PoATMS0VRfTq/WrRQAWETjViFsjek=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:13 2024 by rpki-client on console-fra.rpki-client.org