Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/59b96393-1a19-39d6-bc52-5fa45014389c.roa
File:                     59b96393-1a19-39d6-bc52-5fa45014389c.roa (raw, json)
Hash identifier:          WNh5KkG1Ht8tlxcQASQBj/oC3cBOIGgpihxYAtAmkSE=
Subject key identifier:   84:5F:CF:D5:E9:48:A7:F2:81:27:27:2A:AE:5B:79:C7:93:F9:8F:AC
Certificate issuer:       /CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
Certificate serial:       010D0C9F432858442733FBF975807415D3EED800
Authority key identifier: B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/59b96393-1a19-39d6-bc52-5fa45014389c.roa
Signing time:             Sat 09 Dec 2023 02:00:17 +0000
ROA not before:           Sat 09 Dec 2023 02:00:17 +0000
ROA not after:            Fri 08 Mar 2024 02:00:17 +0000
asID:                     396982
IP address blocks:        2620:be:a000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:27:33:fb:f9:75:80:74:15:d3:ee:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad20bab1-11ef-4f42-a718-c0b727dfc2f8
        Validity
            Not Before: Dec  9 02:00:17 2023 GMT
            Not After : Mar  8 02:00:17 2024 GMT
        Subject: CN=5dcc9f89-ac5a-4f6b-b544-97d1d046301c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2f:2e:44:d6:fc:b4:59:65:d6:32:eb:44:47:
                    a7:66:51:cf:17:07:e2:8a:e7:52:f5:ef:b9:bd:23:
                    36:cb:9e:75:45:5c:c4:8d:d1:81:05:84:5a:16:29:
                    37:98:ed:4c:68:0c:60:77:18:fe:b9:42:ac:05:60:
                    66:42:53:ed:15:04:18:fe:04:ca:37:68:95:71:d1:
                    42:7f:55:9f:b7:61:dd:5e:f4:87:8e:34:59:7b:fc:
                    19:07:3c:93:35:1e:60:14:71:6e:d6:69:ad:9d:0f:
                    41:9a:d4:7d:a9:40:98:0e:16:33:db:b2:ca:a3:ff:
                    14:92:3a:8d:da:b1:d6:51:e5:d2:4a:f2:d6:7f:a5:
                    69:4b:95:a9:bb:73:13:30:e8:dc:60:65:d2:98:c3:
                    bf:69:f9:ed:d7:76:93:c8:56:30:a4:1c:1b:65:fb:
                    08:eb:9c:9b:38:5e:fe:b7:79:4a:a4:b9:7a:19:f7:
                    8d:31:cd:3d:d5:dc:90:8b:3e:35:6f:eb:b2:91:f6:
                    58:77:f9:12:95:3f:d7:01:3e:fc:54:7c:cc:d5:31:
                    eb:05:c6:03:84:43:55:22:35:8e:77:1d:65:9f:95:
                    dd:ed:6d:15:d3:4a:28:57:aa:86:2d:e5:7c:94:a8:
                    e1:cb:37:62:57:3b:88:fb:2a:ef:b5:d0:2e:d1:87:
                    41:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5F:CF:D5:E9:48:A7:F2:81:27:27:2A:AE:5B:79:C7:93:F9:8F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/59b96393-1a19-39d6-bc52-5fa45014389c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.crl

            X509v3 Authority Key Identifier:
                keyid:B7:F2:6B:D6:72:CE:7C:40:00:D9:A6:6E:9F:A1:B1:F0:C0:22:00:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad20bab1-11ef-4f42-a718-c0b727dfc2f8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:be:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f2:97:0f:34:6e:09:25:ae:cf:ac:db:b5:da:cb:35:38:30:
         a1:a4:f6:64:ce:c3:2a:19:07:f1:f9:a0:80:98:65:20:ab:ce:
         8f:a0:d1:32:06:7a:2c:ad:70:2a:32:b7:64:35:77:49:5e:e0:
         72:39:39:2d:95:76:bc:82:f3:47:3b:bf:09:dc:bc:df:9e:c9:
         8e:0f:37:11:45:b3:c7:c9:91:fe:17:93:f4:64:a5:85:9d:4c:
         8d:82:5d:ee:8f:ea:52:b5:db:2f:18:19:c3:e0:5f:0e:c7:29:
         6c:9e:0f:d3:ff:ab:aa:9e:e7:c6:69:cc:cd:f6:03:f7:2c:3b:
         a8:4e:98:de:6c:79:9c:d5:4f:60:df:96:f9:ef:18:34:55:45:
         0f:53:70:52:21:31:bc:7f:aa:4f:b0:7d:dd:a5:8e:79:61:27:
         fc:4b:59:21:da:e5:eb:b4:20:73:fd:44:d8:b8:57:61:ea:1b:
         8a:cf:d6:cd:ed:58:5e:da:a7:b3:6e:55:37:24:46:27:d5:a8:
         f7:53:30:ab:be:08:d1:08:87:5d:1f:43:5f:3b:29:d2:c1:01:
         0a:43:b0:4b:ad:89:91:18:27:06:1a:78:b7:d2:94:d0:91:6b:
         13:fc:df:3d:f3:39:69:a8:43:e0:5f:a4:8a:4a:f0:b9:9f:c3:
         df:af:4a:c2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEQnM/v5dYB0FdPu2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQyMGJhYjEtMTFlZi00ZjQyLWE3MTgtYzBiNzI3ZGZj
MmY4MB4XDTIzMTIwOTAyMDAxN1oXDTI0MDMwODAyMDAxN1owLzEtMCsGA1UEAxMk
NWRjYzlmODktYWM1YS00ZjZiLWI1NDQtOTdkMWQwNDYzMDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC8uRNb8tFll1jLrREenZlHPFwfiiudS9e+5
vSM2y551RVzEjdGBBYRaFik3mO1MaAxgdxj+uUKsBWBmQlPtFQQY/gTKN2iVcdFC
f1Wft2HdXvSHjjRZe/wZBzyTNR5gFHFu1mmtnQ9BmtR9qUCYDhYz27LKo/8UkjqN
2rHWUeXSSvLWf6VpS5Wpu3MTMOjcYGXSmMO/afnt13aTyFYwpBwbZfsI65ybOF7+
t3lKpLl6GfeNMc091dyQiz41b+uykfZYd/kSlT/XAT78VHzM1THrBcYDhENVIjWO
dx1ln5Xd7W0V00ooV6qGLeV8lKjhyzdiVzuI+yrvtdAu0YdBhQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIRfz9XpSKfygScnKq5beceT+Y+sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZDIw
YmFiMS0xMWVmLTRmNDItYTcxOC1jMGI3MjdkZmMyZjgvNTliOTYzOTMtMWExOS0z
OWQ2LWJjNTItNWZhNDUwMTQzODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWQyMGJhYjEtMTFlZi00ZjQyLWE3
MTgtYzBiNzI3ZGZjMmY4L2FkMjBiYWIxLTExZWYtNGY0Mi1hNzE4LWMwYjcyN2Rm
YzJmOC5jcmwwHwYDVR0jBBgwFoAUt/Jr1nLOfEAA2aZun6Gx8MAiAHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZDIwYmFiMS0xMWVmLTRmNDItYTcxOC1jMGI3
MjdkZmMyZjguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAvqAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABLylw80bgklrs+s27XayzU4MKGk9mTOwyoZB/H5oICYZSCrzo+g
0TIGeiytcCoyt2Q1d0le4HI5OS2VdryC80c7vwncvN+eyY4PNxFFs8fJkf4Xk/Rk
pYWdTI2CXe6P6lK12y8YGcPgXw7HKWyeD9P/q6qe58ZpzM32A/csO6hOmN5seZzV
T2DflvnvGDRVRQ9TcFIhMbx/qk+wfd2ljnlhJ/xLWSHa5eu0IHP9RNi4V2HqG4rP
1s3tWF7ap7NuVTckRifVqPdTMKu+CNEIh10fQ187KdLBAQpDsEutiZEYJwYaeLfS
lNCRaxP83z3zOWmoQ+BfpIpK8Lmfw9+vSsI=
-----END CERTIFICATE-----