Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40bc354b-03fd-35bf-b157-d76634d0485f.roa
File:                     40bc354b-03fd-35bf-b157-d76634d0485f.roa (raw, json)
Hash identifier:          hpGXslmmH0xglJHiL7onGzUY06Yrt4ncllUtFB5df+Y=
Subject key identifier:   27:20:54:AE:DA:59:C5:81:16:33:69:BE:B0:1E:FB:34:07:A2:E5:FF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328583C3053A574408A79EEB9B41C80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40bc354b-03fd-35bf-b157-d76634d0485f.roa
Signing time:             Wed 26 Aug 2020 04:00:00 +0000
ROA not before:           Wed 26 Aug 2020 04:00:00 +0000
ROA not after:            Tue 12 Mar 2024 04:00:00 +0000
asID:                     206092
IP address blocks:        45.38.57.0/24 maxlen: 24
                          45.38.178.0/24 maxlen: 24
                          45.39.207.0/24 maxlen: 24
                          50.118.143.0/24 maxlen: 24
                          50.118.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:30:53:a5:74:40:8a:79:ee:b9:b4:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 26 04:00:00 2020 GMT
            Not After : Mar 12 04:00:00 2024 GMT
        Subject: CN=9d9ff040-2d4b-4630-9e6b-fbaa7c40ab49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:1a:cf:07:87:a4:51:58:3e:be:43:81:a9:
                    15:cf:1f:59:10:78:fa:04:ed:31:c1:4c:a9:30:0d:
                    dc:32:28:03:cb:0a:04:80:fa:30:45:e5:0d:c6:96:
                    b9:8d:aa:e1:87:20:6f:f9:ef:e9:23:a6:1f:d9:8c:
                    d3:0c:05:37:1c:19:5c:a5:bc:78:a2:8c:17:bf:55:
                    8e:e4:77:62:4e:3d:de:eb:95:3c:ca:ac:8b:82:e8:
                    c9:52:87:5f:35:c6:bb:a5:c7:83:23:15:85:98:23:
                    3f:ea:89:9e:04:9e:ce:b0:09:0c:4c:dd:c8:d8:8f:
                    bd:b3:5a:4e:5d:44:7e:97:c8:4b:99:34:5b:3c:0f:
                    53:36:0a:fc:2a:75:a7:30:99:f2:8e:8f:db:18:a8:
                    38:19:76:15:69:ef:4e:8f:53:dd:cd:8d:3d:b9:0b:
                    2e:47:77:17:d9:17:71:73:cd:d3:6a:0e:ae:17:d6:
                    a7:c8:c8:57:f4:91:b5:4c:1a:22:34:29:ca:18:39:
                    5b:12:32:90:90:c7:92:3d:f3:df:ab:b8:59:b3:aa:
                    04:b3:ac:97:f5:86:93:29:0f:a3:1f:b9:e6:dd:6b:
                    c9:b2:86:93:60:b9:ad:56:92:76:c3:9d:e6:38:55:
                    61:f8:ba:23:66:0a:8d:9d:5f:02:8b:a1:20:47:0d:
                    aa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:20:54:AE:DA:59:C5:81:16:33:69:BE:B0:1E:FB:34:07:A2:E5:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/40bc354b-03fd-35bf-b157-d76634d0485f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.57.0/24
                  45.38.178.0/24
                  45.39.207.0/24
                  50.118.143.0/24
                  50.118.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:85:2e:64:cb:3b:0b:0b:30:24:0f:8d:a8:33:e9:77:f9:50:
         75:a6:36:fa:30:6a:d3:0c:54:62:3e:6e:32:ca:b8:0d:74:66:
         5e:16:ec:51:f4:2c:45:9d:b9:d5:06:34:96:06:ec:7a:1a:d3:
         28:3a:fd:28:63:b3:75:32:13:3b:49:61:04:79:51:7a:35:34:
         82:6d:c7:c4:eb:d4:b4:ea:a8:39:b8:4b:38:a5:39:d1:f5:4c:
         d2:d4:cb:60:cd:0a:5e:b3:6a:97:54:26:dd:77:d4:86:a6:11:
         3e:5f:e4:db:93:b5:26:74:5e:84:96:3a:ef:92:45:47:2b:d4:
         78:83:17:c5:30:46:0f:ff:02:05:74:d8:a8:0e:c1:47:6a:da:
         09:ae:c8:40:c9:75:80:ef:87:7e:16:02:45:ae:0a:5c:1c:06:
         17:74:f5:fb:4e:d2:08:89:c9:cb:49:17:de:29:d9:8c:c7:04:
         6e:d3:d6:63:99:3a:33:95:10:17:5b:d2:c2:fa:29:c8:f3:d9:
         fe:1d:69:7c:3b:14:08:3c:a7:61:c8:a3:c0:a2:08:50:61:9a:
         ab:3b:c5:7e:f6:15:84:32:f9:d5:86:3e:90:17:f9:96:68:a1:
         6d:95:41:28:21:6c:6a:92:a4:bd:97:e9:af:ee:fa:29:21:8b:
         6a:f5:16:2c
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWDwwU6V0QIp57rm0HIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIwMDgyNjA0MDAwMFoXDTI0MDMxMjA0MDAwMFowLzEtMCsGA1UEAxMk
OWQ5ZmYwNDAtMmQ0Yi00NjMwLTllNmItZmJhYTdjNDBhYjQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSEazweHpFFYPr5DgakVzx9ZEHj6BO0xwUyp
MA3cMigDywoEgPowReUNxpa5jarhhyBv+e/pI6Yf2YzTDAU3HBlcpbx4oowXv1WO
5HdiTj3e65U8yqyLgujJUodfNca7pceDIxWFmCM/6omeBJ7OsAkMTN3I2I+9s1pO
XUR+l8hLmTRbPA9TNgr8KnWnMJnyjo/bGKg4GXYVae9Oj1PdzY09uQsuR3cX2Rdx
c83Tag6uF9anyMhX9JG1TBoiNCnKGDlbEjKQkMeSPfPfq7hZs6oEs6yX9YaTKQ+j
H7nm3WvJsoaTYLmtVpJ2w53mOFVh+LojZgqNnV8Ci6EgRw2qAwIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFCcgVK7aWcWBFjNpvrAe+zQHouX/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDBiYzM1NGItMDNmZC0z
NWJmLWIxNTctZDc2NjM0ZDA0ODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALSY5AwQA
LSayAwQALSfPAwQAMnaPAwQAMnaiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADqFLmTLOwsLMCQPjagz6Xf5
UHWmNvowatMMVGI+bjLKuA10Zl4W7FH0LEWdudUGNJYG7Hoa0yg6/Shjs3UyEztJ
YQR5UXo1NIJtx8Tr1LTqqDm4SzilOdH1TNLUy2DNCl6zapdUJt131IamET5f5NuT
tSZ0XoSWOu+SRUcr1HiDF8UwRg//AgV02KgOwUdq2gmuyEDJdYDvh34WAkWuClwc
Bhd09ftO0giJyctJF94p2YzHBG7T1mOZOjOVEBdb0sL6Kcjz2f4daXw7FAg8p2HI
o8CiCFBhmqs7xX72FYQy+dWGPpAX+ZZooW2VQSghbGqSpL2X6a/u+ikhi2r1Fiw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:06 2024 by rpki-client on console-ams.rpki-client.org