Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b5c66ca6-7926-34e1-b90f-e0a5bab724ba.roa
File:                     b5c66ca6-7926-34e1-b90f-e0a5bab724ba.roa (raw, json)
Hash identifier:          ioGS4oToOAzVG2IlMloU0sc9/+dS2etrbklztXmCLrM=
Subject key identifier:   07:0C:B0:FD:2A:6F:39:F0:01:79:EF:BB:17:A9:6A:83:3A:8A:52:28
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285841FAEA39F5E16804A79A88B7C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b5c66ca6-7926-34e1-b90f-e0a5bab724ba.roa
Signing time:             Tue 23 May 2023 19:42:21 +0000
ROA not before:           Tue 23 May 2023 19:42:21 +0000
ROA not after:            Mon 21 Aug 2023 19:42:21 +0000
asID:                     61138
IP address blocks:        23.230.225.0/24 maxlen: 24
                          45.38.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:fa:ea:39:f5:e1:68:04:a7:9a:88:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 23 19:42:21 2023 GMT
            Not After : Aug 21 19:42:21 2023 GMT
        Subject: CN=6de7e506-2a3e-4e45-86a0-2c1532840e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:74:fa:b6:35:eb:d6:79:2e:4c:c8:b5:6d:77:
                    bb:ee:de:31:1b:d3:b3:65:d1:bd:b6:74:b9:89:98:
                    29:db:67:51:2c:f6:0e:32:47:58:3e:9e:58:98:dd:
                    3f:05:a7:fe:2e:56:23:89:34:fc:76:e2:5c:29:04:
                    1c:9d:8c:17:72:7d:da:9e:9e:66:25:cc:07:02:04:
                    4e:c9:75:48:50:27:90:a4:bf:93:e3:57:de:61:f1:
                    39:b6:74:c5:13:72:ac:f7:73:7f:a3:db:ca:60:bf:
                    81:af:2f:ea:e7:10:2e:fb:85:13:75:8f:2e:68:c1:
                    18:7e:0e:c5:e4:40:4b:1d:9a:4c:91:dc:3d:e8:f6:
                    3c:d3:c9:45:eb:53:03:0f:8c:fb:cc:ee:cb:b6:98:
                    77:33:e3:bf:be:69:e2:35:5a:86:57:3e:16:06:e6:
                    06:ff:c2:9d:86:99:01:78:66:1a:3e:09:99:53:36:
                    4a:e6:c9:14:16:f5:20:75:42:28:31:15:cb:4a:77:
                    76:fb:42:4c:de:80:d8:3c:05:01:3b:c5:e8:4b:d0:
                    46:97:0a:a1:84:0d:c8:e6:45:ab:0b:c7:cc:32:20:
                    d6:b1:c4:c0:62:bb:09:99:66:16:e0:19:31:5f:90:
                    1a:de:95:ca:e1:1d:25:16:ce:8a:3d:34:d2:b4:a4:
                    35:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0C:B0:FD:2A:6F:39:F0:01:79:EF:BB:17:A9:6A:83:3A:8A:52:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b5c66ca6-7926-34e1-b90f-e0a5bab724ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.225.0/24
                  45.38.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:00:6e:a2:2b:86:57:da:23:dd:74:64:a1:0d:0d:31:90:7c:
         3a:6b:a3:22:8a:05:4a:6c:51:36:e9:a5:d6:e9:b4:c4:71:cb:
         07:df:d2:af:6c:bb:e0:fc:d1:ed:c5:9f:5f:2a:d6:6f:c2:06:
         0c:91:7d:e3:30:dc:86:d0:e6:55:30:54:d4:1e:48:d3:dd:6c:
         65:73:a3:a0:66:9e:9c:7e:1d:f8:50:ac:32:fa:c9:8c:d3:6c:
         e6:eb:9b:e1:1b:a2:6d:ef:12:98:13:77:73:b1:e0:92:e7:27:
         e6:eb:d8:9c:4a:0a:07:fe:7b:00:63:74:4a:3a:1b:a6:35:74:
         28:b4:4e:7a:95:f3:2b:e2:f1:9c:9f:da:ee:b6:bc:b2:54:a4:
         49:6c:36:05:af:be:33:8b:41:60:5a:cb:e4:d7:fb:90:83:04:
         91:bf:62:e3:a3:c5:50:59:ba:bc:9c:e5:07:46:8c:36:aa:84:
         13:0f:3a:a2:c4:71:ca:83:fc:9e:56:f4:bc:81:7e:97:32:e7:
         fe:f5:b6:35:c4:31:89:27:2d:35:9a:74:df:4a:db:36:87:df:
         c3:06:18:c0:f5:ad:6a:ee:7f:a4:a3:5e:0e:13:bf:5c:2c:ea:
         4b:dd:70:20:73:c9:bb:32:25:d6:ad:d9:d1:72:77:15:5a:05:
         c6:27:c3:52
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEH66jn14WgEp5qIt8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIzMDUyMzE5NDIyMVoXDTIzMDgyMTE5NDIyMVowLzEtMCsGA1UEAxMk
NmRlN2U1MDYtMmEzZS00ZTQ1LTg2YTAtMmMxNTMyODQwZTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHT6tjXr1nkuTMi1bXe77t4xG9OzZdG9tnS5
iZgp22dRLPYOMkdYPp5YmN0/Baf+LlYjiTT8duJcKQQcnYwXcn3anp5mJcwHAgRO
yXVIUCeQpL+T41feYfE5tnTFE3Ks93N/o9vKYL+Bry/q5xAu+4UTdY8uaMEYfg7F
5EBLHZpMkdw96PY808lF61MDD4z7zO7Ltph3M+O/vmniNVqGVz4WBuYG/8KdhpkB
eGYaPgmZUzZK5skUFvUgdUIoMRXLSnd2+0JM3oDYPAUBO8XoS9BGlwqhhA3I5kWr
C8fMMiDWscTAYrsJmWYW4BkxX5Aa3pXK4R0lFs6KPTTStKQ1dQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFAcMsP0qbznwAXnvuxepaoM6ilIoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYjVjNjZjYTYtNzkyNi0z
NGUxLWI5MGYtZTBhNWJhYjcyNGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF+bhAwQA
LSbVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHQAbqIrhlfaI910ZKENDTGQfDproyKKBUpsUTbppdbptMRx
ywff0q9su+D80e3Fn18q1m/CBgyRfeMw3IbQ5lUwVNQeSNPdbGVzo6Bmnpx+HfhQ
rDL6yYzTbObrm+Ebom3vEpgTd3Ox4JLnJ+br2JxKCgf+ewBjdEo6G6Y1dCi0TnqV
8yvi8Zyf2u62vLJUpElsNgWvvjOLQWBay+TX+5CDBJG/YuOjxVBZuryc5QdGjDaq
hBMPOqLEccqD/J5W9LyBfpcy5/71tjXEMYknLTWadN9K2zaH38MGGMD1rWruf6Sj
Xg4Tv1ws6kvdcCBzybsyJdat2dFydxVaBcYnw1I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:30 2024 by rpki-client on console-fra.rpki-client.org