Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f8175885-f796-3ca6-a574-407e4bc1ef4f.roa
File:                     f8175885-f796-3ca6-a574-407e4bc1ef4f.roa (raw, json)
Hash identifier:          29QhWAGaeNMX/7OEmZjzz0/O71kedv6xRSokuHwnObk=
Subject key identifier:   FD:B9:C9:82:45:62:48:CF:EA:69:B6:32:7C:22:9B:2F:84:16:5C:5E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858435D3F5AF789515B49CBAA8D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f8175885-f796-3ca6-a574-407e4bc1ef4f.roa
Signing time:             Wed 27 Sep 2023 17:50:02 +0000
ROA not before:           Wed 27 Sep 2023 17:50:02 +0000
ROA not after:            Tue 26 Dec 2023 18:50:02 +0000
asID:                     265721
IP address blocks:        107.164.21.0/24 maxlen: 24
                          107.164.42.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5d:3f:5a:f7:89:51:5b:49:cb:aa:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 27 17:50:02 2023 GMT
            Not After : Dec 26 18:50:02 2023 GMT
        Subject: CN=9dd02306-ae90-4631-8522-7cd367ef3a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d5:1d:62:6d:4b:5c:ce:88:de:ed:b9:14:62:
                    1e:5a:5f:dc:03:c4:b7:4b:0e:19:9f:85:bd:8c:a3:
                    e1:97:2d:25:f0:b7:07:ef:65:2d:9b:27:e9:95:50:
                    a6:14:e9:77:0d:ed:eb:c4:78:50:42:6c:92:81:e1:
                    7e:88:19:7e:41:36:51:cb:ae:87:d4:79:88:81:0b:
                    1e:13:68:e0:a0:f2:df:8e:14:49:81:61:c4:ed:39:
                    db:60:67:cf:0a:70:29:9a:ac:25:6f:8d:f9:62:d5:
                    f3:a6:3c:b0:6b:fb:dc:73:0e:95:e9:75:b5:09:6e:
                    8c:c6:5b:0d:c7:54:fb:ee:b6:1b:7c:7a:9e:9b:4f:
                    5a:f9:f8:73:9b:d7:1e:4a:03:c8:cd:1b:ac:fe:a9:
                    f9:75:a0:8b:35:d2:b5:54:eb:8e:d5:46:90:8f:70:
                    f1:7b:31:54:de:1d:33:ea:77:2e:56:40:2b:81:2d:
                    55:57:7e:f4:17:ae:40:ff:fa:4c:8d:19:e1:f1:90:
                    ac:37:f7:03:8b:f6:00:e9:ef:d1:06:9f:1b:ef:3a:
                    61:87:54:f8:83:20:32:f1:df:12:38:5b:88:f4:98:
                    4e:39:cd:7f:91:22:48:c2:b2:62:a6:68:f3:0e:5e:
                    6a:fa:9c:33:bb:e8:67:5a:14:9b:4a:7c:f4:01:6c:
                    b1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B9:C9:82:45:62:48:CF:EA:69:B6:32:7C:22:9B:2F:84:16:5C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f8175885-f796-3ca6-a574-407e4bc1ef4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.164.21.0/24
                  107.164.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:33:84:c2:9a:65:90:5c:b3:ad:5a:06:bf:4a:10:0a:cc:fc:
         c0:67:0f:31:b8:b7:01:1f:87:cc:64:42:0f:1c:ab:a6:a1:49:
         c8:b7:9e:39:c2:ad:20:9e:32:25:9b:9d:df:4a:58:45:fb:1b:
         ff:49:bb:59:a3:aa:6c:4e:21:9b:e0:94:e9:d0:00:ac:28:76:
         ba:7c:ad:71:3b:8d:42:9c:48:c8:08:6d:11:49:2a:5f:c8:6f:
         dd:86:64:04:57:a6:92:a3:46:11:34:64:6d:09:dc:82:0e:60:
         30:38:49:b9:5d:ff:52:c6:7c:fc:4a:c5:d2:fa:75:21:2f:44:
         f1:84:13:5f:be:f3:1b:f0:e4:f6:89:5d:38:be:3f:a7:84:d3:
         a8:9e:63:88:69:e2:55:ce:d0:56:55:a0:1a:e9:32:f3:06:36:
         32:a6:92:ff:cb:5d:8d:b7:f1:a4:b3:e2:ab:b9:2c:02:1d:da:
         eb:95:a5:32:66:78:da:c4:1f:ec:97:1f:a8:b7:cc:cc:9e:b0:
         97:99:41:24:fd:94:b6:c4:dc:87:2d:74:51:a7:a8:7c:00:eb:
         d1:47:76:78:91:09:75:9a:c1:7c:03:88:63:8d:f1:33:02:e0:
         ce:b2:10:58:7b:2a:c0:5b:c0:2e:4a:45:7a:74:70:6b:80:62:
         c3:fe:6a:18
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWENdP1r3iVFbScuqjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTIzMDkyNzE3NTAwMloXDTIzMTIyNjE4NTAwMlowLzEtMCsGA1UEAxMk
OWRkMDIzMDYtYWU5MC00NjMxLTg1MjItN2NkMzY3ZWYzYTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNUdYm1LXM6I3u25FGIeWl/cA8S3Sw4Zn4W9
jKPhly0l8LcH72UtmyfplVCmFOl3De3rxHhQQmySgeF+iBl+QTZRy66H1HmIgQse
E2jgoPLfjhRJgWHE7TnbYGfPCnApmqwlb435YtXzpjywa/vccw6V6XW1CW6MxlsN
x1T77rYbfHqem09a+fhzm9ceSgPIzRus/qn5daCLNdK1VOuO1UaQj3DxezFU3h0z
6ncuVkArgS1VV370F65A//pMjRnh8ZCsN/cDi/YA6e/RBp8b7zphh1T4gyAy8d8S
OFuI9JhOOc1/kSJIwrJipmjzDl5q+pwzu+hnWhSbSnz0AWyx7wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFP25yYJFYkjP6mm2Mnwimy+EFlxeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjgxNzU4ODUtZjc5Ni0z
Y2E2LWE1NzQtNDA3ZTRiYzFlZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAa6QVAwQA
a6QqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJczhMKaZZBcs61aBr9KEArM/MBnDzG4twEfh8xkQg8cq6ah
Sci3njnCrSCeMiWbnd9KWEX7G/9Ju1mjqmxOIZvglOnQAKwodrp8rXE7jUKcSMgI
bRFJKl/Ib92GZARXppKjRhE0ZG0J3IIOYDA4Sbld/1LGfPxKxdL6dSEvRPGEE1++
8xvw5PaJXTi+P6eE06ieY4hp4lXO0FZVoBrpMvMGNjKmkv/LXY238aSz4qu5LAId
2uuVpTJmeNrEH+yXH6i3zMyesJeZQST9lLbE3IctdFGnqHwA69FHdniRCXWawXwD
iGON8TMC4M6yEFh7KsBbwC5KRXp0cGuAYsP+ahg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:13 2024 by rpki-client on console-ams.rpki-client.org