Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3e4c0c89-3e3a-3de5-b019-270c8e14de8d.roa
File:                     3e4c0c89-3e3a-3de5-b019-270c8e14de8d.roa (raw, json)
Hash identifier:          HHkOLe14qwDm4js1oq4aDTaTK2nslqn9aAt7VVLBXfQ=
Subject key identifier:   51:FD:C5:01:D4:75:D9:E0:E4:8A:4E:BB:65:37:7F:63:A7:F9:2E:20
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837BDB2ABD17265E802EE4D2A80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3e4c0c89-3e3a-3de5-b019-270c8e14de8d.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 29 Jan 2023 05:00:00 +0000
asID:                     21723
IP address blocks:        209.53.107.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:bd:b2:ab:d1:72:65:e8:02:ee:4d:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Jan 29 05:00:00 2023 GMT
        Subject: CN=c4ab6405-7ac0-4051-9c49-4d885286fe01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c4:33:95:14:af:bd:78:96:bd:af:ba:07:ee:
                    e5:96:ab:e7:ff:ff:ab:b7:9f:d0:4c:3a:14:05:02:
                    0a:58:e5:de:09:d8:56:6d:49:c6:43:10:e2:73:1b:
                    b0:d4:0a:48:5c:78:ff:d3:7f:e2:5f:bf:fd:b5:c8:
                    67:46:9a:4f:26:9e:7b:54:6b:e5:a0:06:6f:41:04:
                    5f:0f:71:97:26:e3:8d:aa:be:7b:00:2f:f2:72:91:
                    79:26:7e:73:f3:6b:b9:e6:f3:db:a3:91:61:77:14:
                    b1:63:87:48:87:cb:aa:95:31:a7:c6:dc:34:b6:e4:
                    6f:d1:7e:88:d1:12:ce:66:e2:c5:3e:23:a8:4c:21:
                    9b:d2:a0:72:ac:90:0f:38:c5:cd:a1:db:d7:a2:b9:
                    60:46:e1:9a:1d:8d:32:a0:59:f3:e0:12:b1:ea:36:
                    01:b4:8b:45:9c:99:db:b0:84:66:14:17:7d:a9:f9:
                    b9:06:2c:85:cf:f3:05:04:76:a1:44:c0:50:c4:f3:
                    b8:24:6a:7a:fc:4c:be:4c:53:01:ae:8d:10:aa:7b:
                    96:a5:c0:45:43:f7:6c:41:f7:2f:59:fa:76:58:ef:
                    ae:68:cd:a6:2f:f3:4e:49:75:ba:dd:c3:00:65:72:
                    84:b8:25:f4:12:da:15:48:da:55:f8:22:a1:d5:31:
                    72:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FD:C5:01:D4:75:D9:E0:E4:8A:4E:BB:65:37:7F:63:A7:F9:2E:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3e4c0c89-3e3a-3de5-b019-270c8e14de8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:2d:38:60:87:73:4f:a6:4f:05:0c:16:2e:c3:f4:32:c1:1e:
         b8:df:a9:b7:51:f9:b5:c6:51:96:6f:17:96:c6:13:2e:2c:4e:
         25:4b:d0:e0:8b:e4:82:d6:50:43:b5:2a:b5:29:77:7b:7f:0d:
         ea:38:6a:28:91:4f:27:76:f6:cc:21:92:9e:ac:8a:7b:c8:f2:
         2c:f4:b2:46:8b:41:df:19:9b:d5:4b:e2:56:9d:49:ef:90:99:
         ab:5c:c0:9c:d6:06:e1:21:6f:df:2b:42:73:78:c6:7e:3e:d1:
         00:07:8f:3b:b1:8e:6b:c1:1b:c5:80:c4:7b:c9:bd:bf:b6:46:
         a4:22:0c:63:85:a9:ab:c1:ff:ef:90:a6:fc:5d:33:7f:88:fa:
         43:70:5e:ed:0b:21:a3:48:f7:fc:59:62:3c:77:b6:a5:eb:4c:
         d3:da:85:1f:92:9e:29:26:58:39:8d:eb:da:53:d1:7d:64:70:
         07:e1:4a:73:b4:e6:a1:80:90:80:3c:c9:e4:66:f2:5a:69:f0:
         8d:75:0a:08:a6:d4:39:26:f4:ac:e4:ea:4e:aa:c1:d5:ff:0a:
         06:27:33:cf:92:d8:67:f8:53:85:90:1a:1c:49:2e:3c:83:7e:
         ca:75:c6:a5:dc:e4:b3:54:0a:5a:d0:cc:73:2e:44:34:a2:d1:
         3c:8f:40:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDe9sqvRcmXoAu5NKoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTIwMDkyMTA0MDAwMFoXDTIzMDEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
YzRhYjY0MDUtN2FjMC00MDUxLTljNDktNGQ4ODUyODZmZTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisQzlRSvvXiWva+6B+7llqvn//+rt5/QTDoU
BQIKWOXeCdhWbUnGQxDicxuw1ApIXHj/03/iX7/9tchnRppPJp57VGvloAZvQQRf
D3GXJuONqr57AC/ycpF5Jn5z82u55vPbo5FhdxSxY4dIh8uqlTGnxtw0tuRv0X6I
0RLOZuLFPiOoTCGb0qByrJAPOMXNodvXorlgRuGaHY0yoFnz4BKx6jYBtItFnJnb
sIRmFBd9qfm5BiyFz/MFBHahRMBQxPO4JGp6/Ey+TFMBro0QqnuWpcBFQ/dsQfcv
Wfp2WO+uaM2mL/NOSXW63cMAZXKEuCX0EtoVSNpV+CKh1TFyIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFH9xQHUddng5IpOu2U3f2On+S4gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvM2U0YzBjODktM2UzYS0z
ZGU1LWIwMTktMjcwYzhlMTRkZThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TVrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMAtOGCHc0+mTwUMFi7D9DLBHrjfqbdR+bXGUZZvF5bGEy4sTiVL0OCL
5ILWUEO1KrUpd3t/Deo4aiiRTyd29swhkp6sinvI8iz0skaLQd8Zm9VL4ladSe+Q
matcwJzWBuEhb98rQnN4xn4+0QAHjzuxjmvBG8WAxHvJvb+2RqQiDGOFqavB/++Q
pvxdM3+I+kNwXu0LIaNI9/xZYjx3tqXrTNPahR+SnikmWDmN69pT0X1kcAfhSnO0
5qGAkIA8yeRm8lpp8I11Cgim1Dkm9Kzk6k6qwdX/CgYnM8+S2Gf4U4WQGhxJLjyD
fsp1xqXc5LNUClrQzHMuRDSi0TyPQLI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:57 2023 by rpki-client on console-ams.rpki-client.org