Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bbdd321a-e258-378a-9b79-ad4db59c9bd7.roa
File:                     bbdd321a-e258-378a-9b79-ad4db59c9bd7.roa (raw, json)
Hash identifier:          0PmDvImLdIJWMHLk6PedbDZa/zYtu/8niThCWmoaFTk=
Subject key identifier:   F7:B7:D7:FD:2F:1C:F8:6B:0D:F9:F6:5A:A8:6C:99:B6:C5:E2:64:CE
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837E4E36090EDCB82B9FD008D80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bbdd321a-e258-378a-9b79-ad4db59c9bd7.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Sun 12 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        207.194.144.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:e4:e3:60:90:ed:cb:82:b9:fd:00:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb 12 05:00:00 2023 GMT
        Subject: CN=abb7202c-a2bd-4558-8252-14d24431a5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:1f:c3:30:8b:f6:87:7a:5f:b6:5c:59:d6:
                    6e:ab:17:f5:3e:4e:64:24:a5:3e:7b:3b:0b:95:cc:
                    59:e8:12:39:8f:8a:7f:61:e9:0e:c7:2c:ee:f4:cb:
                    12:a2:a2:96:fb:79:f5:aa:f7:f5:83:3c:0f:a0:eb:
                    a8:0d:bf:0b:23:f9:06:ff:4a:63:01:8e:0d:0e:be:
                    b3:f2:bd:d6:2b:f2:2f:bd:b4:9a:a2:29:32:01:fe:
                    33:cc:3a:36:ab:b8:50:b2:98:e0:cd:b0:fa:95:cd:
                    6e:38:67:31:45:bb:0f:99:26:99:1b:d6:2f:ad:8c:
                    7c:9d:af:87:64:38:29:bf:1f:18:fc:a3:28:b0:1c:
                    e5:f6:c1:e0:af:ae:f4:d1:c7:a8:51:20:48:a2:c1:
                    0c:48:78:44:b5:9b:e5:d6:59:f3:02:2b:98:39:7a:
                    2c:61:fa:0e:80:5c:57:4e:67:60:54:fc:1c:3f:b6:
                    a3:19:5c:f7:aa:8c:5e:6c:1f:6d:7b:43:59:ff:64:
                    dd:a8:4c:61:b0:2d:af:f2:e1:d1:2c:10:55:0f:ee:
                    50:9e:92:42:2c:4d:13:69:32:55:d6:b9:97:90:d9:
                    5d:06:db:d2:6d:d1:6e:27:71:fe:48:73:c5:02:dd:
                    0a:c9:16:ee:8c:9d:ac:23:8f:57:e9:f2:2e:bf:37:
                    02:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B7:D7:FD:2F:1C:F8:6B:0D:F9:F6:5A:A8:6C:99:B6:C5:E2:64:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/bbdd321a-e258-378a-9b79-ad4db59c9bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.194.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f7:e5:e7:b4:47:cf:7e:c9:04:ac:89:17:6c:42:be:ac:b3:23:
         7c:cf:fd:8d:00:10:8b:a2:7a:14:ca:93:39:17:74:13:01:af:
         1d:42:74:c9:2d:f1:23:f3:2b:ef:ef:43:e7:db:01:c3:29:45:
         f3:35:93:78:4c:8e:58:68:1d:ff:87:ea:d6:4c:ad:bf:b9:bd:
         bf:43:c5:1e:c6:84:95:6e:59:5b:d9:d8:92:33:a3:63:23:a7:
         c1:5c:64:f8:db:49:8d:e7:7c:28:3b:be:82:b4:28:15:46:71:
         49:2f:b4:54:e8:93:56:16:3c:10:76:2a:7d:1e:d2:1e:2b:54:
         f8:ce:d5:59:d6:74:eb:c0:c6:74:d5:ca:00:c2:9e:b1:59:f5:
         1b:47:5a:21:71:76:04:80:88:a4:e9:11:22:cb:ab:b7:03:72:
         09:41:f2:ab:ab:8c:7d:7e:9f:bb:d6:30:d9:33:03:aa:2b:ad:
         b8:b5:5b:2a:85:86:29:70:d8:70:22:ff:c7:99:1e:69:0d:d4:
         a3:6b:29:f3:6b:3f:dc:73:ca:85:ad:88:ff:bf:d5:a9:99:3b:
         0d:11:b6:60:dd:7e:96:31:16:c0:49:21:e8:3a:14:c0:f4:b2:
         76:61:c4:51:86:e2:7a:fc:38:db:01:bd:bb:22:9c:95:f1:4e:
         7f:21:8c:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDfk42CQ7cuCuf0AjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTIwMDkyMTA0MDAwMFoXDTIzMDIxMjA1MDAwMFowLzEtMCsGA1UEAxMk
YWJiNzIwMmMtYTJiZC00NTU4LTgyNTItMTRkMjQ0MzFhNWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0MfwzCL9od6X7ZcWdZuqxf1Pk5kJKU+ezsL
lcxZ6BI5j4p/YekOxyzu9MsSoqKW+3n1qvf1gzwPoOuoDb8LI/kG/0pjAY4NDr6z
8r3WK/IvvbSaoikyAf4zzDo2q7hQspjgzbD6lc1uOGcxRbsPmSaZG9YvrYx8na+H
ZDgpvx8Y/KMosBzl9sHgr6700ceoUSBIosEMSHhEtZvl1lnzAiuYOXosYfoOgFxX
TmdgVPwcP7ajGVz3qoxebB9te0NZ/2TdqExhsC2v8uHRLBBVD+5QnpJCLE0TaTJV
1rmXkNldBtvSbdFuJ3H+SHPFAt0KyRbujJ2sI49X6fIuvzcCfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPe31/0vHPhrDfn2WqhsmbbF4mTOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmJkZDMyMWEtZTI1OC0z
NzhhLTliNzktYWQ0ZGI1OWM5YmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8KQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAPfl57RHz37JBKyJF2xCvqyzI3zP/Y0AEIuiehTKkzkXdBMBrx1CdMkt
8SPzK+/vQ+fbAcMpRfM1k3hMjlhoHf+H6tZMrb+5vb9DxR7GhJVuWVvZ2JIzo2Mj
p8FcZPjbSY3nfCg7voK0KBVGcUkvtFTok1YWPBB2Kn0e0h4rVPjO1VnWdOvAxnTV
ygDCnrFZ9RtHWiFxdgSAiKTpESLLq7cDcglB8qurjH1+n7vWMNkzA6orrbi1WyqF
hilw2HAi/8eZHmkN1KNrKfNrP9xzyoWtiP+/1amZOw0RtmDdfpYxFsBJIeg6FMD0
snZhxFGG4nr8ONsBvbsinJXxTn8hjJY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:05 2023 by rpki-client on console-fra.rpki-client.org