Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/6d424b84-7575-342f-bb21-838799f2e1a4.roa
File:                     6d424b84-7575-342f-bb21-838799f2e1a4.roa (raw, json)
Hash identifier:          JcQ5mEgCVe1fUZpB5OFCrQHB6kj+pxbbR5EY05XExR4=
Subject key identifier:   5B:F7:A7:0D:43:B4:3A:6E:33:22:32:B9:74:75:0E:E6:46:7B:DF:94
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F43285843CEB49B4B6D5A97F040BB7838
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/6d424b84-7575-342f-bb21-838799f2e1a4.roa
Signing time:             Tue 07 Nov 2023 09:12:37 +0000
ROA not before:           Tue 07 Nov 2023 09:12:37 +0000
ROA not after:            Mon 05 Feb 2024 09:12:37 +0000
asID:                     399532
IP address blocks:        172.82.74.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ce:b4:9b:4b:6d:5a:97:f0:40:bb:78:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Nov  7 09:12:37 2023 GMT
            Not After : Feb  5 09:12:37 2024 GMT
        Subject: CN=4208a6fb-8087-444c-b57f-6efec6ebf953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9e:dd:1f:c4:98:c1:69:a8:26:94:34:7e:1e:
                    61:68:b6:d3:92:e1:d8:85:b4:f4:f6:dd:99:da:52:
                    bb:a0:10:40:18:53:bc:05:e4:74:66:6b:c6:c7:a5:
                    05:cd:01:09:bb:fa:ae:fe:d9:61:45:fe:87:af:19:
                    2e:08:76:3c:5b:c3:21:dd:0e:e2:3b:7e:f0:59:57:
                    88:6a:9a:94:06:6e:da:5a:c3:a8:06:56:94:a2:fe:
                    21:68:f2:c0:ca:50:5d:2e:34:94:bd:9f:01:15:2e:
                    34:0d:82:8e:6a:e2:d8:db:7a:6c:2b:11:44:6d:16:
                    8c:0b:01:d5:fe:59:01:b6:80:c3:3b:5f:36:ee:44:
                    f5:ca:b5:72:37:3b:99:d8:9a:7b:4a:d4:ac:62:03:
                    99:e3:5b:65:f0:4d:a6:91:8a:78:51:32:3b:78:a1:
                    db:7b:51:23:4a:90:63:f8:66:f8:d3:50:ad:55:1d:
                    a3:f8:be:04:2e:f2:fc:36:3f:d8:0d:76:9c:45:f3:
                    35:37:78:b4:44:35:0f:97:80:86:d2:5c:ff:67:a4:
                    cc:be:db:54:53:1f:bf:8a:9e:92:fc:b7:b2:c0:ca:
                    1e:4e:f7:e1:1e:76:f5:e4:41:29:43:6a:89:89:91:
                    28:81:54:ee:d5:bd:a7:4d:ab:03:ad:04:0a:62:82:
                    25:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F7:A7:0D:43:B4:3A:6E:33:22:32:B9:74:75:0E:E6:46:7B:DF:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/6d424b84-7575-342f-bb21-838799f2e1a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:b4:1e:e0:04:e9:38:43:f1:c1:ad:62:11:dc:02:05:da:3a:
         20:e4:c0:d7:03:a9:7d:54:50:2a:b8:0d:b0:88:de:87:31:d6:
         ed:64:d4:c5:8e:21:f4:5a:2d:68:42:c0:1b:c2:26:b5:17:8d:
         ff:a0:fb:e3:e4:ef:11:73:7f:c7:02:ed:89:e5:04:b7:91:72:
         91:a1:53:5b:c0:01:de:89:70:34:36:20:35:57:dd:41:76:ba:
         50:07:6b:bd:82:c3:ea:be:47:5b:ff:3b:dc:7c:e6:5a:e7:55:
         c9:0e:f6:08:a4:de:28:90:35:dd:c3:77:a0:96:da:47:43:eb:
         89:1b:32:1c:66:6c:af:8d:26:b9:c5:fb:33:61:1e:1a:f7:4f:
         dc:1f:85:3e:8f:f1:4c:a6:78:71:0a:c3:ad:95:ed:d9:c6:4d:
         1d:0d:7f:93:55:be:75:2e:70:bd:6b:89:cf:b9:91:f1:3a:bb:
         94:b7:af:eb:8b:47:b2:2a:03:fd:9c:a0:3e:85:c7:40:2f:3b:
         b6:5b:a3:c2:1e:65:47:c4:80:22:67:13:71:b6:51:72:17:c3:
         10:9c:02:29:0e:65:c3:5f:5a:78:e5:00:ee:40:89:24:4d:52:
         46:53:41:e7:b6:98:c5:ce:9a:96:99:8b:d0:32:d1:ba:89:ba:
         db:39:1b:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEPOtJtLbVqX8EC7eDgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGJiYmI2MWYtZmMxNy00ZDk2LWI5YzMtODg0MGJjZGQ0
MWMyMB4XDTIzMTEwNzA5MTIzN1oXDTI0MDIwNTA5MTIzN1owLzEtMCsGA1UEAxMk
NDIwOGE2ZmItODA4Ny00NDRjLWI1N2YtNmVmZWM2ZWJmOTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ7dH8SYwWmoJpQ0fh5haLbTkuHYhbT09t2Z
2lK7oBBAGFO8BeR0ZmvGx6UFzQEJu/qu/tlhRf6HrxkuCHY8W8Mh3Q7iO37wWVeI
apqUBm7aWsOoBlaUov4haPLAylBdLjSUvZ8BFS40DYKOauLY23psKxFEbRaMCwHV
/lkBtoDDO1827kT1yrVyNzuZ2Jp7StSsYgOZ41tl8E2mkYp4UTI7eKHbe1EjSpBj
+Gb401CtVR2j+L4ELvL8Nj/YDXacRfM1N3i0RDUPl4CG0lz/Z6TMvttUUx+/ip6S
/LeywMoeTvfhHnb15EEpQ2qJiZEogVTu1b2nTasDrQQKYoIlIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFv3pw1DtDpuMyIyuXR1DuZGe9+UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80YmJi
YjYxZi1mYzE3LTRkOTYtYjljMy04ODQwYmNkZDQxYzIvNmQ0MjRiODQtNzU3NS0z
NDJmLWJiMjEtODM4Nzk5ZjJlMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGJiYmI2MWYtZmMxNy00ZDk2LWI5
YzMtODg0MGJjZGQ0MWMyLzRiYmJiNjFmLWZjMTctNGQ5Ni1iOWMzLTg4NDBiY2Rk
NDFjMi5jcmwwHwYDVR0jBBgwFoAUYA/TZQdk//P1Rg4iJtc7WhIoGOowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80YmJiYjYxZi1mYzE3LTRkOTYtYjljMy04ODQw
YmNkZDQxYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFJKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIO0HuAE6ThD8cGtYhHcAgXaOiDkwNcDqX1UUCq4DbCI3ocx1u1k1MWO
IfRaLWhCwBvCJrUXjf+g++Pk7xFzf8cC7YnlBLeRcpGhU1vAAd6JcDQ2IDVX3UF2
ulAHa72Cw+q+R1v/O9x85lrnVckO9gik3iiQNd3Dd6CW2kdD64kbMhxmbK+NJrnF
+zNhHhr3T9wfhT6P8UymeHEKw62V7dnGTR0Nf5NVvnUucL1ric+5kfE6u5S3r+uL
R7IqA/2coD6Fx0AvO7Zbo8IeZUfEgCJnE3G2UXIXwxCcAikOZcNfWnjlAO5AiSRN
UkZTQee2mMXOmpaZi9Ay0bqJuts5G7c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:47 2024 by rpki-client on console-fra.rpki-client.org