Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2ead302a-6a9d-3b4f-8282-7a253153d771.roa
File:                     2ead302a-6a9d-3b4f-8282-7a253153d771.roa (raw, json)
Hash identifier:          fwNB+/lopKEbUWZ7mp7ISo6vTdcsqBzPYi3aK9o5/4k=
Subject key identifier:   8F:27:04:1E:7B:29:EA:C6:AA:87:BA:B5:79:54:6E:F0:9A:71:63:0A
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7A354F366CA07B7E3D77840
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2ead302a-6a9d-3b4f-8282-7a253153d771.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.254.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a3:54:f3:66:ca:07:b7:e3:d7:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=4dfc5087-4803-481b-be98-d0ce9d3348aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:51:74:83:8a:59:f3:e1:68:3e:e3:ec:65:
                    33:d7:97:bf:cc:ad:21:07:11:44:0c:1c:ba:5c:82:
                    85:5b:46:88:e5:5d:77:8b:f3:f4:b2:7d:15:b7:c4:
                    a8:69:11:cc:77:49:e3:b8:1c:dc:44:94:4b:07:de:
                    3c:41:f4:3e:31:a7:db:9a:a3:25:77:e9:c9:dc:be:
                    a7:3a:3d:12:cf:89:c0:47:51:b6:11:53:10:12:d6:
                    52:a4:53:f8:4e:8d:2c:c6:59:58:23:61:85:d5:d7:
                    a0:05:1e:ac:31:6e:89:e9:1e:c0:51:64:41:11:fe:
                    81:bd:cf:9c:09:ca:a6:d1:ae:b6:3d:86:e8:6a:d6:
                    01:cc:40:70:49:a2:00:d8:55:6b:0f:19:00:03:3d:
                    fc:c6:f0:68:71:b3:7a:f4:ac:c8:e6:f8:25:ff:43:
                    64:3e:cf:12:7f:38:fe:1d:2c:0b:0d:8e:1b:76:c4:
                    90:e7:56:ff:3f:04:28:f3:41:07:ad:bc:26:0d:96:
                    79:c7:b4:7e:5c:36:8d:bc:b2:14:7c:08:a6:8c:ce:
                    11:35:09:22:a5:d0:ca:d4:cf:70:1d:10:10:7f:c4:
                    d2:39:50:e2:3b:ec:84:a8:85:c2:a5:2a:e3:68:b1:
                    0a:77:d1:43:59:ab:00:96:b8:96:cd:ea:9b:66:07:
                    ae:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:27:04:1E:7B:29:EA:C6:AA:87:BA:B5:79:54:6E:F0:9A:71:63:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/2ead302a-6a9d-3b4f-8282-7a253153d771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:c2:b4:fb:15:ff:2c:e2:fb:1f:ed:bf:08:77:eb:1f:7d:77:
         2c:46:7f:6f:75:3d:50:9a:85:02:16:a2:bf:ea:24:48:19:04:
         ae:80:0b:a9:82:76:a6:6c:08:c6:3e:2a:8e:5e:76:1f:a0:df:
         16:78:ca:5e:6c:f3:54:ba:7b:d9:69:d2:5d:8a:d7:05:12:be:
         d8:a3:de:90:db:81:19:f9:0d:97:80:41:3b:51:a5:c4:c6:e9:
         98:da:92:22:00:54:21:f7:09:59:2a:be:45:fd:ff:32:ce:3c:
         a1:65:27:24:db:b1:58:97:ae:3b:8c:f7:7e:c6:06:61:94:af:
         ef:b9:5d:db:58:4b:f6:82:27:48:cd:96:7e:66:10:21:7d:10:
         41:73:e3:5b:06:6c:4f:1d:47:d8:48:ec:6e:6b:08:09:95:be:
         77:37:ae:20:57:a0:16:60:b3:ba:80:fa:f6:c4:fe:3c:ac:eb:
         90:1d:8d:ad:0e:6c:1c:e6:70:67:39:ed:0d:b1:4f:66:92:39:
         2c:51:96:49:d5:27:6a:f1:1d:f6:6c:8a:23:d1:02:e4:62:5b:
         60:80:a6:74:e2:af:6e:d8:b8:22:4a:22:bc:ee:0f:20:a3:a8:
         ec:ea:dd:d6:4e:c0:af:87:e2:17:7a:ed:2e:43:cb:b6:0a:6d:
         d7:cc:51:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqno1TzZsoHt+PXeEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
NGRmYzUwODctNDgwMy00ODFiLWJlOTgtZDBjZTlkMzM0OGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCdRdIOKWfPhaD7j7GUz15e/zK0hBxFEDBy6
XIKFW0aI5V13i/P0sn0Vt8SoaRHMd0njuBzcRJRLB948QfQ+MafbmqMld+nJ3L6n
Oj0Sz4nAR1G2EVMQEtZSpFP4To0sxllYI2GF1degBR6sMW6J6R7AUWRBEf6Bvc+c
Ccqm0a62PYboatYBzEBwSaIA2FVrDxkAAz38xvBocbN69KzI5vgl/0NkPs8Sfzj+
HSwLDY4bdsSQ51b/PwQo80EHrbwmDZZ5x7R+XDaNvLIUfAimjM4RNQkipdDK1M9w
HRAQf8TSOVDiO+yEqIXCpSrjaLEKd9FDWasAlriWzeqbZgeuwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI8nBB57KerGqoe6tXlUbvCacWMKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMmVhZDMwMmEtNmE5ZC0z
YjRmLTgyODItN2EyNTMxNTNkNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAn+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnCtPsV/yzi+x/tvwh36x99dyxGf291PVCahQIWor/qJEgZBK6AC6mC
dqZsCMY+Ko5edh+g3xZ4yl5s81S6e9lp0l2K1wUSvtij3pDbgRn5DZeAQTtRpcTG
6ZjakiIAVCH3CVkqvkX9/zLOPKFlJyTbsViXrjuM937GBmGUr++5XdtYS/aCJ0jN
ln5mECF9EEFz41sGbE8dR9hI7G5rCAmVvnc3riBXoBZgs7qA+vbE/jys65Adja0O
bBzmcGc57Q2xT2aSOSxRlknVJ2rxHfZsiiPRAuRiW2CApnTir27YuCJKIrzuDyCj
qOzq3dZOwK+H4hd67S5Dy7YKbdfMUV8=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:38 2023 by rpki-client on console-fra.rpki-client.org