Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/0defaf94-1a94-3672-aa56-2f3c442a8931.roa
File:                     0defaf94-1a94-3672-aa56-2f3c442a8931.roa (raw, json)
Hash identifier:          Zabd1gT5KmT/4d3m5+kV2ExicTubxwrVpdqBm6Z5WsQ=
Subject key identifier:   06:6D:A0:F6:BE:31:8B:CD:B5:2F:D1:36:64:56:EE:8D:17:6E:DA:D3
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7B190F55F99C584460D8470
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/0defaf94-1a94-3672-aa56-2f3c442a8931.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        64.15.124.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b1:90:f5:5f:99:c5:84:46:0d:84:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=1159907a-83dd-4962-8dfe-42a761aecde4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:24:3c:cd:eb:e7:1c:5c:f6:09:ac:43:41:
                    c0:c3:f8:2a:58:65:6d:71:31:40:a9:2a:0f:e9:7f:
                    ac:2b:67:ab:91:74:86:8d:e5:16:fb:c5:3d:7b:c7:
                    0d:7a:25:a7:10:3b:e9:5e:77:66:f7:17:1f:b3:7c:
                    89:1e:2c:cf:7e:be:a3:c3:02:7f:52:6f:18:ea:22:
                    35:fe:d3:88:3e:d9:3f:af:93:5f:a8:10:15:c7:7e:
                    92:8d:56:30:30:46:b2:45:f1:e1:d7:74:98:11:2b:
                    dd:b9:c0:4f:d5:ce:9f:9c:38:0b:28:9e:9a:93:22:
                    74:67:92:0c:4b:53:5c:8e:37:c2:3c:04:4f:89:83:
                    e9:c2:ed:83:f8:9a:96:6f:cc:23:89:a2:90:f6:df:
                    2d:32:36:cf:38:0e:cc:b6:b1:2f:47:a4:d2:9c:6a:
                    6a:49:06:4e:af:a3:dc:15:9c:72:c2:0e:c4:f6:cd:
                    e8:8d:eb:0e:82:fa:c6:87:6b:c7:fe:e7:3b:9b:56:
                    30:77:8c:c3:60:a7:8b:23:c5:e7:d5:f0:96:38:7f:
                    35:7f:97:fe:8b:45:40:1c:aa:c3:bf:df:46:b2:58:
                    c3:33:0b:9f:04:74:8c:e2:3e:37:bf:74:4c:eb:aa:
                    ef:ab:83:d1:93:39:b3:4e:7a:b0:ba:0e:2e:2e:93:
                    31:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6D:A0:F6:BE:31:8B:CD:B5:2F:D1:36:64:56:EE:8D:17:6E:DA:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/0defaf94-1a94-3672-aa56-2f3c442a8931.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.15.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:12:45:0e:a8:ec:bc:6f:97:60:75:85:4c:55:cc:c3:fe:33:
         97:1d:a3:17:50:4b:96:bd:77:0f:01:56:55:87:37:ff:3b:2b:
         d7:1d:52:95:83:cc:98:ac:58:a8:0e:57:64:e6:1d:b5:4e:d2:
         0d:7a:5b:de:c3:e3:3e:63:c0:59:af:9d:0d:25:95:ec:92:11:
         df:74:22:29:1a:f5:22:f1:17:aa:1c:e0:26:f2:e3:32:9a:8f:
         0b:26:d6:02:83:1a:15:09:71:b0:07:86:77:0b:08:7f:c4:4a:
         b5:88:b3:12:b6:dd:67:ae:c5:8b:69:60:14:14:8e:e5:78:3d:
         be:69:ef:d9:32:9a:60:44:bb:e6:6a:87:af:03:08:e9:e5:da:
         4b:47:cc:77:5f:76:ee:37:17:75:90:58:09:39:87:a9:9a:45:
         e4:5e:33:8f:bc:3b:92:8d:2e:96:25:36:b5:f9:15:e8:ba:6d:
         ca:c7:46:8e:e1:7c:94:a0:87:2f:de:8d:d9:56:3b:83:ba:85:
         a4:53:46:a9:41:37:8d:6a:e8:56:4c:1c:8f:e9:48:30:ea:81:
         37:b1:49:be:ad:95:a0:ab:01:6c:83:0d:85:49:5c:99:ba:19:
         9d:9e:92:47:ae:86:93:1d:36:ba:cb:2a:8d:53:10:87:9b:b9:
         fa:3c:06:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnsZD1X5nFhEYNhHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MTE1OTkwN2EtODNkZC00OTYyLThkZmUtNDJhNzYxYWVjZGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0wkPM3r5xxc9gmsQ0HAw/gqWGVtcTFAqSoP
6X+sK2erkXSGjeUW+8U9e8cNeiWnEDvpXndm9xcfs3yJHizPfr6jwwJ/Um8Y6iI1
/tOIPtk/r5NfqBAVx36SjVYwMEayRfHh13SYESvducBP1c6fnDgLKJ6akyJ0Z5IM
S1NcjjfCPARPiYPpwu2D+JqWb8wjiaKQ9t8tMjbPOA7MtrEvR6TSnGpqSQZOr6Pc
FZxywg7E9s3ojesOgvrGh2vH/uc7m1Ywd4zDYKeLI8Xn1fCWOH81f5f+i0VAHKrD
v99GsljDMwufBHSM4j43v3RM66rvq4PRkzmzTnqwug4uLpMx+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAZtoPa+MYvNtS/RNmRW7o0XbtrTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMGRlZmFmOTQtMWE5NC0z
NjcyLWFhNTYtMmYzYzQ0MmE4OTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQA98MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQSRQ6o7Lxvl2B1hUxVzMP+M5cdoxdQS5a9dw8BVlWHN/87K9cdUpWD
zJisWKgOV2TmHbVO0g16W97D4z5jwFmvnQ0lleySEd90Iika9SLxF6oc4Cby4zKa
jwsm1gKDGhUJcbAHhncLCH/ESrWIsxK23WeuxYtpYBQUjuV4Pb5p79kymmBEu+Zq
h68DCOnl2ktHzHdfdu43F3WQWAk5h6maReReM4+8O5KNLpYlNrX5Fei6bcrHRo7h
fJSghy/ejdlWO4O6haRTRqlBN41q6FZMHI/pSDDqgTexSb6tlaCrAWyDDYVJXJm6
GZ2ekkeuhpMdNrrLKo1TEIebufo8Bns=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org