Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d77f075e-4d77-360d-9d4e-14be9e5c844d.roa
File:                     d77f075e-4d77-360d-9d4e-14be9e5c844d.roa (raw, json)
Hash identifier:          H0f3CT7Kz+I7u9orLsDsDaU76+0NXMl88z74vCs5eOQ=
Subject key identifier:   C6:25:CB:98:0D:F3:DA:33:4C:6A:FB:B6:B0:FA:3E:82:AE:E0:18:70
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7B29840132500468E58D740
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d77f075e-4d77-360d-9d4e-14be9e5c844d.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.180.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b2:98:40:13:25:00:46:8e:58:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=f91ea579-8e95-4dd1-9190-9d92daf3db6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:57:14:56:b3:20:25:6c:b3:91:74:6e:fc:
                    0a:a0:94:38:01:81:15:ae:99:5f:cc:b0:20:d1:57:
                    66:7e:6c:35:4a:cc:9c:c8:4d:b9:03:6f:3f:41:ef:
                    5e:1e:ed:0d:53:71:6a:83:75:17:a3:f6:58:26:7d:
                    75:b6:9a:32:3c:22:86:6f:94:e3:e3:a4:80:4a:82:
                    ca:f0:66:0c:8c:a1:0e:f4:60:7b:7d:c8:5a:b8:d1:
                    03:7c:28:fe:3c:77:a2:50:b0:55:fb:6e:b9:89:31:
                    6e:01:80:6a:4f:a7:3d:e5:0e:c6:67:22:e6:98:c1:
                    ed:8e:57:92:bb:47:19:d3:b7:87:c6:d1:e4:55:f8:
                    cd:ee:ac:f6:1d:b2:0a:48:68:9f:bd:d4:03:1b:32:
                    47:0a:55:06:d6:1a:54:aa:26:28:b6:6e:db:cf:57:
                    3c:57:dc:c6:cf:fb:6b:5f:98:4f:1a:54:89:b3:e6:
                    20:43:20:6a:da:c7:13:7b:78:7d:4b:ce:38:0e:dc:
                    d8:80:2a:ed:ce:c5:d0:30:fa:48:d2:6b:2c:20:95:
                    f6:5c:85:b6:38:07:d4:79:bf:43:97:bf:37:a0:a5:
                    f5:1a:c1:b5:ac:29:52:84:fc:07:b0:f3:37:99:79:
                    3e:e7:0e:73:9a:47:ad:72:f8:43:80:b0:02:b0:dc:
                    a8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:25:CB:98:0D:F3:DA:33:4C:6A:FB:B6:B0:FA:3E:82:AE:E0:18:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d77f075e-4d77-360d-9d4e-14be9e5c844d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b0:e1:9e:bb:f8:65:7a:23:3d:52:98:f8:47:ab:e8:f1:39:
         3c:4b:6c:be:22:78:dd:db:7c:56:19:2b:ac:e2:0b:44:4c:1d:
         66:df:4a:00:6c:1a:83:34:c5:ab:c2:68:12:4c:64:1b:b2:3d:
         8e:d7:32:5f:e8:6a:21:31:94:88:a7:d9:24:8f:3e:6d:36:10:
         79:5a:7a:16:c1:ae:c5:7d:9b:55:fb:cd:aa:b0:5d:b3:d9:87:
         bb:94:f6:f4:15:66:f8:cd:78:7a:94:2a:4c:c6:c7:3f:40:c5:
         07:94:a3:e1:62:3b:ed:a3:20:97:2f:44:f5:92:26:e5:95:a8:
         d6:97:c3:4b:15:a2:13:24:e1:f6:5e:4c:fb:ef:4a:75:56:bf:
         c8:61:15:d7:46:f6:f0:81:eb:fe:f1:e1:bb:9d:f2:9a:50:14:
         fe:f5:ea:80:0a:e8:03:ac:bf:ff:2d:81:56:50:13:2c:1d:69:
         09:1f:09:12:07:0b:95:da:11:96:8c:cf:96:bd:1f:37:ca:75:
         44:c9:25:5c:23:33:0f:a7:b9:9e:87:14:f5:f1:86:60:94:1f:
         a1:97:20:eb:71:43:ec:bb:7c:35:d2:9d:42:da:bb:b3:23:4f:
         a0:72:9e:b8:af:98:eb:27:38:40:17:26:59:9a:ec:63:45:5d:
         f0:1d:ba:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnsphAEyUARo5Y10AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZjkxZWE1NzktOGU5NS00ZGQxLTkxOTAtOWQ5MmRhZjNkYjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphhXFFazICVss5F0bvwKoJQ4AYEVrplfzLAg
0Vdmfmw1SsycyE25A28/Qe9eHu0NU3Fqg3UXo/ZYJn11tpoyPCKGb5Tj46SASoLK
8GYMjKEO9GB7fchauNEDfCj+PHeiULBV+265iTFuAYBqT6c95Q7GZyLmmMHtjleS
u0cZ07eHxtHkVfjN7qz2HbIKSGifvdQDGzJHClUG1hpUqiYotm7bz1c8V9zGz/tr
X5hPGlSJs+YgQyBq2scTe3h9S844DtzYgCrtzsXQMPpI0mssIJX2XIW2OAfUeb9D
l783oKX1GsG1rClShPwHsPM3mXk+5w5zmketcvhDgLACsNyoVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYly5gN89ozTGr7trD6PoKu4BhwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZDc3ZjA3NWUtNGQ3Ny0z
NjBkLTlkNGUtMTRiZTllNWM4NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaO20MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAmw4Z67+GV6Iz1SmPhHq+jxOTxLbL4ieN3bfFYZK6ziC0RMHWbfSgBs
GoM0xavCaBJMZBuyPY7XMl/oaiExlIin2SSPPm02EHlaehbBrsV9m1X7zaqwXbPZ
h7uU9vQVZvjNeHqUKkzGxz9AxQeUo+FiO+2jIJcvRPWSJuWVqNaXw0sVohMk4fZe
TPvvSnVWv8hhFddG9vCB6/7x4bud8ppQFP716oAK6AOsv/8tgVZQEywdaQkfCRIH
C5XaEZaMz5a9HzfKdUTJJVwjMw+nuZ6HFPXxhmCUH6GXIOtxQ+y7fDXSnULau7Mj
T6BynrivmOsnOEAXJlma7GNFXfAdukM=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:39 2023 by rpki-client on console-fra.rpki-client.org