Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/648071dd-04bd-3701-99a2-21f3a2e40bb7.roa
File:                     648071dd-04bd-3701-99a2-21f3a2e40bb7.roa (raw, json)
Hash identifier:          YHNBdOVsRYSDThuFFsWCJuHRu4GmuV6HVeoamwdFk9Y=
Subject key identifier:   BF:92:EF:A9:F3:E5:C2:6A:91:DE:9A:D1:55:13:A0:83:A9:19:45:9F
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584413A92EAA92C7B086B5A0A380
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/648071dd-04bd-3701-99a2-21f3a2e40bb7.roa
Signing time:             Sat 02 Dec 2023 02:00:16 +0000
ROA not before:           Sat 02 Dec 2023 02:00:16 +0000
ROA not after:            Fri 01 Mar 2024 02:00:16 +0000
asID:                     8100
IP address blocks:        216.185.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:13:a9:2e:aa:92:c7:b0:86:b5:a0:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Dec  2 02:00:16 2023 GMT
            Not After : Mar  1 02:00:16 2024 GMT
        Subject: CN=da16444b-c2a9-47bc-8b8a-47e5acc5167b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:18:ae:f4:27:cb:03:42:de:b9:5e:75:0c:
                    1e:8b:59:cd:f6:59:6d:d1:24:35:96:b3:0c:36:57:
                    16:ac:84:88:ed:52:aa:74:6f:4b:a1:a9:2c:a4:9a:
                    27:5d:18:5b:cd:6a:5e:ce:fb:49:1c:d5:3e:90:b6:
                    e0:27:12:2e:7e:f9:25:ab:f1:2b:77:93:0b:cc:ca:
                    2a:ee:c0:19:8c:5d:bb:ad:e6:05:52:04:49:e2:bf:
                    fd:53:75:a3:6f:61:4f:39:f2:b8:f9:59:75:fd:40:
                    f5:31:af:17:a8:60:3c:92:00:3f:4a:2a:d7:14:21:
                    11:8f:31:98:f3:1e:40:93:4c:10:68:82:97:c5:76:
                    d0:cf:6f:ad:93:8d:83:48:56:a3:a3:bc:95:5c:05:
                    7d:68:26:45:ce:62:fa:ea:91:d8:28:4b:53:c8:51:
                    52:78:c4:1c:08:8f:1f:39:46:35:23:b3:88:27:c8:
                    28:dd:50:45:76:5b:76:c3:20:e7:38:24:31:a5:8a:
                    ce:84:5a:38:a0:4b:2d:20:8e:9d:77:ee:6d:20:7e:
                    e6:a5:0a:19:12:42:bf:41:cc:f7:af:0a:45:a2:86:
                    b5:eb:1f:c4:86:89:89:66:12:f1:de:4b:81:d5:b9:
                    e0:e6:c8:bf:4e:9c:39:4f:96:fb:e0:e7:73:b6:c1:
                    ce:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:92:EF:A9:F3:E5:C2:6A:91:DE:9A:D1:55:13:A0:83:A9:19:45:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/648071dd-04bd-3701-99a2-21f3a2e40bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:36:ad:8e:64:ad:17:f0:78:b2:4d:b0:cf:68:f3:dd:39:66:
         d4:10:2b:ac:4d:b5:d3:2c:2d:43:0c:0f:db:58:02:fa:4d:c1:
         8d:d8:4d:08:68:88:77:cb:81:1a:a5:da:5c:44:2d:e1:05:8d:
         01:5e:d3:ca:b6:09:9a:23:bd:0b:9c:c4:da:5b:fa:0b:a8:11:
         84:e6:c8:6f:b5:0d:71:54:19:9f:a7:03:30:c9:65:a4:b9:15:
         50:80:bc:39:24:92:2e:f6:4c:0e:1f:1c:3c:37:7d:66:1d:04:
         74:e9:32:bf:f7:47:83:26:00:14:da:29:12:78:0c:8b:89:76:
         9b:80:e2:84:8f:f5:82:85:b4:fa:2f:0f:13:51:66:cc:51:91:
         63:15:b0:d1:c7:ea:9c:a6:65:28:9b:e3:23:1c:84:9d:0e:c5:
         72:03:cf:05:c4:2e:46:db:17:22:9a:ff:8b:a5:e0:94:5a:cf:
         87:b8:be:7f:3a:be:e6:b0:0b:29:95:9a:a7:02:eb:2e:ff:dc:
         58:c2:a3:ea:cb:b6:4c:09:23:0a:d6:aa:9b:92:79:44:8a:07:
         47:17:f1:d0:7e:99:43:cc:91:26:2d:38:16:69:45:0f:48:2f:
         31:bb:6a:0a:fc:64:c0:dd:2a:20:b6:4e:b7:95:40:7f:e0:b4:
         79:68:d0:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEQTqS6qksewhrWgo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTIzMTIwMjAyMDAxNloXDTI0MDMwMTAyMDAxNlowLzEtMCsGA1UEAxMk
ZGExNjQ0NGItYzJhOS00N2JjLThiOGEtNDdlNWFjYzUxNjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhwYrvQnywNC3rledQwei1nN9llt0SQ1lrMM
NlcWrISI7VKqdG9LoakspJonXRhbzWpezvtJHNU+kLbgJxIufvklq/Erd5MLzMoq
7sAZjF27reYFUgRJ4r/9U3Wjb2FPOfK4+Vl1/UD1Ma8XqGA8kgA/SirXFCERjzGY
8x5Ak0wQaIKXxXbQz2+tk42DSFajo7yVXAV9aCZFzmL66pHYKEtTyFFSeMQcCI8f
OUY1I7OIJ8go3VBFdlt2wyDnOCQxpYrOhFo4oEstII6dd+5tIH7mpQoZEkK/Qcz3
rwpFooa16x/EhomJZhLx3kuB1bng5si/Tpw5T5b74OdztsHO3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+S76nz5cJqkd6a0VUToIOpGUWfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvNjQ4MDcxZGQtMDRiZC0z
NzAxLTk5YTItMjFmM2EyZTQwYmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LksMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEE2rY5krRfweLJNsM9o8905ZtQQK6xNtdMsLUMMD9tYAvpNwY3YTQho
iHfLgRql2lxELeEFjQFe08q2CZojvQucxNpb+guoEYTmyG+1DXFUGZ+nAzDJZaS5
FVCAvDkkki72TA4fHDw3fWYdBHTpMr/3R4MmABTaKRJ4DIuJdpuA4oSP9YKFtPov
DxNRZsxRkWMVsNHH6pymZSib4yMchJ0OxXIDzwXELkbbFyKa/4ul4JRaz4e4vn86
vuawCymVmqcC6y7/3FjCo+rLtkwJIwrWqpuSeUSKB0cX8dB+mUPMkSYtOBZpRQ9I
LzG7agr8ZMDdKiC2TreVQH/gtHlo0MI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:32 2024 by rpki-client on console-ams.rpki-client.org