Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52a567b6-4d15-38cc-aba9-ca041f83c947.roa
File:                     52a567b6-4d15-38cc-aba9-ca041f83c947.roa (raw, json)
Hash identifier:          OSJQkT5w7b3OpytdP2KdzKqY92yWokuPsuI8N+f5IuU=
Subject key identifier:   A9:51:0C:B2:D2:71:37:7C:AA:99:53:CA:51:27:96:2F:00:CD:52:A3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7C57FB0318F95B2CC802D90
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52a567b6-4d15-38cc-aba9-ca041f83c947.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        35.203.0.0/20 maxlen: 20

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c5:7f:b0:31:8f:95:b2:cc:80:2d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=9b7ac292-1c47-4ac4-b7eb-4649746a8030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:67:26:aa:39:72:e4:b9:36:66:b5:8e:b5:d0:
                    44:2f:a1:ef:8c:3b:10:e7:9c:fa:c8:fe:55:6a:a3:
                    74:ca:f2:5f:36:b2:81:b9:5a:1b:0d:82:55:97:cd:
                    db:f9:11:8a:54:35:b2:aa:48:3b:31:c1:7d:e6:97:
                    3c:f8:d4:61:50:1f:57:cd:d9:9b:ee:43:9d:9e:aa:
                    7f:a0:c7:3e:eb:52:e6:08:b6:ec:33:d0:db:18:47:
                    e9:b9:82:33:53:1d:0b:d4:e8:e4:46:c0:24:9a:16:
                    4f:f6:91:0c:5e:94:d2:90:27:69:1a:fa:10:a2:4c:
                    5f:c7:a1:85:20:27:51:b5:a0:d3:9b:e8:02:d6:b5:
                    3b:8f:cb:c6:76:27:1d:08:21:ed:05:68:5e:16:58:
                    53:1e:93:d6:c5:fc:9d:ee:31:95:a9:75:46:94:46:
                    48:06:26:fb:64:f7:95:93:01:c0:36:cb:4a:88:d8:
                    2c:a0:e9:36:4d:00:19:26:0e:27:69:ca:ac:35:99:
                    67:e2:b5:3b:a4:fd:7c:7e:3b:98:ee:9e:8c:e5:a9:
                    be:29:58:cf:b9:3f:7f:12:7c:3d:2f:3c:e1:a2:8a:
                    97:88:57:51:54:3f:20:7e:50:c0:c8:8e:eb:f4:6c:
                    03:78:d2:a4:00:8d:95:8b:ce:e6:aa:b3:8c:f1:96:
                    08:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:51:0C:B2:D2:71:37:7C:AA:99:53:CA:51:27:96:2F:00:CD:52:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52a567b6-4d15-38cc-aba9-ca041f83c947.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.203.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:8c:77:17:fe:bd:3d:74:6f:83:a9:12:db:b5:42:be:b3:11:
         aa:dc:f5:ad:4f:e5:a9:5d:de:0d:74:d0:9e:77:14:75:b6:50:
         a0:1b:1e:95:7a:97:8a:fd:8b:ea:0c:1b:3b:9c:67:99:af:9f:
         b7:16:3e:c6:d2:16:3f:4e:ad:f2:1f:ae:52:96:da:dd:6f:90:
         88:55:23:3a:1c:3d:12:90:0d:26:b9:63:ff:88:79:51:7a:16:
         b9:a7:cf:8d:39:17:36:e3:3a:3b:20:da:b7:c7:3c:69:fb:1a:
         7b:33:22:88:7c:6a:27:52:7b:d3:5a:0b:dd:e4:9c:47:2d:b3:
         71:eb:18:62:69:72:a5:be:8b:ae:cc:d5:06:87:4c:20:c1:f2:
         a6:39:8f:1d:85:31:4b:76:68:9d:80:86:e0:5c:fe:e7:d1:6e:
         c1:63:8f:4a:4b:17:f1:45:c8:f9:a0:f1:ff:99:3b:8b:82:d4:
         fc:61:47:16:8c:8f:a2:5c:ac:9d:8f:fe:b1:87:76:b9:c2:1f:
         24:23:fe:f1:1d:85:d9:66:83:a1:aa:0e:b7:48:05:6d:89:58:
         d9:9a:7d:a7:15:6a:d8:9d:f3:a9:81:b8:b8:ee:9a:7d:2a:d7:
         89:bb:cb:f8:8d:87:78:59:9a:75:ef:8c:e1:02:e2:ad:1f:25:
         6a:64:24:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnxX+wMY+VssyALZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
OWI3YWMyOTItMWM0Ny00YWM0LWI3ZWItNDY0OTc0NmE4MDMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWcmqjly5Lk2ZrWOtdBEL6HvjDsQ55z6yP5V
aqN0yvJfNrKBuVobDYJVl83b+RGKVDWyqkg7McF95pc8+NRhUB9Xzdmb7kOdnqp/
oMc+61LmCLbsM9DbGEfpuYIzUx0L1OjkRsAkmhZP9pEMXpTSkCdpGvoQokxfx6GF
ICdRtaDTm+gC1rU7j8vGdicdCCHtBWheFlhTHpPWxfyd7jGVqXVGlEZIBib7ZPeV
kwHANstKiNgsoOk2TQAZJg4nacqsNZln4rU7pP18fjuY7p6M5am+KVjPuT9/Enw9
LzzhooqXiFdRVD8gflDAyI7r9GwDeNKkAI2Vi87mqrOM8ZYIrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKlRDLLScTd8qplTylEnli8AzVKjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNTJhNTY3YjYtNGQxNS0z
OGNjLWFiYTktY2EwNDFmODNjOTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8sAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKSMdxf+vT10b4OpEtu1Qr6zEarc9a1P5ald3g100J53FHW2UKAbHpV6
l4r9i+oMGzucZ5mvn7cWPsbSFj9OrfIfrlKW2t1vkIhVIzocPRKQDSa5Y/+IeVF6
Frmnz405FzbjOjsg2rfHPGn7GnszIoh8aidSe9NaC93knEcts3HrGGJpcqW+i67M
1QaHTCDB8qY5jx2FMUt2aJ2AhuBc/ufRbsFjj0pLF/FFyPmg8f+ZO4uC1PxhRxaM
j6JcrJ2P/rGHdrnCHyQj/vEdhdlmg6GqDrdIBW2JWNmafacVatid86mBuLjumn0q
14m7y/iNh3hZmnXvjOEC4q0fJWpkJNk=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:42 2023 by rpki-client on console-fra.rpki-client.org