Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60539f92-c80b-336f-9da5-63a775c3751b.roa
File:                     60539f92-c80b-336f-9da5-63a775c3751b.roa (raw, json)
Hash identifier:          K+fT+i7s99lRdBZt9tznVcMLffKWRdrUg/B1z/Zf7RI=
Subject key identifier:   65:9C:E8:F1:0D:22:C5:1D:35:D1:16:31:8D:DC:CC:51:08:40:A7:19
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583B9705FAD95EA42BD3F2A57080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60539f92-c80b-336f-9da5-63a775c3751b.roa
Signing time:             Thu 14 Oct 2021 04:00:00 +0000
ROA not before:           Thu 14 Oct 2021 04:00:00 +0000
ROA not after:            Tue 16 Jan 2024 05:00:00 +0000
asID:                     396982
IP address blocks:        34.166.128.0/18 maxlen: 18

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:97:05:fa:d9:5e:a4:2b:d3:f2:a5:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct 14 04:00:00 2021 GMT
            Not After : Jan 16 05:00:00 2024 GMT
        Subject: CN=2fc35db7-38c6-48fd-bd8b-14c180c138b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e0:d7:0d:1d:cb:58:2f:3f:ee:fd:9e:2d:d3:
                    47:fa:cc:ab:db:b3:69:31:44:83:30:59:70:50:e0:
                    90:36:11:7b:2f:5a:5b:ad:8d:42:60:93:56:8b:cb:
                    b9:73:09:db:1f:12:fd:e9:f2:48:c0:91:05:45:28:
                    96:ba:fb:9a:c2:32:2f:4e:c6:23:12:f0:b3:1d:ff:
                    69:42:2c:e3:94:de:bb:67:ee:de:0a:ca:ab:83:2c:
                    21:29:aa:94:08:5d:28:be:98:f8:fa:b7:39:40:02:
                    71:b9:c9:df:2a:29:18:61:8b:25:60:88:61:04:8e:
                    a4:ba:1c:57:8c:58:ac:34:e5:e3:cb:25:62:06:2e:
                    7e:70:05:7a:11:fa:13:e1:c7:88:8b:ba:8f:ff:c3:
                    a0:67:d1:51:bd:ca:3f:7f:e4:58:56:5f:f6:57:b5:
                    d0:53:3c:bf:de:c5:e7:6f:34:80:29:64:63:5f:23:
                    e5:0b:f1:58:74:ce:d7:6b:ea:c0:eb:0c:0a:7f:5b:
                    1d:0c:97:eb:21:50:3d:79:25:c8:32:cd:e8:ef:33:
                    d4:52:75:a5:e4:5a:0c:bc:86:f9:a9:c4:d9:5a:30:
                    6b:a3:e4:2d:c6:a7:d0:08:80:0c:72:13:68:01:0b:
                    94:63:3a:6c:82:10:ea:75:79:6e:3f:3f:b6:6c:bd:
                    0c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9C:E8:F1:0D:22:C5:1D:35:D1:16:31:8D:DC:CC:51:08:40:A7:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/60539f92-c80b-336f-9da5-63a775c3751b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.166.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:87:28:c5:0e:ef:06:62:16:4a:d6:0a:c5:ba:b9:7b:84:6c:
         ea:63:46:aa:ba:32:92:55:24:7a:5c:33:00:b7:e2:37:ea:19:
         26:0b:31:7f:36:ee:62:b0:09:a4:d5:aa:92:21:46:fc:68:56:
         60:e8:2f:27:2f:8c:65:0f:23:f4:ee:a9:d3:b0:c9:b4:4b:d3:
         d2:1c:a6:9a:7d:56:55:a5:d0:b8:05:ef:7d:1c:c2:82:93:28:
         2b:d9:f2:84:43:bf:a8:4b:4f:cf:f5:fb:af:53:11:94:ff:8d:
         00:1e:d9:a9:49:c0:4f:e0:8b:f1:76:b1:43:c6:f1:3a:a9:32:
         aa:92:55:4d:14:a1:a7:04:b1:35:90:6a:be:04:b3:44:da:be:
         d2:51:05:a5:05:07:0c:c8:5e:6a:6a:f6:f6:81:78:18:fb:a7:
         80:24:a2:cc:0e:60:90:c7:0b:44:6a:92:d2:11:2d:ec:0f:a6:
         55:f7:25:ae:a2:e1:69:b0:7f:eb:72:f4:9d:80:7f:6b:47:27:
         81:75:cb:ba:22:e6:15:c9:29:3f:83:cd:d3:b7:00:cb:c0:2a:
         0f:91:dd:f4:e1:12:43:f1:a5:d3:89:9a:cf:6a:79:23:43:b5:
         b6:9d:9e:68:0e:1b:91:e6:8d:f6:fb:a8:cd:be:fd:b6:8f:15:
         b8:c9:6e:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDuXBfrZXqQr0/KlcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMTAxNDA0MDAwMFoXDTI0MDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
MmZjMzVkYjctMzhjNi00OGZkLWJkOGItMTRjMTgwYzEzOGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmODXDR3LWC8/7v2eLdNH+syr27NpMUSDMFlw
UOCQNhF7L1pbrY1CYJNWi8u5cwnbHxL96fJIwJEFRSiWuvuawjIvTsYjEvCzHf9p
QizjlN67Z+7eCsqrgywhKaqUCF0ovpj4+rc5QAJxucnfKikYYYslYIhhBI6kuhxX
jFisNOXjyyViBi5+cAV6EfoT4ceIi7qP/8OgZ9FRvco/f+RYVl/2V7XQUzy/3sXn
bzSAKWRjXyPlC/FYdM7Xa+rA6wwKf1sdDJfrIVA9eSXIMs3o7zPUUnWl5FoMvIb5
qcTZWjBro+QtxqfQCIAMchNoAQuUYzpsghDqdXluPz+2bL0M8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGWc6PENIsUdNdEWMY3czFEIQKcZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNjA1MzlmOTItYzgwYi0z
MzZmLTlkYTUtNjNhNzc1YzM3NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGIqaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGaHKMUO7wZiFkrWCsW6uXuEbOpjRqq6MpJVJHpcMwC34jfqGSYLMX82
7mKwCaTVqpIhRvxoVmDoLycvjGUPI/TuqdOwybRL09Icppp9VlWl0LgF730cwoKT
KCvZ8oRDv6hLT8/1+69TEZT/jQAe2alJwE/gi/F2sUPG8TqpMqqSVU0UoacEsTWQ
ar4Es0TavtJRBaUFBwzIXmpq9vaBeBj7p4AkoswOYJDHC0RqktIRLewPplX3Ja6i
4Wmwf+ty9J2Af2tHJ4F1y7oi5hXJKT+DzdO3AMvAKg+R3fThEkPxpdOJms9qeSND
tbadnmgOG5Hmjfb7qM2+/baPFbjJbhk=
-----END CERTIFICATE-----
Generated at Tue Jan 16 07:34:12 2024 by rpki-client on console-fra.rpki-client.org