Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf3e3abf-dc83-3e03-94d3-073840f9418d.roa
File:                     bf3e3abf-dc83-3e03-94d3-073840f9418d.roa (raw, json)
Hash identifier:          +3dj1b4+vIZw71bUGahApvRjTYgV7x4qjCOSlLVFMRk=
Subject key identifier:   F6:49:29:06:B7:7B:93:12:19:1D:71:BA:9F:81:EC:AD:B7:AB:83:C4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285839D78662B245C05B5E7A014C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf3e3abf-dc83-3e03-94d3-073840f9418d.roa
Signing time:             Fri 07 May 2021 04:00:00 +0000
ROA not before:           Fri 07 May 2021 04:00:00 +0000
ROA not after:            Wed 09 Aug 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        2600:1900:4180::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:d7:86:62:b2:45:c0:5b:5e:7a:01:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: May  7 04:00:00 2021 GMT
            Not After : Aug  9 04:00:00 2023 GMT
        Subject: CN=973b8972-f9aa-4c9e-a554-381abef95138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c6:be:99:88:2a:03:da:4d:4e:64:5c:fd:04:
                    19:63:36:d4:09:d6:e6:85:74:b7:fa:b7:7c:9c:31:
                    6e:e2:20:9f:91:31:3c:a7:f3:71:df:16:e9:6e:81:
                    db:c9:24:34:7f:b9:19:3d:c6:3c:5a:09:f8:90:f5:
                    c1:e8:c9:d8:7f:50:3d:82:c5:e6:1a:1b:c4:36:e9:
                    ab:76:c5:38:08:ba:e0:da:f3:ce:5f:91:1f:3d:04:
                    74:dc:40:63:c8:e3:95:a4:e4:a5:88:12:7d:da:1c:
                    d8:7f:70:38:38:c7:55:1b:72:58:86:31:72:f5:69:
                    9a:63:d3:10:04:d3:29:fd:ea:7a:d7:14:c7:9a:09:
                    8d:64:fa:ed:5b:5a:1b:52:da:b1:6f:47:fa:f0:6a:
                    b0:c2:56:0b:7b:6a:9a:52:ed:64:7a:2b:83:fc:1b:
                    1c:40:49:50:5e:ee:9c:a8:4f:4c:6f:e7:4c:82:57:
                    d0:15:c8:ce:61:61:90:c0:25:05:24:ce:56:7d:91:
                    eb:72:27:29:bf:7c:51:83:da:29:39:dd:fc:4d:0e:
                    47:f5:20:d7:5d:98:49:0b:2b:a1:3d:bb:bb:e0:c4:
                    f3:2c:b8:a0:b4:6b:7a:38:c1:e2:ec:4a:5d:b8:a2:
                    5d:a0:62:44:9a:14:30:55:b8:e3:86:4f:9d:b9:6d:
                    c9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:49:29:06:B7:7B:93:12:19:1D:71:BA:9F:81:EC:AD:B7:AB:83:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bf3e3abf-dc83-3e03-94d3-073840f9418d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4180::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d6:b6:e4:d5:5b:15:7b:0e:ae:79:8d:c1:78:8b:a8:fc:70:
         c0:4b:46:3f:29:70:5f:c3:e9:60:cd:6e:e8:55:0f:47:da:0c:
         20:ca:64:8e:83:7d:49:ff:a4:6e:65:ae:68:1e:a9:92:f5:ce:
         be:35:c5:35:0c:49:aa:02:01:61:bd:8d:5a:ff:cf:52:71:bb:
         2b:cc:fc:48:bf:39:e4:ff:8c:92:84:37:e9:62:89:72:9a:d8:
         8c:10:60:e6:5e:cb:d0:39:13:15:89:a3:5a:54:36:be:b1:3d:
         3f:9a:4f:3f:55:6d:43:36:bc:9c:c1:6c:e7:f3:d6:c7:d7:aa:
         ea:91:17:a5:81:d9:78:09:fb:2e:e9:90:ae:0d:9b:d1:aa:a8:
         98:66:2e:c8:08:ca:c4:17:92:c2:1e:0c:9f:6d:70:1d:15:eb:
         51:d3:7b:a8:ae:24:bb:8f:8a:ff:d7:b3:de:b1:4b:f5:c2:4d:
         0a:d1:f3:7c:bd:46:bb:89:3e:ca:57:af:12:c7:4a:80:3e:08:
         12:e3:03:f8:41:7e:cb:79:2e:c7:52:d4:b8:9d:8b:93:2c:98:
         5c:3e:15:cc:5e:f1:b8:2e:69:9f:64:c1:20:20:47:57:e6:75:
         5a:5e:66:b7:ca:ea:01:a0:8d:19:11:39:09:15:ac:7c:29:83:
         32:6f:a8:39
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDnXhmKyRcBbXnoBTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIxMDUwNzA0MDAwMFoXDTIzMDgwOTA0MDAwMFowLzEtMCsGA1UEAxMk
OTczYjg5NzItZjlhYS00YzllLWE1NTQtMzgxYWJlZjk1MTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMa+mYgqA9pNTmRc/QQZYzbUCdbmhXS3+rd8
nDFu4iCfkTE8p/Nx3xbpboHbySQ0f7kZPcY8Wgn4kPXB6MnYf1A9gsXmGhvENumr
dsU4CLrg2vPOX5EfPQR03EBjyOOVpOSliBJ92hzYf3A4OMdVG3JYhjFy9WmaY9MQ
BNMp/ep61xTHmgmNZPrtW1obUtqxb0f68GqwwlYLe2qaUu1keiuD/BscQElQXu6c
qE9Mb+dMglfQFcjOYWGQwCUFJM5WfZHrcicpv3xRg9opOd38TQ5H9SDXXZhJCyuh
Pbu74MTzLLigtGt6OMHi7EpduKJdoGJEmhQwVbjjhk+duW3JUwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPZJKQa3e5MSGR1xup+B7K23q4PEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmYzZTNhYmYtZGM4My0z
ZTAzLTk0ZDMtMDczODQwZjk0MThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgAZAEGA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADDWtuTVWxV7Dq55jcF4i6j8cMBLRj8pcF/D6WDNbuhVD0faDCDK
ZI6DfUn/pG5lrmgeqZL1zr41xTUMSaoCAWG9jVr/z1JxuyvM/Ei/OeT/jJKEN+li
iXKa2IwQYOZey9A5ExWJo1pUNr6xPT+aTz9VbUM2vJzBbOfz1sfXquqRF6WB2XgJ
+y7pkK4Nm9GqqJhmLsgIysQXksIeDJ9tcB0V61HTe6iuJLuPiv/Xs96xS/XCTQrR
83y9RruJPspXrxLHSoA+CBLjA/hBfst5LsdS1Lidi5MsmFw+Fcxe8bguaZ9kwSAg
R1fmdVpeZrfK6gGgjRkROQkVrHwpgzJvqDk=
-----END CERTIFICATE-----
Generated at Wed Aug 9 04:02:35 2023 by rpki-client on console-fra.rpki-client.org