Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/a3456763-9d5e-3905-ac05-5bf1618a7fcd.roa
File:                     a3456763-9d5e-3905-ac05-5bf1618a7fcd.roa (raw, json)
Hash identifier:          ToEfdAX8wQ9hRQSEoO2Xl7qh0GuDhZnkalvPg2+zXYw=
Subject key identifier:   50:EC:20:2F:51:61:76:E6:D5:9D:48:4D:64:A1:1A:3C:12:BC:6A:C9
Certificate issuer:       /CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732A168748
Authority key identifier: E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/a3456763-9d5e-3905-ac05-5bf1618a7fcd.roa
Signing time:             Tue 07 Jul 2020 16:23:06 +0000
ROA not before:           Tue 07 Jul 2020 04:00:00 +0000
ROA not after:            Mon 10 Oct 2022 04:00:00 +0000
asID:                     14333
IP address blocks:        208.72.104.0/21 maxlen: 24
                          192.73.220.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2a:16:87:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f27c934-ebc6-44a4-bba0-a03cc465334b
        Validity
            Not Before: Jul  7 04:00:00 2020 GMT
            Not After : Oct 10 04:00:00 2022 GMT
        Subject: CN=b9eb6888-e4da-4e98-b3b9-35cee48c574d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:55:e9:0d:7e:15:a4:bd:9a:b6:79:aa:26:39:
                    9b:96:2e:14:81:cd:27:ee:89:9c:19:85:d8:29:7d:
                    20:0f:d9:2a:db:ae:59:11:3b:58:2b:3e:6e:9b:6a:
                    6e:f5:9c:58:a2:00:22:9f:11:7a:ca:73:24:2a:96:
                    65:a3:60:52:4c:34:84:e6:a0:fd:de:a4:cc:9f:81:
                    f2:95:96:9f:10:ec:2d:26:70:5f:a1:3f:e5:f3:69:
                    d4:d2:fb:d2:19:6c:10:c1:86:8b:96:21:31:37:2d:
                    26:22:b7:79:82:87:90:93:1c:b5:1a:bb:2e:2e:f4:
                    9c:39:26:fd:d9:fe:00:a6:5f:a2:d6:02:40:0c:e1:
                    05:4e:cd:98:94:5b:1a:67:a6:47:c3:d0:38:c9:69:
                    08:28:7a:dd:33:2e:78:74:8c:8a:80:71:36:e5:50:
                    ae:48:c6:71:4b:ed:cd:ae:ad:95:c9:56:7c:3f:17:
                    1b:d3:8a:75:9a:dc:ab:e6:a4:c1:2b:0e:27:f3:42:
                    26:3d:da:7d:dc:18:fb:f0:6d:36:da:82:3d:10:71:
                    6a:46:84:c1:11:5d:fe:49:10:0b:c7:de:c7:37:9b:
                    ce:40:92:90:7e:16:17:02:02:50:14:2a:a1:fc:88:
                    73:9f:b7:91:be:00:75:ba:2d:4e:ea:f9:c6:4c:e3:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EC:20:2F:51:61:76:E6:D5:9D:48:4D:64:A1:1A:3C:12:BC:6A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/a3456763-9d5e-3905-ac05-5bf1618a7fcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b/8f27c934-ebc6-44a4-bba0-a03cc465334b.crl

            X509v3 Authority Key Identifier:
                keyid:E1:B9:1A:3C:FB:A6:5E:CD:05:F6:0E:12:AB:A9:F5:A3:13:A8:F1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8f27c934-ebc6-44a4-bba0-a03cc465334b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.73.220.0/24
                  208.72.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:97:68:1b:70:65:92:c1:d6:ad:d9:bb:44:e3:ce:ce:89:54:
         84:1d:a7:e7:28:74:64:85:fd:99:e8:ed:b7:05:73:da:70:c5:
         c7:1e:d0:e8:35:3b:e7:e5:bf:33:72:96:49:45:8d:01:a9:08:
         3c:f8:bf:63:bc:9e:85:9c:61:d9:df:c8:53:f5:2f:2c:a6:36:
         34:3a:6f:f6:ed:fc:6e:38:8f:f0:0a:5a:f5:49:f0:53:47:6d:
         dc:39:8d:58:7c:ce:4a:7e:36:44:f5:19:a7:dc:e8:df:9a:de:
         41:44:70:e5:53:ee:ed:c0:4d:7b:8f:bc:8a:a5:a1:6a:be:a0:
         ad:d6:d1:a5:17:b2:88:7f:26:c8:8f:ca:40:b5:7f:38:07:4d:
         62:c5:b9:2d:2d:a0:36:3d:c7:1a:a1:f5:b5:92:d7:b0:47:00:
         80:0f:47:94:bb:b1:e7:46:f3:40:d0:12:04:aa:8a:f4:f4:ce:
         73:b8:70:13:80:10:92:26:6c:dc:fc:5c:b6:9b:c0:00:ee:1d:
         07:76:46:19:55:6a:a0:0f:8b:2a:fa:61:39:c8:b6:2d:46:28:
         2f:cf:45:2d:23:b4:6c:7c:b9:5f:8a:d0:84:63:a3:32:09:e7:
         56:14:bc:4e:2a:bd:d2:80:0e:c6:c3:99:84:f8:e5:74:a3:ce:
         9e:46:06:65
-----BEGIN CERTIFICATE-----
MIIGRTCCBS+gAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcyoWh0gwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDhmMjdjOTM0LWViYzYtNDRhNC1iYmEwLWEwM2NjNDY1MzM0
YjAeFw0yMDA3MDcwNDAwMDBaFw0yMjEwMTAwNDAwMDBaMC8xLTArBgNVBAMTJGI5
ZWI2ODg4LWU0ZGEtNGU5OC1iM2I5LTM1Y2VlNDhjNTc0ZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOlV6Q1+FaS9mrZ5qiY5m5YuFIHNJ+6JnBmF2Cl9
IA/ZKtuuWRE7WCs+bptqbvWcWKIAIp8RespzJCqWZaNgUkw0hOag/d6kzJ+B8pWW
nxDsLSZwX6E/5fNp1NL70hlsEMGGi5YhMTctJiK3eYKHkJMctRq7Li70nDkm/dn+
AKZfotYCQAzhBU7NmJRbGmemR8PQOMlpCCh63TMueHSMioBxNuVQrkjGcUvtza6t
lclWfD8XG9OKdZrcq+akwSsOJ/NCJj3afdwY+/BtNtqCPRBxakaEwRFd/kkQC8fe
xzebzkCSkH4WFwICUBQqofyIc5+3kb4AdbotTur5xkzjh0MCAwEAAaOCA1swggNX
MB0GA1UdDgQWBBRQ7CAvUWF25tWdSE1koRo8ErxqyTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGYyN2M5
MzQtZWJjNi00NGE0LWJiYTAtYTAzY2M0NjUzMzRiL2EzNDU2NzYzLTlkNWUtMzkw
NS1hYzA1LTViZjE2MThhN2ZjZC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzhmMjdjOTM0LWViYzYtNDRhNC1iYmEw
LWEwM2NjNDY1MzM0Yi84ZjI3YzkzNC1lYmM2LTQ0YTQtYmJhMC1hMDNjYzQ2NTMz
NGIuY3JsMB8GA1UdIwQYMBaAFOG5Gjz7pl7NBfYOEqup9aMTqPFpMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvOGYyN2M5MzQtZWJjNi00NGE0LWJiYTAtYTAzY2M0
NjUzMzRiLmNlcjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMBJ3AMEA9BI
aDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3
DQEBCwOCAQEAYZdoG3BlksHWrdm7ROPOzolUhB2n5yh0ZIX9mejttwVz2nDFxx7Q
6DU75+W/M3KWSUWNAakIPPi/Y7yehZxh2d/IU/UvLKY2NDpv9u38bjiP8Apa9Unw
U0dt3DmNWHzOSn42RPUZp9zo35reQURw5VPu7cBNe4+8iqWhar6grdbRpReyiH8m
yI/KQLV/OAdNYsW5LS2gNj3HGqH1tZLXsEcAgA9HlLux50bzQNASBKqK9PTOc7hw
E4AQkiZs3PxctpvAAO4dB3ZGGVVqoA+LKvphOci2LUYoL89FLSO0bHy5X4rQhGOj
MgnnVhS8Tiq90oAOxsOZhPjldKPOnkYGZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:13:54 2024 by rpki-client on console-fra.rpki-client.org