Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d0c0dba6-6a97-3c31-a974-30c6fbce9f1a.roa
File:                     d0c0dba6-6a97-3c31-a974-30c6fbce9f1a.roa (raw, json)
Hash identifier:          Vz2OPkGJ9fQ0DvNqjJiwPBxrs3R2gGUBgU9T7YX0puM=
Subject key identifier:   23:B4:54:CE:BD:44:01:B3:BB:6B:7C:D7:4F:FD:28:D9:5B:19:D3:62
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858436ED5115FEE81BE2FC1C24480
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d0c0dba6-6a97-3c31-a974-30c6fbce9f1a.roa
Signing time:             Wed 04 Oct 2023 01:00:22 +0000
ROA not before:           Wed 04 Oct 2023 01:00:22 +0000
ROA not after:            Tue 02 Jan 2024 02:00:22 +0000
asID:                     211432
IP address blocks:        139.177.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:6e:d5:11:5f:ee:81:be:2f:c1:c2:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct  4 01:00:22 2023 GMT
            Not After : Jan  2 02:00:22 2024 GMT
        Subject: CN=3d7e1231-782c-4620-a2df-f27fccd9253c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:98:36:fc:5d:cf:25:5c:1e:f0:51:aa:50:18:
                    c8:50:46:a0:c5:bf:21:46:40:56:87:6e:94:48:8f:
                    79:91:69:a5:ff:ce:a1:2f:2c:2b:27:91:10:42:b3:
                    4f:f9:52:89:c2:bd:e3:5f:50:e5:cd:06:af:0c:08:
                    8c:60:9a:94:e8:5a:b7:67:00:03:ad:b8:f9:2e:d1:
                    a9:2b:be:ef:e3:11:c8:f9:77:82:eb:ec:a7:e8:40:
                    e4:ed:6b:d2:7f:6e:15:cb:ba:54:59:55:a5:49:bf:
                    6e:dc:c5:08:f4:d9:60:37:83:26:34:a7:67:62:03:
                    7b:9f:eb:2f:c6:cf:a1:7b:78:02:88:59:52:52:28:
                    28:25:95:3a:34:db:e4:d2:1e:8a:30:dc:67:d8:32:
                    07:ee:d5:a0:28:a2:32:0d:35:24:db:6e:47:87:d0:
                    5d:80:a5:2f:dc:06:f8:cb:36:a6:fa:62:12:c6:64:
                    c5:94:22:3f:bb:df:85:56:27:ef:75:c0:2b:85:c5:
                    57:88:75:38:e0:2d:a7:4f:d0:28:8d:e3:e7:cd:b6:
                    93:0d:52:5f:0d:11:93:db:bc:17:74:67:b6:24:7a:
                    23:c4:81:b1:9a:0e:aa:17:13:81:7e:cf:16:b7:78:
                    a1:83:02:9d:82:1e:f9:58:b5:86:00:21:d9:4d:c6:
                    a6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B4:54:CE:BD:44:01:B3:BB:6B:7C:D7:4F:FD:28:D9:5B:19:D3:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d0c0dba6-6a97-3c31-a974-30c6fbce9f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:74:13:d0:09:5c:a1:e3:6f:98:34:55:d0:cf:68:05:7c:22:
         18:5c:c6:f1:2d:49:59:ef:6e:b5:4d:5d:2a:b4:bc:00:2e:88:
         49:f1:5b:37:fc:e1:5b:ec:4a:49:94:90:b5:f9:b2:04:60:45:
         df:e2:9e:3c:29:48:57:56:bf:39:dc:aa:40:e2:68:74:20:a9:
         01:77:7b:c7:cb:d2:d9:ab:b3:54:28:42:db:cf:6c:68:a0:85:
         9c:9a:0b:e5:98:34:fa:ec:ac:f9:cc:ff:d3:2c:6d:3f:9e:38:
         50:4a:e9:52:65:a6:e2:2e:b7:0f:fa:c0:7c:c5:e3:c9:f2:40:
         66:49:b4:03:f0:65:59:1b:37:5e:f8:da:eb:46:d1:8c:9d:dd:
         8a:97:d5:c5:7f:44:f9:1f:7f:01:51:cf:6b:13:00:68:97:44:
         52:47:3f:50:e7:55:16:3c:ec:67:94:a7:44:64:b9:01:45:3a:
         09:9a:61:ce:65:f2:2d:c9:bb:68:ac:72:7f:71:1e:2b:a0:59:
         2e:2d:ce:97:b9:b3:7e:5f:d8:84:df:6e:22:da:14:ca:26:46:
         b2:c6:ba:c0:e2:69:d0:71:12:b5:29:ad:b3:3c:88:4e:8a:f3:
         07:b5:8b:65:c3:7b:08:ba:26:a1:d9:6a:40:14:f0:3c:5d:ab:
         11:45:a1:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWENu1RFf7oG+L8HCRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTIzMTAwNDAxMDAyMloXDTI0MDEwMjAyMDAyMlowLzEtMCsGA1UEAxMk
M2Q3ZTEyMzEtNzgyYy00NjIwLWEyZGYtZjI3ZmNjZDkyNTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJg2/F3PJVwe8FGqUBjIUEagxb8hRkBWh26U
SI95kWml/86hLywrJ5EQQrNP+VKJwr3jX1DlzQavDAiMYJqU6Fq3ZwADrbj5LtGp
K77v4xHI+XeC6+yn6EDk7WvSf24Vy7pUWVWlSb9u3MUI9NlgN4MmNKdnYgN7n+sv
xs+he3gCiFlSUigoJZU6NNvk0h6KMNxn2DIH7tWgKKIyDTUk225Hh9BdgKUv3Ab4
yzam+mISxmTFlCI/u9+FVifvdcArhcVXiHU44C2nT9AojePnzbaTDVJfDRGT27wX
dGe2JHojxIGxmg6qFxOBfs8Wt3ihgwKdgh75WLWGACHZTcammwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCO0VM69RAGzu2t810/9KNlbGdNiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZDBjMGRiYTYtNmE5Ny0z
YzMxLWE5NzQtMzBjNmZiY2U5ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAV0E9AJXKHjb5g0VdDPaAV8IhhcxvEtSVnvbrVNXSq0vAAuiEnxWzf8
4VvsSkmUkLX5sgRgRd/injwpSFdWvzncqkDiaHQgqQF3e8fL0tmrs1QoQtvPbGig
hZyaC+WYNPrsrPnM/9MsbT+eOFBK6VJlpuIutw/6wHzF48nyQGZJtAPwZVkbN174
2utG0Yyd3YqX1cV/RPkffwFRz2sTAGiXRFJHP1DnVRY87GeUp0RkuQFFOgmaYc5l
8i3Ju2iscn9xHiugWS4tzpe5s35f2ITfbiLaFMomRrLGusDiadBxErUprbM8iE6K
8we1i2XDewi6JqHZakAU8DxdqxFFoao=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:09 2024 by rpki-client on console-ams.rpki-client.org