Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b587a63c-f140-3992-853f-594d1f65be23.roa
File:                     b587a63c-f140-3992-853f-594d1f65be23.roa (raw, json)
Hash identifier:          A9VOHuD1n/wbCIiOdS1OP0tHXvj3s3im3fs+xaL3Hzw=
Subject key identifier:   08:3B:18:C8:30:F4:02:7B:4B:34:A8:A3:A9:ED:47:15:D4:E3:AB:C9
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328583C09914FF95CB9902ED1F30140
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b587a63c-f140-3992-853f-594d1f65be23.roa
Signing time:             Wed 24 Nov 2021 05:00:00 +0000
ROA not before:           Wed 24 Nov 2021 05:00:00 +0000
ROA not after:            Mon 26 Feb 2024 05:00:00 +0000
asID:                     15169
IP address blocks:        207.126.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:09:91:4f:f9:5c:b9:90:2e:d1:f3:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 24 05:00:00 2021 GMT
            Not After : Feb 26 05:00:00 2024 GMT
        Subject: CN=d5240593-e131-44e9-b2bb-2f4b7ff9f0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3b:e8:2c:6a:6c:71:8b:fe:4a:70:4a:29:c9:
                    24:2e:57:31:f4:dd:11:0e:b2:bb:c5:ef:84:31:c8:
                    9d:9c:15:fc:a4:bb:07:5b:aa:89:6a:0c:1b:39:e0:
                    07:63:66:ca:86:44:f6:72:89:ce:e4:b4:d6:bd:f7:
                    cd:09:3d:39:0c:b1:da:97:70:28:00:f8:0d:08:43:
                    3d:17:89:f7:43:f4:27:94:ea:55:4c:ca:c4:0b:34:
                    85:62:53:ab:db:c1:3e:30:5e:fe:b9:de:85:7e:58:
                    da:0d:6f:4e:f7:93:65:1b:93:f2:8c:ac:b1:0e:45:
                    7d:78:fe:bc:77:3d:b2:ef:46:7b:67:b7:5b:81:61:
                    b2:25:d4:ff:89:72:03:74:cc:59:bc:6d:c7:a1:37:
                    e2:b9:6c:7f:8e:35:a6:f6:e5:b5:5a:21:28:c3:25:
                    e7:72:ea:67:c2:04:25:08:3c:5e:4a:8c:f9:7a:c2:
                    d3:10:ba:fb:99:af:b3:11:cd:2b:0b:27:2f:0d:6a:
                    c3:c0:d8:ec:b8:f8:53:7d:96:58:b4:7e:fc:9d:ed:
                    93:82:a4:a6:38:c5:68:65:31:d2:c4:3d:51:f1:41:
                    d4:4a:4c:21:82:d6:b9:fe:98:a9:7c:56:87:17:3a:
                    e6:bf:ab:ad:d8:3e:e5:92:4d:25:5d:fd:f9:36:33:
                    11:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3B:18:C8:30:F4:02:7B:4B:34:A8:A3:A9:ED:47:15:D4:E3:AB:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/b587a63c-f140-3992-853f-594d1f65be23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:57:42:92:94:ff:6f:49:9e:e9:ea:d1:7e:a0:88:54:4e:c9:
         45:58:27:fc:f2:ee:2b:1c:59:31:bf:18:6b:35:34:b8:fc:60:
         78:48:28:79:c4:64:ce:c6:80:a4:3d:e5:74:8e:ce:07:3a:15:
         0e:9b:41:93:18:fb:87:46:9c:43:08:62:de:91:a9:f6:14:98:
         50:6a:a8:68:7e:ff:e4:9e:25:ad:22:93:e5:b3:f8:53:ef:10:
         86:74:a2:ad:28:5b:1d:0d:35:f6:b8:87:a1:1e:3f:84:cb:d0:
         cd:fd:82:25:76:d5:24:63:77:6a:0c:51:64:5f:3f:22:a0:41:
         ef:c0:dd:ec:d8:cf:b5:54:88:ad:66:01:ce:c9:1d:1d:78:eb:
         ab:e8:be:a5:be:93:da:49:9d:70:4a:ae:77:a2:11:c8:98:72:
         17:40:2a:01:ad:80:c7:2b:7e:30:b3:2d:e2:3d:92:9e:95:3b:
         99:0e:51:3a:0a:72:89:10:be:57:ca:22:6a:62:d4:6c:3a:c6:
         41:50:86:99:e2:45:5d:b9:ae:ad:10:4f:a2:9e:cf:7e:06:b6:
         5a:5e:5a:e6:b5:29:ff:fd:d9:08:1c:c5:bf:10:f2:06:d4:60:
         f9:a9:66:e1:ed:a8:2f:9a:1e:0a:63:14:b3:fb:48:54:9d:2e:
         90:f5:92:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDwJkU/5XLmQLtHzAUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTIxMTEyNDA1MDAwMFoXDTI0MDIyNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZDUyNDA1OTMtZTEzMS00NGU5LWIyYmItMmY0YjdmZjlmMGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzvoLGpscYv+SnBKKckkLlcx9N0RDrK7xe+E
McidnBX8pLsHW6qJagwbOeAHY2bKhkT2conO5LTWvffNCT05DLHal3AoAPgNCEM9
F4n3Q/QnlOpVTMrECzSFYlOr28E+MF7+ud6FfljaDW9O95NlG5PyjKyxDkV9eP68
dz2y70Z7Z7dbgWGyJdT/iXIDdMxZvG3HoTfiuWx/jjWm9uW1WiEowyXncupnwgQl
CDxeSoz5esLTELr7ma+zEc0rCycvDWrDwNjsuPhTfZZYtH78ne2TgqSmOMVoZTHS
xD1R8UHUSkwhgta5/pipfFaHFzrmv6ut2D7lkk0lXf35NjMR9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAg7GMgw9AJ7SzSoo6ntRxXU46vJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvYjU4N2E2M2MtZjE0MC0z
OTkyLTg1M2YtNTk0ZDFmNjViZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz36TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHdXQpKU/29Jnunq0X6giFROyUVYJ/zy7iscWTG/GGs1NLj8YHhIKHnE
ZM7GgKQ95XSOzgc6FQ6bQZMY+4dGnEMIYt6RqfYUmFBqqGh+/+SeJa0ik+Wz+FPv
EIZ0oq0oWx0NNfa4h6EeP4TL0M39giV21SRjd2oMUWRfPyKgQe/A3ezYz7VUiK1m
Ac7JHR1466vovqW+k9pJnXBKrneiEciYchdAKgGtgMcrfjCzLeI9kp6VO5kOUToK
cokQvlfKImpi1Gw6xkFQhpniRV25rq0QT6Kez34GtlpeWua1Kf/92Qgcxb8Q8gbU
YPmpZuHtqC+aHgpjFLP7SFSdLpD1kpc=
-----END CERTIFICATE-----
Generated at Mon Feb 26 05:45:18 2024 by rpki-client on console-fra.rpki-client.org