Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/419c14a3-311b-3d0f-aa6f-9ee446d4d095.roa
File:                     419c14a3-311b-3d0f-aa6f-9ee446d4d095.roa (raw, json)
Hash identifier:          qdyp4ErVCDYnrpW0CtMmIGKGWrmlp7oUY3vtJS0l/18=
Subject key identifier:   63:59:ED:DA:95:8F:EC:B8:ED:72:6F:A6:B9:5C:66:F5:A5:76:08:D2
Certificate issuer:       /CN=d91f505a-0b78-4bc4-a857-f86d34163202
Certificate serial:       010D0C9F4328576D51CC73C042CFC1730CBFA61B
Authority key identifier: B4:AB:B9:C6:85:42:EB:2D:83:E8:01:5B:2F:4A:89:ED:EB:A7:19:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/419c14a3-311b-3d0f-aa6f-9ee446d4d095.roa
Signing time:             Wed 01 Jul 2020 23:39:13 +0000
ROA not before:           Wed 01 Jul 2020 04:00:00 +0000
ROA not after:            Tue 04 Oct 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        216.211.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:0c:bf:a6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d91f505a-0b78-4bc4-a857-f86d34163202
        Validity
            Not Before: Jul  1 04:00:00 2020 GMT
            Not After : Oct  4 04:00:00 2022 GMT
        Subject: CN=9bd7b72c-048c-4f68-a5ce-88543bb5d49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:f7:1b:4d:41:4f:31:8d:01:96:fe:a4:77:
                    1e:59:95:c7:9c:43:3b:9f:3a:2c:0c:da:ea:a0:b0:
                    3b:70:3c:56:67:7c:45:1c:64:dd:48:87:07:38:56:
                    9a:fc:20:0c:3b:d2:81:7c:f2:44:52:ac:33:12:45:
                    84:47:22:e8:62:fc:62:4f:53:95:2d:9c:78:0f:e2:
                    50:b4:5c:21:2d:74:a4:9e:a5:37:de:99:af:2d:1d:
                    a3:4f:0a:93:ed:8c:a6:67:9a:db:41:5b:d0:72:64:
                    84:2d:e1:1f:c4:a6:76:1b:b0:64:44:c7:23:34:f4:
                    6d:1b:bd:9e:83:2a:41:f4:8d:b4:9f:7d:51:77:75:
                    a1:58:7c:33:dd:1b:a3:07:e6:a6:bf:54:aa:1e:c1:
                    44:1b:e4:c6:4e:69:27:cb:da:08:e0:59:a9:e8:c3:
                    a3:f6:8e:8e:b7:26:24:89:1b:17:cb:1a:70:ca:90:
                    80:e1:9c:4d:c2:8c:88:e6:20:d8:22:c7:5f:40:0d:
                    a8:c7:4d:03:61:64:75:0c:12:23:92:5d:8f:f1:8d:
                    ff:df:90:8d:d6:63:f4:a0:19:cf:fa:2a:9e:42:29:
                    7d:af:28:6e:bb:3c:0a:01:af:43:c3:46:68:70:fd:
                    1c:b3:70:b4:bd:63:d2:a3:02:42:05:4c:59:4e:30:
                    53:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:59:ED:DA:95:8F:EC:B8:ED:72:6F:A6:B9:5C:66:F5:A5:76:08:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/419c14a3-311b-3d0f-aa6f-9ee446d4d095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.crl

            X509v3 Authority Key Identifier:
                keyid:B4:AB:B9:C6:85:42:EB:2D:83:E8:01:5B:2F:4A:89:ED:EB:A7:19:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.211.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:6c:e0:4e:9a:03:ee:12:bb:cd:2b:c3:e6:f6:c8:62:87:ec:
         0a:25:aa:ce:65:f1:72:e9:96:4c:9f:b7:07:83:60:82:b2:cc:
         89:b8:40:61:4d:83:9f:03:af:07:d1:56:fd:d5:db:a5:0c:1b:
         10:1d:a3:05:da:24:84:eb:88:e0:15:13:89:20:f5:ac:b2:59:
         24:27:fc:80:ae:db:f1:59:6e:99:e7:87:a9:ae:e4:68:ed:ff:
         cf:43:a0:e2:70:3f:0d:45:b0:59:92:c5:73:19:43:c9:ef:98:
         a7:bf:11:d2:b9:fb:06:31:2b:62:25:9b:6f:ce:a8:b1:c5:4c:
         18:34:b4:4b:0b:2e:1c:b0:d0:50:04:96:1c:e0:b2:62:06:44:
         b6:3f:75:ab:3e:e2:02:1b:b6:bd:a0:5f:d0:a6:01:16:3f:29:
         a4:ee:11:dd:e1:b3:86:23:8f:c5:ff:06:33:d8:ed:cb:8a:b2:
         75:6f:42:f3:d5:18:55:d8:78:79:bb:4a:03:84:fb:7d:3c:ec:
         c0:df:bc:15:52:0e:01:9d:32:e2:10:9f:1b:a8:a3:e8:92:45:
         69:58:2f:bd:89:21:3d:85:01:27:2c:de:d1:43:4f:38:99:ef:
         f0:fc:dd:3f:bc:6e:18:09:47:70:05:dd:c3:d5:aa:f6:14:42:
         0e:c6:19:c1
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcwy/phswCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGQ5MWY1MDVhLTBiNzgtNGJjNC1hODU3LWY4NmQzNDE2MzIw
MjAeFw0yMDA3MDEwNDAwMDBaFw0yMjEwMDQwNDAwMDBaMC8xLTArBgNVBAMTJDli
ZDdiNzJjLTA0OGMtNGY2OC1hNWNlLTg4NTQzYmI1ZDQ5YzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMlj9xtNQU8xjQGW/qR3HlmVx5xDO586LAza6qCw
O3A8Vmd8RRxk3UiHBzhWmvwgDDvSgXzyRFKsMxJFhEci6GL8Yk9TlS2ceA/iULRc
IS10pJ6lN96Zry0do08Kk+2Mpmea20Fb0HJkhC3hH8SmdhuwZETHIzT0bRu9noMq
QfSNtJ99UXd1oVh8M90bowfmpr9Uqh7BRBvkxk5pJ8vaCOBZqejDo/aOjrcmJIkb
F8sacMqQgOGcTcKMiOYg2CLHX0ANqMdNA2FkdQwSI5Jdj/GN/9+QjdZj9KAZz/oq
nkIpfa8obrs8CgGvQ8NGaHD9HLNwtL1j0qMCQgVMWU4wU8ECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRjWe3alY/suO1yb6a5XGb1pXYI0jCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDkxZjUw
NWEtMGI3OC00YmM0LWE4NTctZjg2ZDM0MTYzMjAyLzQxOWMxNGEzLTMxMWItM2Qw
Zi1hYTZmLTllZTQ0NmQ0ZDA5NS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2Q5MWY1MDVhLTBiNzgtNGJjNC1hODU3
LWY4NmQzNDE2MzIwMi9kOTFmNTA1YS0wYjc4LTRiYzQtYTg1Ny1mODZkMzQxNjMy
MDIuY3JsMB8GA1UdIwQYMBaAFLSrucaFQustg+gBWy9Kie3rpxnpMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvZDkxZjUwNWEtMGI3OC00YmM0LWE4NTctZjg2ZDM0
MTYzMjAyLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANjTojBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAAWzgTpoD7hK7zSvD5vbIYofsCiWqzmXxcumWTJ+3B4NggrLMibhAYU2DnwOv
B9FW/dXbpQwbEB2jBdokhOuI4BUTiSD1rLJZJCf8gK7b8VlumeeHqa7kaO3/z0Og
4nA/DUWwWZLFcxlDye+Yp78R0rn7BjErYiWbb86oscVMGDS0SwsuHLDQUASWHOCy
YgZEtj91qz7iAhu2vaBf0KYBFj8ppO4R3eGzhiOPxf8GM9jty4qydW9C89UYVdh4
ebtKA4T7fTzswN+8FVIOAZ0y4hCfG6ij6JJFaVgvvYkhPYUBJyze0UNPOJnv8Pzd
P7xuGAlHcAXdw9Wq9hRCDsYZwQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:23 2023 by rpki-client on console-fra.rpki-client.org