Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/3dac6027-24b8-3904-8414-f2ca44c523e8.roa
File:                     3dac6027-24b8-3904-8414-f2ca44c523e8.roa (raw, json)
Hash identifier:          8/Fu+kqO6lleVNBugp6jauhciubG1qRlpf0+geEaByo=
Subject key identifier:   0A:BC:78:CF:8E:D6:35:46:85:B3:F4:BF:DD:62:19:E4:FC:63:C1:AA
Certificate issuer:       /CN=e02382c7-abd5-4293-a7a2-334013e1284b
Certificate serial:       010D0C9F4328576D51CC73C042CFC173DBFFEAB6
Authority key identifier: 95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/3dac6027-24b8-3904-8414-f2ca44c523e8.roa
Signing time:             Tue 11 Aug 2020 05:30:48 +0000
ROA not before:           Mon 10 Aug 2020 04:00:00 +0000
ROA not after:            Mon 14 Nov 2022 05:00:00 +0000
asID:                     20278
IP address blocks:        23.94.35.0/24 maxlen: 24
                          23.94.39.0/24 maxlen: 24
                          23.94.42.0/24 maxlen: 24
                          23.95.21.0/24 maxlen: 24
                          23.95.22.0/24 maxlen: 24
                          23.95.40.0/24 maxlen: 24
                          23.95.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:db:ff:ea:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02382c7-abd5-4293-a7a2-334013e1284b
        Validity
            Not Before: Aug 10 04:00:00 2020 GMT
            Not After : Nov 14 05:00:00 2022 GMT
        Subject: CN=6bd8d805-2c57-43e0-a1e8-3c07ae2801db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6f:6f:70:fe:71:0b:01:a7:53:ee:e5:8a:89:
                    d2:f8:96:bd:82:61:9f:f4:33:dc:4d:a9:91:4e:67:
                    cf:a1:6e:54:50:c8:71:ee:82:0c:42:48:78:71:7b:
                    65:14:0b:82:12:cc:58:95:32:5d:a7:77:7f:bc:34:
                    c6:dd:7b:f5:bd:1e:14:e9:68:37:07:9e:5e:81:0f:
                    ca:f4:9b:1d:82:2c:3a:2b:63:b2:ce:15:0b:bf:11:
                    c6:51:3d:95:28:93:95:46:c6:73:9c:1b:16:f3:5d:
                    95:38:4c:b8:92:31:47:30:20:ad:06:27:c8:f0:4e:
                    e1:93:5a:ce:5b:a5:0e:5e:54:4a:69:e1:cb:5e:49:
                    a5:e0:91:f8:47:45:81:e8:e4:7d:ac:c7:41:8b:b7:
                    d7:ba:93:be:37:06:ed:b6:c3:3a:5e:61:e5:6d:40:
                    8a:e7:4f:30:9a:66:c8:d4:d3:c1:49:d2:48:ab:2c:
                    f8:85:25:d2:db:bf:1e:51:17:92:7d:03:6d:ff:be:
                    13:1e:1c:8a:16:4a:d7:b0:5c:ac:60:6a:4f:39:4e:
                    31:c4:f7:55:01:77:ab:9a:ad:6e:e3:a2:7f:c7:9c:
                    9c:4a:1b:31:d8:8c:67:02:7b:31:99:a5:6a:e8:bb:
                    62:42:fb:d4:12:4d:a3:02:28:1e:c1:05:57:c2:5e:
                    fb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BC:78:CF:8E:D6:35:46:85:B3:F4:BF:DD:62:19:E4:FC:63:C1:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/3dac6027-24b8-3904-8414-f2ca44c523e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b/e02382c7-abd5-4293-a7a2-334013e1284b.crl

            X509v3 Authority Key Identifier:
                keyid:95:3B:B9:75:0E:1D:50:36:4E:7F:D0:D8:DE:A2:6C:F0:6C:EF:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e02382c7-abd5-4293-a7a2-334013e1284b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.35.0/24
                  23.94.39.0/24
                  23.94.42.0/24
                  23.95.21.0-23.95.22.255
                  23.95.40.0/24
                  23.95.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:92:6b:ed:2f:ae:b5:6a:79:3f:6a:08:ad:12:70:9b:e9:a6:
         62:91:74:6a:e1:fc:b1:e7:15:ce:5b:db:c5:ef:31:37:46:8d:
         43:14:06:09:1d:7b:88:67:f0:f2:88:f4:b4:5a:c3:5f:6f:56:
         8e:ed:05:8b:38:a4:08:d3:55:cf:27:e3:ba:cb:24:40:cb:c8:
         c2:01:49:8d:85:5b:f0:be:49:15:9d:2f:53:bd:e3:df:74:ea:
         80:74:5d:c7:fd:32:6c:76:0a:c6:c2:85:a9:82:28:16:07:dc:
         13:c0:69:9b:e3:bd:2a:3e:1c:89:30:ef:58:08:57:25:7f:e5:
         8a:2b:45:a0:49:e1:77:68:52:56:d1:09:f8:cc:d3:46:1a:2a:
         55:55:f3:b5:c7:14:7b:51:53:41:ff:15:82:d5:02:fd:6b:9a:
         bc:f4:d5:e6:b7:e5:77:ce:5e:9e:b4:46:e9:4d:ec:dd:e9:11:
         f5:ed:01:75:91:b5:30:d4:8d:0f:2d:a9:2f:70:c9:05:dd:57:
         e1:aa:98:a5:98:be:c9:12:7a:ce:a7:87:79:af:ff:85:7d:c6:
         1a:25:98:1e:59:ec:8a:f3:07:eb:21:07:84:86:1b:46:25:68:
         85:37:f6:50:6f:20:2e:fe:40:99:60:f9:ae:fa:2c:92:50:71:
         16:36:83:aa
-----BEGIN CERTIFICATE-----
MIIGZTCCBU+gAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc9v/6rYwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGUwMjM4MmM3LWFiZDUtNDI5My1hN2EyLTMzNDAxM2UxMjg0
YjAeFw0yMDA4MTAwNDAwMDBaFw0yMjExMTQwNTAwMDBaMC8xLTArBgNVBAMTJDZi
ZDhkODA1LTJjNTctNDNlMC1hMWU4LTNjMDdhZTI4MDFkYjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL1vb3D+cQsBp1Pu5YqJ0viWvYJhn/Qz3E2pkU5n
z6FuVFDIce6CDEJIeHF7ZRQLghLMWJUyXad3f7w0xt179b0eFOloNweeXoEPyvSb
HYIsOitjss4VC78RxlE9lSiTlUbGc5wbFvNdlThMuJIxRzAgrQYnyPBO4ZNazlul
Dl5USmnhy15JpeCR+EdFgejkfazHQYu317qTvjcG7bbDOl5h5W1AiudPMJpmyNTT
wUnSSKss+IUl0tu/HlEXkn0Dbf++Ex4cihZK17BcrGBqTzlOMcT3VQF3q5qtbuOi
f8ecnEobMdiMZwJ7MZmlaui7YkL71BJNowIoHsEFV8Je+8MCAwEAAaOCA3swggN3
MB0GA1UdDgQWBBQKvHjPjtY1RoWz9L/dYhnk/GPBqjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTAyMzgy
YzctYWJkNS00MjkzLWE3YTItMzM0MDEzZTEyODRiLzNkYWM2MDI3LTI0YjgtMzkw
NC04NDE0LWYyY2E0NGM1MjNlOC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2UwMjM4MmM3LWFiZDUtNDI5My1hN2Ey
LTMzNDAxM2UxMjg0Yi9lMDIzODJjNy1hYmQ1LTQyOTMtYTdhMi0zMzQwMTNlMTI4
NGIuY3JsMB8GA1UdIwQYMBaAFJU7uXUOHVA2Tn/Q2N6ibPBs70VBMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvZTAyMzgyYzctYWJkNS00MjkzLWE3YTItMzM0MDEz
ZTEyODRiLmNlcjBFBggrBgEFBQcBBwEB/wQ2MDQwMgQCAAEwLAMEABdeIwMEABde
JwMEABdeKjAMAwQAF18VAwQAF18WAwQAF18oAwQAF18uMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IBAQAYkmvtL661
ank/agitEnCb6aZikXRq4fyx5xXOW9vF7zE3Ro1DFAYJHXuIZ/DyiPS0WsNfb1aO
7QWLOKQI01XPJ+O6yyRAy8jCAUmNhVvwvkkVnS9TvePfdOqAdF3H/TJsdgrGwoWp
gigWB9wTwGmb470qPhyJMO9YCFclf+WKK0WgSeF3aFJW0Qn4zNNGGipVVfO1xxR7
UVNB/xWC1QL9a5q89NXmt+V3zl6etEbpTezd6RH17QF1kbUw1I0PLakvcMkF3Vfh
qpilmL7JEnrOp4d5r/+FfcYaJZgeWeyK8wfrIQeEhhtGJWiFN/ZQbyAu/kCZYPmu
+iySUHEWNoOq
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:17 2023 by rpki-client on console-ams.rpki-client.org