Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1d74ea9b-2bbe-3be5-aa7d-4cba0f8108a7.roa
File:                     1d74ea9b-2bbe-3be5-aa7d-4cba0f8108a7.roa (raw, json)
Hash identifier:          J8F8RFQUPT4+wKfjDAyRX+K2lNScecRprItYNCRI0SQ=
Subject key identifier:   1A:11:F8:4A:99:AA:92:C7:3F:7B:A5:71:BE:2C:31:33:5E:A8:A7:53
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285841E46E1B31059C847A38405720
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1d74ea9b-2bbe-3be5-aa7d-4cba0f8108a7.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Thu 20 Jul 2023 18:45:22 +0000
asID:                     398465
IP address blocks:        206.206.87.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:1b:31:05:9c:84:7a:38:40:57:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 20 18:45:22 2023 GMT
        Subject: CN=a13efc8d-eee9-4e92-a4bc-492849a34118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:86:e8:61:6a:c2:9d:ec:fb:67:bd:1d:7f:c0:
                    c7:14:e4:51:92:cf:ec:83:36:b6:e9:36:21:02:da:
                    98:fb:d3:8b:47:c4:55:42:f1:e0:a3:c9:fe:bf:de:
                    47:4a:2b:9c:30:79:eb:20:45:c5:eb:16:51:47:13:
                    af:d0:ac:60:98:e2:92:30:5f:65:43:19:f4:e7:7d:
                    91:9b:ef:d4:aa:e4:7c:e3:c1:cb:a8:57:57:03:ee:
                    7a:30:87:77:87:4b:af:c8:ce:e5:46:e5:a9:02:40:
                    ef:4f:fe:47:a8:ec:9d:82:a4:29:41:b7:40:0c:38:
                    d9:30:97:c3:e3:1c:b7:b8:90:04:e8:f3:b6:be:28:
                    14:ed:82:cd:5b:55:ed:4b:ad:f9:fd:fc:80:1f:2f:
                    91:ed:23:33:bc:d3:f6:99:e5:b2:4b:44:58:5e:a0:
                    02:54:5c:15:91:b7:67:82:23:fa:62:de:88:8a:94:
                    2c:3e:96:8e:86:47:56:da:25:1a:92:7e:ef:d1:8e:
                    59:99:3a:d2:91:3d:09:52:fe:1e:16:a8:f9:6c:89:
                    f5:d6:4b:0c:eb:e9:ed:75:cd:38:c6:0a:17:cc:0f:
                    b6:ec:8d:90:10:52:d8:00:b5:b0:d0:6b:5f:80:94:
                    7b:70:5e:5a:bb:05:8f:9d:5d:78:72:a3:e8:f1:21:
                    c3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:11:F8:4A:99:AA:92:C7:3F:7B:A5:71:BE:2C:31:33:5E:A8:A7:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1d74ea9b-2bbe-3be5-aa7d-4cba0f8108a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:1c:8f:22:dc:4e:0c:fd:16:58:34:75:9a:f3:b7:3a:40:6a:
         4f:76:ee:02:3d:24:80:25:b0:3c:fa:af:93:8a:f1:7f:d3:60:
         1e:64:cf:56:bd:83:50:f5:23:56:37:2b:e9:de:0f:c2:d9:73:
         1d:4b:b1:80:1c:6d:5c:94:7f:e6:e5:7a:55:cc:db:2c:7b:6f:
         82:b2:cd:f0:e0:c8:c1:0b:47:16:e7:35:6e:36:9a:05:b6:44:
         c0:be:e4:33:84:60:81:97:f8:a3:95:ce:41:6b:8d:e9:66:e6:
         05:fd:8c:67:2f:38:8e:b2:67:24:39:cc:02:a4:c6:43:08:74:
         f6:27:e2:79:77:3c:88:17:84:f4:0a:b8:c5:54:02:1c:c2:9e:
         3a:bc:40:87:a9:2e:ca:8f:ef:c8:e2:3f:54:49:15:6a:f9:07:
         21:93:10:c2:f1:55:49:f8:15:5b:ac:aa:2e:be:6e:c2:7d:87:
         48:f4:db:74:47:fc:b9:0d:cd:88:c2:08:e5:56:03:93:f0:50:
         f4:65:bc:4d:17:f6:a1:d7:a1:0f:93:e3:ab:2a:e4:e7:5e:3c:
         9e:b7:89:68:95:a0:b4:b5:bc:94:46:ee:09:7f:db:26:76:98:
         76:72:31:f6:2d:02:b0:52:3f:ca:39:08:6e:2c:7e:ba:e7:cd:
         0e:45:90:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbhsxBZyEejhAVyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTIzMDUxNTE4MjEwMVoXDTIzMDcyMDE4NDUyMlowLzEtMCsGA1UEAxMk
YTEzZWZjOGQtZWVlOS00ZTkyLWE0YmMtNDkyODQ5YTM0MTE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4boYWrCnez7Z70df8DHFORRks/sgza26TYh
AtqY+9OLR8RVQvHgo8n+v95HSiucMHnrIEXF6xZRRxOv0KxgmOKSMF9lQxn0532R
m+/UquR848HLqFdXA+56MId3h0uvyM7lRuWpAkDvT/5HqOydgqQpQbdADDjZMJfD
4xy3uJAE6PO2vigU7YLNW1XtS635/fyAHy+R7SMzvNP2meWyS0RYXqACVFwVkbdn
giP6Yt6IipQsPpaOhkdW2iUakn7v0Y5ZmTrSkT0JUv4eFqj5bIn11ksM6+ntdc04
xgoXzA+27I2QEFLYALWw0GtfgJR7cF5auwWPnV14cqPo8SHDiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBoR+EqZqpLHP3ulcb4sMTNeqKdTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMWQ3NGVhOWItMmJiZS0z
YmU1LWFhN2QtNGNiYTBmODEwOGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUcjyLcTgz9Flg0dZrztzpAak927gI9JIAlsDz6r5OK8X/TYB5kz1a9
g1D1I1Y3K+neD8LZcx1LsYAcbVyUf+blelXM2yx7b4KyzfDgyMELRxbnNW42mgW2
RMC+5DOEYIGX+KOVzkFrjelm5gX9jGcvOI6yZyQ5zAKkxkMIdPYn4nl3PIgXhPQK
uMVUAhzCnjq8QIepLsqP78jiP1RJFWr5ByGTEMLxVUn4FVusqi6+bsJ9h0j023RH
/LkNzYjCCOVWA5PwUPRlvE0X9qHXoQ+T46sq5OdePJ63iWiVoLS1vJRG7gl/2yZ2
mHZyMfYtArBSP8o5CG4sfrrnzQ5FkOI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:00 2024 by rpki-client on console-fra.rpki-client.org