Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/66d577ba-03ec-39fa-8a77-4f060f986bed.roa
File:                     66d577ba-03ec-39fa-8a77-4f060f986bed.roa (raw, json)
Hash identifier:          rHnuosDpHZDrht/KTMXJEy/MGIb0O8inlDtn6ZsDGYI=
Subject key identifier:   09:18:70:04:85:EF:67:77:12:9A:AD:14:04:AE:15:E4:2C:BC:08:3C
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328583AA7C280DBD9A2AA98BBA7DB80
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/66d577ba-03ec-39fa-8a77-4f060f986bed.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        172.102.12.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c2:80:db:d9:a2:aa:98:bb:a7:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=1d3396d0-5f54-4e3c-9ac5-7df678467d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:69:d2:09:f4:ba:76:6f:b5:3a:44:10:1e:10:
                    65:a9:b0:8b:fb:6e:ad:7f:f8:96:60:30:f7:bf:78:
                    a7:a8:c9:fb:88:61:17:a8:ce:06:7c:f3:6c:84:ae:
                    85:0c:b5:53:79:25:38:89:44:22:ac:b2:96:b4:e6:
                    55:50:85:f1:f1:5c:0f:58:21:31:24:86:c3:83:8d:
                    20:ec:75:93:e6:05:77:1c:d0:d5:10:38:ee:bb:f6:
                    84:9f:05:4e:e5:f3:87:b7:06:2a:2c:90:24:e0:98:
                    f9:65:cc:a1:1e:50:fe:bf:f8:a4:1a:b9:1d:75:5d:
                    c6:4f:62:36:e9:97:0a:43:1a:ba:4a:15:87:c6:89:
                    30:12:8d:b8:8e:ed:a1:90:f8:db:dc:d5:63:52:8b:
                    00:45:77:16:5c:07:fc:56:53:5d:1d:44:02:ff:61:
                    7f:c2:6c:ad:a7:a9:a4:26:7a:dc:ff:6f:94:68:e5:
                    c8:08:a4:31:da:dd:9b:57:b7:d7:bc:b7:00:9a:3a:
                    85:ae:8e:5f:b0:cc:0c:66:9f:34:e9:50:93:a5:4c:
                    21:58:97:52:c2:1d:76:5f:a0:9f:2a:26:55:a0:ce:
                    79:bb:e4:de:55:27:c1:6d:79:a8:55:5d:49:b9:19:
                    b0:d2:38:25:04:e0:8c:1c:8c:d6:08:5e:93:90:f8:
                    74:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:18:70:04:85:EF:67:77:12:9A:AD:14:04:AE:15:E4:2C:BC:08:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/66d577ba-03ec-39fa-8a77-4f060f986bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e7:52:39:0c:5c:89:1b:87:95:45:eb:c6:e5:6c:53:66:f4:
         48:29:03:d9:f8:76:c1:46:74:6e:1d:5b:23:64:67:b7:17:74:
         95:97:48:09:d7:2b:0d:d6:3d:49:42:0c:73:49:c4:4f:c6:cd:
         eb:b6:d4:c3:25:d1:70:84:55:89:32:c6:ed:43:b8:26:96:77:
         60:14:2e:90:9d:fd:d1:e1:17:9a:14:c2:ae:f3:3c:98:c8:cb:
         73:c0:91:8a:75:c5:cc:57:ad:e0:d4:91:31:01:0b:c5:2a:94:
         12:d3:b6:97:9b:f7:8e:cb:4a:65:63:63:80:45:25:76:45:b1:
         ea:31:d8:af:bb:0d:80:9a:57:87:91:21:b7:d3:1b:9e:48:24:
         61:d6:73:91:75:6c:46:aa:1f:17:e4:56:92:c2:98:22:42:2f:
         a6:17:f4:60:d2:29:93:64:f5:d6:ad:18:9d:b4:07:60:06:51:
         1b:85:41:01:56:6f:83:ec:94:d5:f2:c5:af:e7:a0:10:9c:59:
         a1:80:3e:b1:77:ed:1b:10:f1:75:6a:04:a6:2f:f0:85:2d:21:
         18:fc:a3:42:7e:d9:88:a0:c1:0c:b4:61:dd:9d:96:9f:d1:a8:
         0b:0a:97:91:af:a7:8d:10:89:51:a6:d9:5a:be:8f:12:bd:e9:
         8b:24:df:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnwoDb2aKqmLun24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5
ZTJkMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MWQzMzk2ZDAtNWY1NC00ZTNjLTlhYzUtN2RmNjc4NDY3ZDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GnSCfS6dm+1OkQQHhBlqbCL+26tf/iWYDD3
v3inqMn7iGEXqM4GfPNshK6FDLVTeSU4iUQirLKWtOZVUIXx8VwPWCExJIbDg40g
7HWT5gV3HNDVEDjuu/aEnwVO5fOHtwYqLJAk4Jj5ZcyhHlD+v/ikGrkddV3GT2I2
6ZcKQxq6ShWHxokwEo24ju2hkPjb3NVjUosARXcWXAf8VlNdHUQC/2F/wmytp6mk
Jnrc/2+UaOXICKQx2t2bV7fXvLcAmjqFro5fsMwMZp806VCTpUwhWJdSwh12X6Cf
KiZVoM55u+TeVSfBbXmoVV1JuRmw0jglBOCMHIzWCF6TkPh0SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAkYcASF72d3EpqtFASuFeQsvAg8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz
ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvNjZkNTc3YmEtMDNlYy0z
OWZhLThhNzctNGYwNjBmOTg2YmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi
MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2
OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj
YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGYMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjnUjkMXIkbh5VF68blbFNm9EgpA9n4dsFGdG4dWyNkZ7cXdJWXSAnX
Kw3WPUlCDHNJxE/Gzeu21MMl0XCEVYkyxu1DuCaWd2AULpCd/dHhF5oUwq7zPJjI
y3PAkYp1xcxXreDUkTEBC8UqlBLTtpeb947LSmVjY4BFJXZFseox2K+7DYCaV4eR
IbfTG55IJGHWc5F1bEaqHxfkVpLCmCJCL6YX9GDSKZNk9datGJ20B2AGURuFQQFW
b4PslNXyxa/noBCcWaGAPrF37RsQ8XVqBKYv8IUtIRj8o0J+2YigwQy0Yd2dlp/R
qAsKl5Gvp40QiVGm2Vq+jxK96Ysk30M=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:47 2023 by rpki-client on console-fra.rpki-client.org