Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3ff4eb40-ef88-3f7e-ac88-8207e891d328.roa
File:                     3ff4eb40-ef88-3f7e-ac88-8207e891d328.roa (raw, json)
Hash identifier:          VIDZjsHIuJzRIkC+Jwf6oqxmrZHgDEHU46118iNZFeg=
Subject key identifier:   A2:79:EE:1C:BC:08:01:E0:51:38:76:31:3E:99:19:EF:EF:EE:C5:FD
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285844E31E05A77B03427DEC54BB00
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3ff4eb40-ef88-3f7e-ac88-8207e891d328.roa
Signing time:             Wed 14 Feb 2024 09:28:07 +0000
ROA not before:           Wed 14 Feb 2024 09:28:07 +0000
ROA not after:            Tue 14 May 2024 08:28:07 +0000
asID:                     3356
IP address blocks:        45.117.52.0/24 maxlen: 24
                          45.117.53.0/24 maxlen: 24
                          45.117.55.0/24 maxlen: 24
                          45.123.145.0/24 maxlen: 24
                          45.123.146.0/24 maxlen: 24
                          45.123.147.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e3:1e:05:a7:7b:03:42:7d:ec:54:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Feb 14 09:28:07 2024 GMT
            Not After : May 14 08:28:07 2024 GMT
        Subject: CN=30a4986c-baa1-4672-9203-5e30e9a10cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:0f:a5:31:a7:ac:35:58:94:1a:2d:29:79:
                    6d:ca:ef:a2:a6:68:d9:ad:08:64:d2:42:aa:7e:ef:
                    6a:57:52:6c:cd:e5:b3:93:b6:87:92:d0:39:a1:b8:
                    2f:74:c0:d9:7e:02:b7:1d:6a:ae:35:9d:d4:b0:93:
                    26:07:7a:ff:1a:92:93:80:6d:9d:87:a3:21:42:6d:
                    f9:34:63:1d:62:5f:07:55:25:5c:63:4b:27:0a:78:
                    23:c1:27:ca:e8:8b:59:d6:2c:be:74:eb:d0:82:1e:
                    06:8b:c6:81:66:b8:45:05:2e:9d:71:49:89:fa:7c:
                    15:22:dc:5f:26:6b:5f:e0:13:11:5a:2f:64:81:52:
                    51:97:49:e1:e4:64:0a:db:b2:ab:89:16:7d:d8:50:
                    da:45:c6:1e:16:c4:4f:16:08:89:b6:b2:e4:1c:16:
                    dc:e1:12:5e:3f:9f:2c:c0:09:29:c7:d9:04:a4:96:
                    b9:da:21:2a:0b:e9:8f:f0:00:cf:9e:25:21:d5:57:
                    4d:3f:9a:89:5d:87:2e:3b:24:ab:db:33:a4:24:03:
                    14:0b:e4:61:28:31:6a:72:18:d2:cb:19:c4:96:86:
                    b0:74:4c:f9:6b:a3:0e:d7:00:2e:5b:62:fb:a1:3e:
                    e0:f1:d9:50:36:61:33:ff:82:04:7e:97:11:f0:d6:
                    a2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:79:EE:1C:BC:08:01:E0:51:38:76:31:3E:99:19:EF:EF:EE:C5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3ff4eb40-ef88-3f7e-ac88-8207e891d328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.52.0/23
                  45.117.55.0/24
                  45.123.145.0-45.123.147.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:d4:02:00:0a:11:30:f3:9d:1b:61:05:10:b2:ca:79:83:
         bd:4a:8d:b7:ff:3d:94:05:3a:b9:0e:32:1a:41:e7:17:6b:a3:
         9a:52:9a:32:25:a0:92:38:74:e2:12:36:e9:ab:51:f2:67:23:
         0f:64:84:a7:59:32:a4:19:7d:86:74:5b:13:d2:a0:f5:03:66:
         0c:29:b8:39:3e:60:41:eb:84:61:b7:5e:67:b4:0b:f1:49:b9:
         26:15:5a:a5:78:39:97:b6:d5:03:b8:67:ff:66:77:cc:bd:38:
         56:ca:c6:fd:8d:c0:db:67:c5:41:f0:29:38:49:06:e9:49:b4:
         72:80:c7:b5:31:c3:54:aa:81:b5:b3:14:99:04:c7:35:f5:e6:
         d8:51:dc:a6:79:41:f8:08:6a:77:91:2c:b8:4a:72:18:f2:27:
         66:cb:3b:9d:50:b8:3a:30:94:ce:66:d7:84:89:d4:c1:e6:f8:
         c9:75:8d:f2:9c:de:c6:74:8f:f9:81:34:76:7e:09:b7:65:61:
         49:87:81:36:13:4a:39:ae:08:80:23:de:5f:19:e3:ba:d0:5f:
         d9:95:80:09:78:30:00:2c:8d:ea:09:47:d5:99:a7:62:8e:f5:
         54:83:da:67:1c:fb:2f:ff:b6:92:30:3f:9b:09:c1:49:96:e7:
         84:66:7b:9a
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWETjHgWnewNCfexUuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTljMDUwYzgtYmQxZi00ZTQxLTkzMWYtMTZlYTdiOWVj
YWZhMB4XDTI0MDIxNDA5MjgwN1oXDTI0MDUxNDA4MjgwN1owLzEtMCsGA1UEAxMk
MzBhNDk4NmMtYmFhMS00NjcyLTkyMDMtNWUzMGU5YTEwY2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhAPpTGnrDVYlBotKXltyu+ipmjZrQhk0kKq
fu9qV1JszeWzk7aHktA5obgvdMDZfgK3HWquNZ3UsJMmB3r/GpKTgG2dh6MhQm35
NGMdYl8HVSVcY0snCngjwSfK6ItZ1iy+dOvQgh4Gi8aBZrhFBS6dcUmJ+nwVItxf
Jmtf4BMRWi9kgVJRl0nh5GQK27KriRZ92FDaRcYeFsRPFgiJtrLkHBbc4RJeP58s
wAkpx9kEpJa52iEqC+mP8ADPniUh1VdNP5qJXYcuOySr2zOkJAMUC+RhKDFqchjS
yxnEloawdEz5a6MO1wAuW2L7oT7g8dlQNmEz/4IEfpcR8NaizwIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFKJ57hy8CAHgUTh2MT6ZGe/v7sX9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMw
NTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVhN2I5ZWNhZmEvM2ZmNGViNDAtZWY4OC0z
ZjdlLWFjODgtODIwN2U4OTFkMzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTljMDUwYzgtYmQxZi00ZTQxLTkz
MWYtMTZlYTdiOWVjYWZhLzE5YzA1MGM4LWJkMWYtNGU0MS05MzFmLTE2ZWE3Yjll
Y2FmYS5jcmwwHwYDVR0jBBgwFoAUgMASK73s01oy3eeuG/C5I0LAtzMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMwNTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVh
N2I5ZWNhZmEuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBLXU0AwQA
LXU3MAwDBAAte5EDBAIte5AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIqrUAgAKETDznRthBRCyynmDvUqN
t/89lAU6uQ4yGkHnF2ujmlKaMiWgkjh04hI26atR8mcjD2SEp1kypBl9hnRbE9Kg
9QNmDCm4OT5gQeuEYbdeZ7QL8Um5JhVapXg5l7bVA7hn/2Z3zL04VsrG/Y3A22fF
QfApOEkG6Um0coDHtTHDVKqBtbMUmQTHNfXm2FHcpnlB+Ahqd5EsuEpyGPInZss7
nVC4OjCUzmbXhInUweb4yXWN8pzexnSP+YE0dn4Jt2VhSYeBNhNKOa4IgCPeXxnj
utBf2ZWACXgwACyN6glH1ZmnYo71VIPaZxz7L/+2kjA/mwnBSZbnhGZ7mg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:03 2024 by rpki-client on console-fra.rpki-client.org