Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/cf08a246-d4b0-3fdb-8607-853dd9f68c6a.roa
File:                     cf08a246-d4b0-3fdb-8607-853dd9f68c6a.roa (raw, json)
Hash identifier:          70GwdNIrm9W7I95q0m9giFurXDrwBIztOSW3vSvYovM=
Subject key identifier:   D6:D9:DE:EF:AC:31:F6:92:B3:9D:2A:A8:63:58:E5:8C:F8:6B:4E:AC
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328583EB3FAFA100A53F87D40AAF560
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/cf08a246-d4b0-3fdb-8607-853dd9f68c6a.roa
Signing time:             Tue 26 Jul 2022 12:00:00 +0000
ROA not before:           Tue 26 Jul 2022 12:00:00 +0000
ROA not after:            Tue 30 Aug 2022 04:00:00 +0000
asID:                     49581
IP address blocks:        103.251.27.0/24 maxlen: 24
                          45.115.60.0/24 maxlen: 24
                          103.4.248.0/24 maxlen: 24
                          103.4.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b3:fa:fa:10:0a:53:f8:7d:40:aa:f5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Jul 26 12:00:00 2022 GMT
            Not After : Aug 30 04:00:00 2022 GMT
        Subject: CN=8c3866e5-c252-4c76-90c9-30ebb4a24d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4a:d5:46:d8:a2:ad:8e:e0:37:d3:18:53:3b:
                    a5:94:b9:4f:76:4e:28:10:cf:e8:be:23:93:2e:44:
                    9e:5e:49:43:a4:27:fe:e9:f5:05:87:26:de:f5:70:
                    14:c7:48:b9:aa:f3:7e:1d:dc:06:9e:ca:97:88:d5:
                    ab:5c:af:8a:7d:21:0a:fb:31:a5:5e:e7:0b:bb:c4:
                    54:65:48:da:58:60:df:11:a9:0c:ac:74:2c:4d:3a:
                    c1:df:2d:b6:e6:89:b4:51:5c:fb:a7:79:71:5f:b9:
                    30:cc:3e:77:f2:07:ac:13:eb:e2:64:26:8c:ba:e1:
                    09:06:64:bd:26:b8:1a:39:2d:1c:b4:98:f8:be:3a:
                    dc:b0:04:dc:98:52:99:30:e7:f1:30:43:4a:87:65:
                    03:14:0a:05:24:75:24:14:81:0e:5d:81:77:83:c9:
                    7e:72:58:20:3c:8e:46:de:f2:6e:56:a8:d6:a0:6e:
                    56:72:0c:9a:a7:e7:78:c5:05:b1:2d:3b:0b:f5:b6:
                    b3:c8:2e:5c:ab:eb:35:86:77:bb:8e:19:40:44:30:
                    a1:7a:fb:6f:1b:de:66:23:76:82:df:1b:63:74:66:
                    2a:7e:26:96:5d:27:4d:ab:97:c1:22:3d:54:08:b8:
                    97:22:7d:5a:f2:ed:99:68:6b:25:c1:cc:7d:77:f4:
                    8b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D9:DE:EF:AC:31:F6:92:B3:9D:2A:A8:63:58:E5:8C:F8:6B:4E:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/cf08a246-d4b0-3fdb-8607-853dd9f68c6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.60.0/24
                  103.4.248.0/24
                  103.4.250.0/24
                  103.251.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:0b:0c:d2:61:14:d3:09:f3:11:ce:82:5c:70:f6:ab:54:3e:
         9a:f1:63:dc:2f:91:a1:7b:d9:4a:f8:ab:f8:d7:57:d7:a2:f4:
         75:a1:7d:a4:86:09:da:8f:25:e5:82:3f:f0:13:22:d8:5d:5d:
         03:0c:74:4a:b9:00:6e:30:31:e8:98:62:9f:32:b5:9a:7b:73:
         6c:bc:ad:22:42:5c:c0:9c:b6:40:53:39:39:2b:56:87:5b:f4:
         60:70:ca:b4:f0:87:cf:4e:45:7c:46:4a:1d:37:04:3a:86:51:
         ca:39:95:a5:70:41:dd:9c:6d:89:e2:c9:c3:06:bd:9b:cd:39:
         b5:26:ee:64:27:cc:ac:e3:7a:e0:a5:6a:09:fd:4f:e5:da:c6:
         bc:e3:f8:33:b1:4e:34:c6:b3:e9:91:7d:a8:31:7d:52:de:85:
         75:08:fc:4b:58:20:c8:8b:9e:b4:f4:9d:e9:ee:61:44:43:99:
         21:29:97:c9:31:74:15:fe:7f:fa:d7:e7:9c:58:5e:d3:d9:48:
         92:49:9f:25:86:8d:3f:0f:62:2c:2f:e7:19:43:4c:84:07:71:
         7d:b2:a9:11:0d:c8:27:61:35:3d:1f:e4:d6:c8:64:02:8a:bc:
         8b:20:17:be:18:b6:88:a7:5b:f8:93:64:22:86:64:7e:d2:32:
         c9:7e:70:f5
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWD6z+voQClP4fUCq9WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTljMDUwYzgtYmQxZi00ZTQxLTkzMWYtMTZlYTdiOWVj
YWZhMB4XDTIyMDcyNjEyMDAwMFoXDTIyMDgzMDA0MDAwMFowLzEtMCsGA1UEAxMk
OGMzODY2ZTUtYzI1Mi00Yzc2LTkwYzktMzBlYmI0YTI0ZDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UrVRtiirY7gN9MYUzullLlPdk4oEM/oviOT
LkSeXklDpCf+6fUFhybe9XAUx0i5qvN+HdwGnsqXiNWrXK+KfSEK+zGlXucLu8RU
ZUjaWGDfEakMrHQsTTrB3y225om0UVz7p3lxX7kwzD538gesE+viZCaMuuEJBmS9
JrgaOS0ctJj4vjrcsATcmFKZMOfxMENKh2UDFAoFJHUkFIEOXYF3g8l+clggPI5G
3vJuVqjWoG5Wcgyap+d4xQWxLTsL9bazyC5cq+s1hne7jhlARDChevtvG95mI3aC
3xtjdGYqfiaWXSdNq5fBIj1UCLiXIn1a8u2ZaGslwcx9d/SLjwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFNbZ3u+sMfaSs50qqGNY5Yz4a06sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMw
NTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVhN2I5ZWNhZmEvY2YwOGEyNDYtZDRiMC0z
ZmRiLTg2MDctODUzZGQ5ZjY4YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTljMDUwYzgtYmQxZi00ZTQxLTkz
MWYtMTZlYTdiOWVjYWZhLzE5YzA1MGM4LWJkMWYtNGU0MS05MzFmLTE2ZWE3Yjll
Y2FmYS5jcmwwHwYDVR0jBBgwFoAUgMASK73s01oy3eeuG/C5I0LAtzMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMwNTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVh
N2I5ZWNhZmEuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALXM8AwQA
ZwT4AwQAZwT6AwQAZ/sbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE0LDNJhFNMJ8xHOglxw9qtUPprxY9wv
kaF72Ur4q/jXV9ei9HWhfaSGCdqPJeWCP/ATIthdXQMMdEq5AG4wMeiYYp8ytZp7
c2y8rSJCXMCctkBTOTkrVodb9GBwyrTwh89ORXxGSh03BDqGUco5laVwQd2cbYni
ycMGvZvNObUm7mQnzKzjeuClagn9T+Xaxrzj+DOxTjTGs+mRfagxfVLehXUI/EtY
IMiLnrT0nenuYURDmSEpl8kxdBX+f/rX55xYXtPZSJJJnyWGjT8PYiwv5xlDTIQH
cX2yqRENyCdhNT0f5NbIZAKKvIsgF74YtoinW/iTZCKGZH7SMsl+cPU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:32 2023 by rpki-client on console-fra.rpki-client.org