Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/0beff54e-0636-311d-b69e-4f1230dfc67c.roa
File:                     0beff54e-0636-311d-b69e-4f1230dfc67c.roa (raw, json)
Hash identifier:          Uk01kdIOVuxmie9UDQYiSUmsNfQiZ+RfK51MgISrscY=
Subject key identifier:   5A:0A:2F:7E:91:B3:44:74:07:8B:7C:15:B4:B7:41:14:84:6E:66:27
Certificate issuer:       /CN=2f4dd615-5a9e-4057-98d2-c069dd16f4f7
Certificate serial:       010D0C9F43285838D4A90D948717E07034EEEC80
Authority key identifier: 91:19:AF:EC:80:9F:5F:21:48:94:A1:B7:8D:E6:61:E5:8B:78:C1:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/0beff54e-0636-311d-b69e-4f1230dfc67c.roa
Signing time:             Wed 03 Feb 2021 05:00:00 +0000
ROA not before:           Wed 03 Feb 2021 05:00:00 +0000
ROA not after:            Tue 09 May 2023 04:00:00 +0000
asID:                     14618
IP address blocks:        172.99.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:d4:a9:0d:94:87:17:e0:70:34:ee:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f4dd615-5a9e-4057-98d2-c069dd16f4f7
        Validity
            Not Before: Feb  3 05:00:00 2021 GMT
            Not After : May  9 04:00:00 2023 GMT
        Subject: CN=c5833734-32d3-4d92-9542-0b81d0a575bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ce:88:82:fd:71:e1:70:3a:02:e4:2e:28:07:
                    5e:d5:17:0b:8a:1e:f3:82:65:d4:a1:44:87:c0:cc:
                    76:c9:e9:35:c7:1b:3f:de:01:38:65:4f:67:24:c6:
                    86:c7:7c:39:aa:41:87:62:01:2b:5b:4d:0d:d3:1d:
                    7f:57:55:32:b5:e0:69:d2:9f:88:b4:4a:29:59:37:
                    a6:b9:f8:ed:65:db:b3:0c:a9:09:43:bc:e8:af:65:
                    d7:ca:ad:e8:9b:d6:86:11:0d:22:96:87:1c:3d:d0:
                    5a:80:99:7f:7e:07:3c:c1:62:b0:81:88:ac:20:42:
                    5f:76:a9:54:90:e6:59:a1:d5:e3:5f:a7:02:45:0a:
                    f0:b0:c9:61:02:0c:be:f9:4e:b7:79:99:6f:59:39:
                    1a:8c:12:22:d9:19:04:ec:8d:01:e6:67:44:31:0a:
                    28:f3:d5:c2:79:0f:4c:05:f9:5a:af:36:cf:f4:30:
                    cf:13:cd:9d:7f:c1:f3:47:25:2a:07:85:7c:cb:47:
                    06:85:5a:83:81:e0:c9:62:bc:a9:2a:d3:73:9c:a5:
                    0f:99:7e:03:53:b6:6b:05:d4:8e:6b:0f:84:e6:12:
                    6d:e5:14:de:1b:a7:7d:89:51:c4:f8:80:92:d3:35:
                    5d:e8:c7:f6:f1:c9:bb:05:3a:32:e5:9b:5d:ac:ee:
                    2b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0A:2F:7E:91:B3:44:74:07:8B:7C:15:B4:B7:41:14:84:6E:66:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/0beff54e-0636-311d-b69e-4f1230dfc67c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.crl

            X509v3 Authority Key Identifier:
                keyid:91:19:AF:EC:80:9F:5F:21:48:94:A1:B7:8D:E6:61:E5:8B:78:C1:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:68:39:9d:ff:5b:90:b3:0d:41:54:b7:27:39:96:b2:4c:a4:
         1c:aa:b5:c9:41:c9:f5:02:6e:21:fa:18:6a:bc:1e:23:2c:16:
         fa:14:b8:e9:1e:a5:86:a6:27:5e:87:6c:19:b5:9d:f0:3f:9e:
         91:44:ff:b3:8e:90:c0:eb:8a:44:cc:b5:0a:99:3b:4e:36:7b:
         f5:82:da:10:db:1b:96:1b:90:a1:29:94:bf:88:23:5e:92:e1:
         a9:4f:7d:e9:4e:01:78:2e:90:4c:bd:75:4f:47:97:e9:53:66:
         5f:83:19:e5:68:45:f4:cf:a9:9f:8b:12:b1:f5:d5:41:55:8b:
         35:67:71:01:74:f1:03:4a:e6:b8:52:3f:6b:10:e7:f1:d1:5f:
         b9:f6:f7:eb:5a:81:a0:3f:0c:37:4e:ae:ea:14:b2:53:ed:25:
         5d:88:02:d4:f4:a8:c3:e3:40:1d:d8:b3:fa:90:bd:35:36:89:
         ae:57:6b:9a:29:a1:2a:b4:8e:d2:a6:84:c5:77:bf:5d:ab:c6:
         0c:46:89:16:ef:87:0c:b6:6c:79:77:3d:d3:a1:de:5c:0e:83:
         eb:db:70:e2:5c:74:71:67:6c:5b:97:d8:db:aa:66:69:0a:fc:
         ac:fe:b8:22:f9:7f:3c:27:28:b6:28:48:06:97:db:f6:33:c1:
         b6:e3:37:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDjUqQ2UhxfgcDTu7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmY0ZGQ2MTUtNWE5ZS00MDU3LTk4ZDItYzA2OWRkMTZm
NGY3MB4XDTIxMDIwMzA1MDAwMFoXDTIzMDUwOTA0MDAwMFowLzEtMCsGA1UEAxMk
YzU4MzM3MzQtMzJkMy00ZDkyLTk1NDItMGI4MWQwYTU3NWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc6Igv1x4XA6AuQuKAde1RcLih7zgmXUoUSH
wMx2yek1xxs/3gE4ZU9nJMaGx3w5qkGHYgErW00N0x1/V1UyteBp0p+ItEopWTem
ufjtZduzDKkJQ7zor2XXyq3om9aGEQ0iloccPdBagJl/fgc8wWKwgYisIEJfdqlU
kOZZodXjX6cCRQrwsMlhAgy++U63eZlvWTkajBIi2RkE7I0B5mdEMQoo89XCeQ9M
BflarzbP9DDPE82df8HzRyUqB4V8y0cGhVqDgeDJYrypKtNznKUPmX4DU7ZrBdSO
aw+E5hJt5RTeG6d9iVHE+ICS0zVd6Mf28cm7BToy5ZtdrO4rxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFoKL36Rs0R0B4t8FbS3QRSEbmYnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjRk
ZDYxNS01YTllLTQwNTctOThkMi1jMDY5ZGQxNmY0ZjcvMGJlZmY1NGUtMDYzNi0z
MTFkLWI2OWUtNGYxMjMwZGZjNjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmY0ZGQ2MTUtNWE5ZS00MDU3LTk4
ZDItYzA2OWRkMTZmNGY3LzJmNGRkNjE1LTVhOWUtNDA1Ny05OGQyLWMwNjlkZDE2
ZjRmNy5jcmwwHwYDVR0jBBgwFoAUkRmv7ICfXyFIlKG3jeZh5Yt4wdAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjRkZDYxNS01YTllLTQwNTctOThkMi1jMDY5
ZGQxNmY0ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGP6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5oOZ3/W5CzDUFUtyc5lrJMpByqtclByfUCbiH6GGq8HiMsFvoUuOke
pYamJ16HbBm1nfA/npFE/7OOkMDrikTMtQqZO042e/WC2hDbG5YbkKEplL+II16S
4alPfelOAXgukEy9dU9Hl+lTZl+DGeVoRfTPqZ+LErH11UFVizVncQF08QNK5rhS
P2sQ5/HRX7n29+tagaA/DDdOruoUslPtJV2IAtT0qMPjQB3Ys/qQvTU2ia5Xa5op
oSq0jtKmhMV3v12rxgxGiRbvhwy2bHl3PdOh3lwOg+vbcOJcdHFnbFuX2NuqZmkK
/Kz+uCL5fzwnKLYoSAaX2/YzwbbjN8M=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:33 2023 by rpki-client on console-fra.rpki-client.org