Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/a0756b1c-9ad8-3670-99e5-930ad2dc7dbe.roa
File:                     a0756b1c-9ad8-3670-99e5-930ad2dc7dbe.roa (raw, json)
Hash identifier:          3mv5QOuIwz6+r5i/qhDPW8J9Ju/OLJkmE06/jrGGAY0=
Subject key identifier:   7B:87:99:1C:DF:59:66:5F:FF:32:56:29:F0:2E:27:CE:48:20:39:B7
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328583C7DE8F1FD3674DDE4AC45C3C0
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/a0756b1c-9ad8-3670-99e5-930ad2dc7dbe.roa
Signing time:             Wed 06 Jan 2021 05:00:00 +0000
ROA not before:           Wed 06 Jan 2021 05:00:00 +0000
ROA not after:            Tue 09 Apr 2024 04:00:00 +0000
asID:                     14445
IP address blocks:        23.170.242.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:7d:e8:f1:fd:36:74:dd:e4:ac:45:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jan  6 05:00:00 2021 GMT
            Not After : Apr  9 04:00:00 2024 GMT
        Subject: CN=3e1aaef8-e6b6-44f3-90ba-6c18c88bf4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:78:2f:db:c7:4f:00:3b:e7:2b:c2:4f:a6:a0:
                    d3:0c:26:0b:94:76:40:80:a6:8b:08:fd:fa:7c:dd:
                    09:e5:84:1e:f1:28:e2:f6:88:9e:c2:1a:32:bc:33:
                    d1:3d:29:f2:d6:8f:2f:a5:75:72:45:c9:9b:97:07:
                    a7:49:3d:30:75:b0:2b:2a:be:66:91:ed:c2:30:eb:
                    73:d8:ab:e3:1b:dc:78:44:72:41:09:8c:24:c7:27:
                    e7:ab:96:a3:bf:b5:7a:11:42:1e:ea:67:9f:9a:6a:
                    93:b8:94:97:a6:da:31:1c:53:1c:37:82:af:25:a5:
                    22:f9:31:a5:40:07:26:74:28:15:a8:7c:09:cf:29:
                    f0:8b:14:3d:9b:90:22:cc:d2:a7:5f:13:c1:14:dc:
                    d3:84:fd:aa:c7:e7:ff:1c:fb:7c:bb:a9:e1:09:e6:
                    31:27:34:af:c1:60:d9:62:21:3f:91:fc:87:e6:4d:
                    2d:0b:b9:43:fc:56:68:f9:a9:ed:8c:8d:65:87:99:
                    c0:03:52:84:e0:59:89:13:a0:02:30:5a:a0:7d:38:
                    43:e1:10:26:af:74:eb:cf:26:76:c0:de:8a:6f:93:
                    de:c6:56:12:e0:19:fa:92:e0:53:d1:04:be:68:c8:
                    a3:82:51:27:5b:b7:cc:bc:19:57:4a:09:11:78:a2:
                    29:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:87:99:1C:DF:59:66:5F:FF:32:56:29:F0:2E:27:CE:48:20:39:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/a0756b1c-9ad8-3670-99e5-930ad2dc7dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:16:69:5d:c9:e5:ae:21:10:67:b3:01:2b:65:9d:27:8a:9a:
         36:99:25:69:36:3f:0d:0d:2f:1f:2f:5f:4e:f4:c1:92:72:05:
         7b:7f:8e:de:06:8c:16:a9:db:cd:4b:52:2b:f0:5a:ec:32:42:
         8f:aa:03:bb:ad:3a:eb:14:61:f5:c5:39:6a:8e:f2:8e:e2:ee:
         b2:46:1d:ba:0b:05:1e:17:0b:a1:0d:e9:cd:fa:dc:80:04:1c:
         0f:33:95:cf:33:73:b3:94:1d:63:74:c7:55:32:d3:80:bf:46:
         3f:62:e7:ca:32:8d:71:3d:13:37:97:34:8a:0e:90:6e:4c:67:
         5d:fa:7f:e8:e3:fa:74:0c:ff:53:75:74:ea:7e:aa:8c:1c:42:
         36:58:b9:45:ad:9a:48:1b:57:b4:c4:93:03:03:4c:54:13:61:
         96:f6:90:29:ac:bc:95:0c:88:63:73:a6:8b:48:1f:54:72:78:
         31:f7:99:74:01:fd:0c:b4:c5:2e:d0:08:6b:d4:ba:41:47:4c:
         ac:f1:55:49:79:fc:c3:96:cd:ae:6f:2d:0c:e1:05:d8:dd:eb:
         6f:9d:d9:aa:21:bf:f6:ce:ac:5e:12:9a:91:2e:10:78:18:b1:
         f3:b0:16:09:eb:c5:ee:34:59:d0:27:51:12:97:32:34:1e:a5:
         a4:06:8f:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDx96PH9NnTd5KxFw8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4
OGRmMB4XDTIxMDEwNjA1MDAwMFoXDTI0MDQwOTA0MDAwMFowLzEtMCsGA1UEAxMk
M2UxYWFlZjgtZTZiNi00NGYzLTkwYmEtNmMxOGM4OGJmNGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhngv28dPADvnK8JPpqDTDCYLlHZAgKaLCP36
fN0J5YQe8Sji9oiewhoyvDPRPSny1o8vpXVyRcmblwenST0wdbArKr5mke3CMOtz
2KvjG9x4RHJBCYwkxyfnq5ajv7V6EUIe6mefmmqTuJSXptoxHFMcN4KvJaUi+TGl
QAcmdCgVqHwJzynwixQ9m5AizNKnXxPBFNzThP2qx+f/HPt8u6nhCeYxJzSvwWDZ
YiE/kfyH5k0tC7lD/FZo+antjI1lh5nAA1KE4FmJE6ACMFqgfThD4RAmr3TrzyZ2
wN6Kb5PexlYS4Bn6kuBT0QS+aMijglEnW7fMvBlXSgkReKIpiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHuHmRzfWWZf/zJWKfAuJ85IIDm3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5
NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvYTA3NTZiMWMtOWFkOC0z
NjcwLTk5ZTUtOTMwYWQyZGM3ZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4
OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl
ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2
YmJkZTg4ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6ryMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAWaV3J5a4hEGezAStlnSeKmjaZJWk2Pw0NLx8vX070wZJyBXt/jt4G
jBap281LUivwWuwyQo+qA7utOusUYfXFOWqO8o7i7rJGHboLBR4XC6EN6c363IAE
HA8zlc8zc7OUHWN0x1Uy04C/Rj9i58oyjXE9EzeXNIoOkG5MZ136f+jj+nQM/1N1
dOp+qowcQjZYuUWtmkgbV7TEkwMDTFQTYZb2kCmsvJUMiGNzpotIH1RyeDH3mXQB
/Qy0xS7QCGvUukFHTKzxVUl5/MOWza5vLQzhBdjd62+d2aohv/bOrF4SmpEuEHgY
sfOwFgnrxe40WdAnURKXMjQepaQGj5I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:05 2024 by rpki-client on console-fra.rpki-client.org