Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83/1bd8e3ce-3442-3595-894e-43f4b374b8ca.roa
File:                     1bd8e3ce-3442-3595-894e-43f4b374b8ca.roa (raw, json)
Hash identifier:          ZkX1PdwFw/R7Oq6EGuPZDUpc7DnB+BtF1QshK5EPXRU=
Subject key identifier:   D4:13:C5:BE:3B:3D:83:28:4C:01:23:6A:BD:52:37:ED:2F:9C:4E:D7
Certificate issuer:       /CN=59e1f397-f208-4e0a-b533-5d815cc15e83
Certificate serial:       010D0C9F43285841E46CAAAE7037DA9206F76AC0
Authority key identifier: 35:FB:AC:C2:8A:EF:03:F7:69:23:09:DB:43:B8:D1:34:7E:E7:E4:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83/1bd8e3ce-3442-3595-894e-43f4b374b8ca.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Fri 02 Jun 2023 04:12:59 +0000
asID:                     16509
IP address blocks:        50.115.212.0/24 maxlen: 24
                          50.115.215.0/24 maxlen: 24
                          50.115.213.0/24 maxlen: 24
                          50.115.214.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:aa:ae:70:37:da:92:06:f7:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e1f397-f208-4e0a-b533-5d815cc15e83
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun  2 04:12:59 2023 GMT
        Subject: CN=4281f9bd-b818-47ab-8bba-4dbd271494b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:80:ad:05:66:ca:ce:64:a5:aa:12:49:b1:82:
                    a3:87:58:b8:9d:de:8e:0f:6f:76:c6:eb:9c:a8:12:
                    aa:34:1c:43:56:25:a8:ba:fb:02:db:2f:d5:ad:36:
                    ec:eb:68:17:fd:a3:c4:3a:0f:37:47:96:93:cb:93:
                    46:30:42:8e:e0:6d:78:2a:aa:ed:00:44:18:c4:e0:
                    6d:af:15:43:fb:ce:06:54:fb:ff:9e:4b:13:d6:5e:
                    43:8b:e8:e2:90:35:a1:c5:b0:26:19:8d:2d:4f:3f:
                    7a:6e:a4:24:c0:49:16:cc:20:4a:2a:30:be:02:3f:
                    29:44:f1:4f:14:3d:4f:39:21:1e:3e:be:6c:bc:7d:
                    54:48:33:99:03:47:36:75:19:07:95:5a:3a:99:bf:
                    86:24:7a:e4:79:a3:04:f4:fc:e0:5e:e8:c9:90:df:
                    be:fa:f3:de:cb:94:54:39:a7:81:c2:d8:08:a8:52:
                    6d:cd:80:2f:3e:87:5f:19:f6:78:77:00:22:bd:76:
                    53:11:87:3a:cb:2c:57:be:24:a4:47:ca:9f:7e:95:
                    61:64:d2:f4:7e:f8:08:89:fd:cd:a5:70:1a:0d:e6:
                    69:c6:35:d6:33:67:08:e6:98:95:a6:69:8c:c0:bf:
                    ca:3f:ff:4b:d4:2a:de:0e:16:ce:f0:9c:d3:94:ab:
                    9b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:13:C5:BE:3B:3D:83:28:4C:01:23:6A:BD:52:37:ED:2F:9C:4E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83/1bd8e3ce-3442-3595-894e-43f4b374b8ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83/59e1f397-f208-4e0a-b533-5d815cc15e83.crl

            X509v3 Authority Key Identifier:
                keyid:35:FB:AC:C2:8A:EF:03:F7:69:23:09:DB:43:B8:D1:34:7E:E7:E4:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/59e1f397-f208-4e0a-b533-5d815cc15e83.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:98:a6:22:45:d9:39:eb:2f:18:2a:37:e9:4c:d8:5d:a1:91:
         92:7e:a4:5c:10:d6:46:4e:90:ae:e1:71:e0:5e:9f:50:f5:6d:
         27:e7:9c:4f:96:6f:c4:cb:b1:e9:af:f5:96:53:57:76:c0:69:
         a0:42:b9:b1:7d:0d:48:34:87:fb:2f:c7:89:e1:54:88:52:97:
         b5:df:f6:b5:45:28:aa:6b:35:94:5a:ae:c6:99:22:a5:a3:25:
         ad:ee:7b:fa:65:4c:62:0a:bb:b7:94:e5:0c:18:d1:66:85:d9:
         22:93:3a:3c:ba:c6:22:28:ca:05:9c:87:d0:b1:c0:a6:7e:09:
         10:80:81:fd:40:98:b1:c1:e3:e7:82:13:16:6e:bb:fd:38:7c:
         0d:00:90:eb:de:33:4e:c9:1f:69:87:8a:dd:3f:27:03:a7:b2:
         7f:14:2d:d0:c9:3e:bb:92:88:91:3d:85:86:42:78:0e:ec:f8:
         82:f8:31:f3:e1:0a:b9:22:e7:aa:a7:f6:db:28:f9:d9:93:f3:
         73:25:92:bf:20:94:22:8b:d8:bc:99:8f:81:45:0d:21:e9:75:
         70:a1:e5:b0:11:e0:de:d8:b6:b2:b8:93:b3:8e:a8:f4:07:c9:
         ce:e2:d0:6f:4d:a9:17:33:88:4c:e3:d4:33:a1:af:b7:ae:9a:
         6a:4c:3f:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHkbKqucDfakgb3asAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTllMWYzOTctZjIwOC00ZTBhLWI1MzMtNWQ4MTVjYzE1
ZTgzMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDYwMjA0MTI1OVowLzEtMCsGA1UEAxMk
NDI4MWY5YmQtYjgxOC00N2FiLThiYmEtNGRiZDI3MTQ5NGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54CtBWbKzmSlqhJJsYKjh1i4nd6OD292xuuc
qBKqNBxDViWouvsC2y/VrTbs62gX/aPEOg83R5aTy5NGMEKO4G14KqrtAEQYxOBt
rxVD+84GVPv/nksT1l5Di+jikDWhxbAmGY0tTz96bqQkwEkWzCBKKjC+Aj8pRPFP
FD1POSEePr5svH1USDOZA0c2dRkHlVo6mb+GJHrkeaME9PzgXujJkN+++vPey5RU
OaeBwtgIqFJtzYAvPodfGfZ4dwAivXZTEYc6yyxXviSkR8qffpVhZNL0fvgIif3N
pXAaDeZpxjXWM2cI5piVpmmMwL/KP/9L1CreDhbO8JzTlKubgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQTxb47PYMoTAEjar1SN+0vnE7XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81OWUx
ZjM5Ny1mMjA4LTRlMGEtYjUzMy01ZDgxNWNjMTVlODMvMWJkOGUzY2UtMzQ0Mi0z
NTk1LTg5NGUtNDNmNGIzNzRiOGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTllMWYzOTctZjIwOC00ZTBhLWI1
MzMtNWQ4MTVjYzE1ZTgzLzU5ZTFmMzk3LWYyMDgtNGUwYS1iNTMzLTVkODE1Y2Mx
NWU4My5jcmwwHwYDVR0jBBgwFoAUNfusworvA/dpIwnbQ7jRNH7n5IQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81OWUxZjM5Ny1mMjA4LTRlMGEtYjUzMy01ZDgx
NWNjMTVlODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCMnPUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGaYpiJF2TnrLxgqN+lM2F2hkZJ+pFwQ1kZOkK7hceBen1D1bSfnnE+W
b8TLsemv9ZZTV3bAaaBCubF9DUg0h/svx4nhVIhSl7Xf9rVFKKprNZRarsaZIqWj
Ja3ue/plTGIKu7eU5QwY0WaF2SKTOjy6xiIoygWch9CxwKZ+CRCAgf1AmLHB4+eC
ExZuu/04fA0AkOveM07JH2mHit0/JwOnsn8ULdDJPruSiJE9hYZCeA7s+IL4MfPh
Crki56qn9tso+dmT83Mlkr8glCKL2LyZj4FFDSHpdXCh5bAR4N7YtrK4k7OOqPQH
yc7i0G9NqRcziEzj1DOhr7eummpMP2U=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:29 2023 by rpki-client on console-ams.rpki-client.org