Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4a90b6c4-ea39-3aff-bb25-b14254380787.roa
File:                     4a90b6c4-ea39-3aff-bb25-b14254380787.roa (raw, json)
Hash identifier:          fv9YspP56It6OLxsJMyl2/bK1TDVcp1s3Hc6v8Ye3Oc=
Subject key identifier:   6A:4C:1C:4D:B4:03:86:3D:65:A7:5C:27:A3:C0:19:7E:0F:FC:65:1A
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F432858423B7507A8F567FA71E5B6AD00
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4a90b6c4-ea39-3aff-bb25-b14254380787.roa
Signing time:             Thu 15 Jun 2023 22:33:45 +0000
ROA not before:           Thu 15 Jun 2023 22:33:45 +0000
ROA not after:            Wed 13 Sep 2023 22:33:45 +0000
asID:                     14956
IP address blocks:        104.156.149.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:3b:75:07:a8:f5:67:fa:71:e5:b6:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jun 15 22:33:45 2023 GMT
            Not After : Sep 13 22:33:45 2023 GMT
        Subject: CN=15b569a1-6be1-484d-b574-6771869b20df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d8:22:ea:d3:11:97:60:ce:ca:6a:5c:82:a7:
                    20:0e:b2:cd:7f:ae:5a:47:4e:d4:62:69:b6:21:b9:
                    db:03:19:86:c4:10:de:17:57:9e:c4:4d:70:b7:6f:
                    fc:56:db:65:bb:af:3b:da:3e:3e:07:16:9d:6b:6b:
                    05:5c:a4:0e:46:6f:e9:77:23:84:eb:1d:e4:8f:89:
                    09:0f:80:2d:19:2a:af:79:51:db:d9:eb:8d:7c:af:
                    d0:a1:ec:40:af:e8:d7:c7:28:44:8c:c2:4c:5d:6e:
                    75:38:50:b5:42:10:2d:e8:74:a3:5c:eb:58:10:e9:
                    3a:58:c0:8a:b5:cd:6d:21:80:ef:bd:b6:5d:d8:29:
                    9b:bb:99:10:c8:85:79:b8:7b:8a:73:a9:5c:67:fd:
                    77:b3:56:b5:82:af:c1:81:c6:76:58:41:7c:54:6c:
                    f3:85:95:8d:e7:02:74:e0:48:b0:10:ba:83:67:76:
                    12:45:16:c4:08:79:25:a6:49:90:28:25:d3:df:09:
                    a7:e2:47:5a:84:ea:aa:76:d9:0b:ed:25:98:e7:83:
                    ed:7b:96:17:64:74:3d:c3:ac:10:4e:4f:6a:26:87:
                    14:27:82:08:15:fb:b7:d9:df:43:fd:39:e8:ae:3f:
                    dd:fc:7e:07:73:cf:e5:e0:0c:19:2c:19:f2:54:6f:
                    85:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4C:1C:4D:B4:03:86:3D:65:A7:5C:27:A3:C0:19:7E:0F:FC:65:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/4a90b6c4-ea39-3aff-bb25-b14254380787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:92:2d:4b:18:f5:04:7b:dd:1e:c3:30:34:2a:b7:30:52:8a:
         c5:32:d2:17:8e:9b:c5:54:cd:e2:b8:e7:f0:3e:55:26:de:9a:
         4a:1b:22:b0:47:c6:16:f1:c8:63:20:6d:69:da:c4:36:38:6e:
         11:c4:5f:71:bd:27:78:cd:7e:c4:f9:ea:b2:ff:cb:67:14:d8:
         04:c1:db:59:67:d3:d4:89:c0:3b:80:f4:4b:68:27:f6:b9:51:
         c8:70:cb:db:05:12:11:d8:42:de:43:ca:a8:08:fc:14:d7:02:
         38:8d:36:91:84:02:18:d9:a3:bf:a1:91:d3:74:07:c6:de:24:
         2e:7b:52:00:5e:ec:24:c4:7a:00:16:1b:24:06:fe:73:ce:ef:
         6b:32:8d:e2:cb:76:6a:b9:7b:3e:cc:34:2f:ee:d0:f3:66:a2:
         89:4e:1f:81:b9:5d:6c:d5:c1:b9:d1:6e:83:fb:70:76:70:1f:
         a7:60:89:ec:7c:94:9e:8d:ae:3b:85:83:1e:5c:4b:3e:e8:ed:
         77:06:a6:b5:f3:9e:a6:67:89:bb:d7:11:90:67:68:ad:35:00:
         c1:94:e1:f3:db:0e:72:ff:a0:06:44:fa:69:9b:e4:b3:1b:ac:
         4e:0d:f5:ac:58:b9:80:68:69:5c:41:ca:84:1e:fe:8e:ae:3c:
         bd:7f:98:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEI7dQeo9Wf6ceW2rQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4
MGMzMB4XDTIzMDYxNTIyMzM0NVoXDTIzMDkxMzIyMzM0NVowLzEtMCsGA1UEAxMk
MTViNTY5YTEtNmJlMS00ODRkLWI1NzQtNjc3MTg2OWIyMGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldgi6tMRl2DOympcgqcgDrLNf65aR07UYmm2
IbnbAxmGxBDeF1eexE1wt2/8Vttlu6872j4+Bxada2sFXKQORm/pdyOE6x3kj4kJ
D4AtGSqveVHb2euNfK/QoexAr+jXxyhEjMJMXW51OFC1QhAt6HSjXOtYEOk6WMCK
tc1tIYDvvbZd2Cmbu5kQyIV5uHuKc6lcZ/13s1a1gq/BgcZ2WEF8VGzzhZWN5wJ0
4EiwELqDZ3YSRRbECHklpkmQKCXT3wmn4kdahOqqdtkL7SWY54Pte5YXZHQ9w6wQ
Tk9qJocUJ4IIFfu32d9D/Tnorj/d/H4Hc8/l4AwZLBnyVG+FlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGpMHE20A4Y9ZadcJ6PAGX4P/GUaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz
OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvNGE5MGI2YzQtZWEzOS0z
YWZmLWJiMjUtYjE0MjU0MzgwNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk
YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3
ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj
Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJyVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+SLUsY9QR73R7DMDQqtzBSisUy0heOm8VUzeK45/A+VSbemkobIrBH
xhbxyGMgbWnaxDY4bhHEX3G9J3jNfsT56rL/y2cU2ATB21ln09SJwDuA9EtoJ/a5
Uchwy9sFEhHYQt5DyqgI/BTXAjiNNpGEAhjZo7+hkdN0B8beJC57UgBe7CTEegAW
GyQG/nPO72syjeLLdmq5ez7MNC/u0PNmoolOH4G5XWzVwbnRboP7cHZwH6dgiex8
lJ6NrjuFgx5cSz7o7XcGprXznqZnibvXEZBnaK01AMGU4fPbDnL/oAZE+mmb5LMb
rE4N9axYuYBoaVxByoQe/o6uPL1/mNE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:07 2024 by rpki-client on console-fra.rpki-client.org