Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/22c3e9ba-6e79-38b7-8f5f-fe920fdc4448.roa
File:                     22c3e9ba-6e79-38b7-8f5f-fe920fdc4448.roa (raw, json)
Hash identifier:          4PddfM91TrcpGLBDKuCpE13CkEZ5ESRs52LUEgpa+1I=
Subject key identifier:   17:B5:25:9E:7B:20:C3:DD:21:07:DD:08:1A:CA:5A:CE:10:99:1E:66
Certificate issuer:       /CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624
Certificate serial:       010D0C9F43285839873BD37657FCBB8F43BE8EF0
Authority key identifier: 03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/22c3e9ba-6e79-38b7-8f5f-fe920fdc4448.roa
Signing time:             Thu 08 Apr 2021 04:00:00 +0000
ROA not before:           Thu 08 Apr 2021 04:00:00 +0000
ROA not after:            Wed 12 Jul 2023 04:00:00 +0000
asID:                     40028
IP address blocks:        172.110.143.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:87:3b:d3:76:57:fc:bb:8f:43:be:8e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624
        Validity
            Not Before: Apr  8 04:00:00 2021 GMT
            Not After : Jul 12 04:00:00 2023 GMT
        Subject: CN=52cb0ea9-a5f3-4b3c-a600-3d2f8aadfcf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:7f:f3:ca:3b:6f:56:b2:90:6f:c4:c2:e6:
                    43:8b:ff:4f:a3:49:f3:df:6d:56:11:d9:26:2e:a1:
                    d4:c2:cc:ea:3e:81:52:f9:03:2e:8e:86:a3:65:b9:
                    0c:47:27:2c:26:71:3f:cc:31:68:1a:14:0f:65:61:
                    b3:64:83:63:9c:0e:52:ab:4b:c7:a3:47:19:72:34:
                    77:68:fd:39:27:d3:35:a2:0c:e8:d2:61:94:bc:3a:
                    ab:c9:84:1b:a1:62:19:f5:9a:1a:85:49:e9:48:99:
                    bd:d7:57:8b:67:a7:43:1c:20:27:66:fb:5a:fa:5d:
                    ec:0e:ff:d1:7b:58:9d:d9:84:bf:9f:b3:a8:c5:11:
                    72:dc:d3:d1:3d:c6:48:f1:33:35:11:0c:64:33:c5:
                    e4:15:e1:04:3e:17:3a:83:8f:a1:58:35:a1:28:e1:
                    28:a3:42:57:4a:f3:17:a5:2d:40:6e:05:39:33:f0:
                    10:b6:a4:ff:cd:93:be:d5:38:f2:1e:2a:0c:c7:1e:
                    30:57:21:99:2d:da:c2:32:9f:e1:2b:2a:49:a1:30:
                    cd:35:41:47:b8:2c:c5:b2:fb:f0:09:ad:99:b2:60:
                    f5:29:e8:32:8d:8f:72:47:0d:66:3b:0b:7d:5b:e6:
                    9a:0f:06:b4:48:37:33:02:8c:d6:98:f6:9b:77:3f:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B5:25:9E:7B:20:C3:DD:21:07:DD:08:1A:CA:5A:CE:10:99:1E:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/22c3e9ba-6e79-38b7-8f5f-fe920fdc4448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:88:21:41:a5:1c:47:35:f8:3c:4f:9a:a5:37:fa:11:b5:01:
         b4:7a:ec:1e:cb:eb:3c:20:1e:04:fa:d1:97:0e:33:82:46:3e:
         43:cc:65:f0:35:36:4b:8d:bd:1f:5a:49:c2:4d:46:14:37:d9:
         a8:0f:4f:4b:3f:18:08:91:f8:49:82:ff:9a:95:73:d5:31:93:
         76:a1:ce:d0:56:64:13:af:e0:79:aa:ad:f6:62:a3:29:50:16:
         72:05:e8:16:55:9a:5d:54:1f:20:4d:05:38:52:4e:db:f1:89:
         79:4d:43:92:0a:6f:dc:30:b7:b3:f1:ec:e9:75:ee:55:c6:30:
         35:bc:6a:6a:96:a2:3e:9c:40:16:02:d7:2e:e9:49:c9:79:10:
         83:b7:c7:25:5c:fc:58:4e:fe:52:52:7d:73:0f:92:e9:a4:7f:
         2f:ed:d0:4b:62:a2:14:2c:b4:92:af:56:b0:fe:94:17:4d:1e:
         5d:fc:1d:e8:87:bf:99:bb:52:1e:6e:95:8d:a1:44:66:51:78:
         cb:0a:60:ea:5c:52:39:08:2a:dd:15:e7:7f:d8:de:2c:65:70:
         26:d5:08:d6:69:dc:e8:b5:5f:97:4a:96:5b:ca:0b:22:94:dc:
         52:59:5d:2f:26:a7:50:20:52:80:eb:d9:af:7d:ca:43:34:f6:
         10:d4:1d:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDmHO9N2V/y7j0O+jvAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTYyMDZiZDAtZTk3Zi00YmM0LTllMDYtZTFiYjliMzgz
NjI0MB4XDTIxMDQwODA0MDAwMFoXDTIzMDcxMjA0MDAwMFowLzEtMCsGA1UEAxMk
NTJjYjBlYTktYTVmMy00YjNjLWE2MDAtM2QyZjhhYWRmY2YzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9N/88o7b1aykG/EwuZDi/9Po0nz321WEdkm
LqHUwszqPoFS+QMujoajZbkMRycsJnE/zDFoGhQPZWGzZINjnA5Sq0vHo0cZcjR3
aP05J9M1ogzo0mGUvDqryYQboWIZ9ZoahUnpSJm911eLZ6dDHCAnZvta+l3sDv/R
e1id2YS/n7OoxRFy3NPRPcZI8TM1EQxkM8XkFeEEPhc6g4+hWDWhKOEoo0JXSvMX
pS1AbgU5M/AQtqT/zZO+1TjyHioMxx4wVyGZLdrCMp/hKypJoTDNNUFHuCzFsvvw
Ca2ZsmD1KegyjY9yRw1mOwt9W+aaDwa0SDczAozWmPabdz87SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBe1JZ57IMPdIQfdCBrKWs4QmR5mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjIw
NmJkMC1lOTdmLTRiYzQtOWUwNi1lMWJiOWIzODM2MjQvMjJjM2U5YmEtNmU3OS0z
OGI3LThmNWYtZmU5MjBmZGM0NDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTYyMDZiZDAtZTk3Zi00YmM0LTll
MDYtZTFiYjliMzgzNjI0L2E2MjA2YmQwLWU5N2YtNGJjNC05ZTA2LWUxYmI5YjM4
MzYyNC5jcmwwHwYDVR0jBBgwFoAUAxSBE7w8TnHynd1jBoL0eB9h75swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjIwNmJkMC1lOTdmLTRiYzQtOWUwNi1lMWJi
OWIzODM2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG6PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISIIUGlHEc1+DxPmqU3+hG1AbR67B7L6zwgHgT60ZcOM4JGPkPMZfA1
NkuNvR9aScJNRhQ32agPT0s/GAiR+EmC/5qVc9Uxk3ahztBWZBOv4HmqrfZioylQ
FnIF6BZVml1UHyBNBThSTtvxiXlNQ5IKb9wwt7Px7Ol17lXGMDW8amqWoj6cQBYC
1y7pScl5EIO3xyVc/FhO/lJSfXMPkumkfy/t0EtiohQstJKvVrD+lBdNHl38HeiH
v5m7Uh5ulY2hRGZReMsKYOpcUjkIKt0V53/Y3ixlcCbVCNZp3Oi1X5dKllvKCyKU
3FJZXS8mp1AgUoDr2a99ykM09hDUHVA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:42 2023 by rpki-client on console-fra.rpki-client.org