Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/5d51b866-9db5-3321-9967-ca60b87a1f33.roa
File:                     5d51b866-9db5-3321-9967-ca60b87a1f33.roa (raw, json)
Hash identifier:          QdJt3iDCcHmgVdEWsV60ZRNyvDlzWrH8judoTwtlmpw=
Subject key identifier:   9E:E7:80:4E:E5:D8:5B:CB:78:ED:A5:26:6C:FB:8C:25:07:5C:27:29
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583A10CE2E87B49CDEBC360BAA80
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/5d51b866-9db5-3321-9967-ca60b87a1f33.roa
Signing time:             Wed 26 May 2021 04:00:00 +0000
ROA not before:           Wed 26 May 2021 04:00:00 +0000
ROA not after:            Wed 30 Aug 2023 04:00:00 +0000
asID:                     55293
IP address blocks:        70.32.16.0/20 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:10:ce:2e:87:b4:9c:de:bc:36:0b:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: May 26 04:00:00 2021 GMT
            Not After : Aug 30 04:00:00 2023 GMT
        Subject: CN=9a3dc6b3-4142-498f-90c8-7c544ad131eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:78:96:08:75:97:8f:3c:93:73:8e:0c:07:e2:
                    d0:d7:01:4f:84:f2:80:62:eb:42:6e:b1:33:f3:b0:
                    48:08:fe:c0:80:8c:d8:bd:5d:80:f3:f9:d8:9b:66:
                    71:3d:ef:35:ac:d8:ba:4a:4c:62:c2:64:94:dd:53:
                    c5:33:83:47:f9:cd:05:2e:de:d5:7b:78:e9:fe:a8:
                    38:7a:8a:3d:2c:4f:7c:3e:02:86:b3:85:39:5e:9c:
                    fc:d0:36:89:53:cb:56:71:dc:71:4e:31:2d:8d:26:
                    c0:bc:1f:40:01:cf:82:9a:a5:cf:ba:33:9c:d8:30:
                    af:7a:7d:9c:13:79:29:c7:1d:e3:3b:04:76:e3:5e:
                    2c:9c:73:b3:1b:19:30:28:16:c0:22:99:13:34:fa:
                    90:64:fc:e6:9f:1e:5c:b8:26:4f:dc:2b:e1:64:5a:
                    f4:28:0a:1e:c8:c0:64:f3:e9:2f:81:9c:2f:3f:ef:
                    94:f3:f2:9b:cc:99:b2:5e:ba:a6:6b:3e:a5:e9:ee:
                    21:a2:f7:fe:f9:b6:03:c4:f8:f7:1f:f5:04:d0:3b:
                    e0:03:a4:10:6b:d3:26:fb:09:67:25:f6:78:d6:cc:
                    ca:3c:89:30:99:34:4c:0e:d1:7f:e5:97:78:6e:00:
                    0b:c4:69:76:f6:92:cc:1f:4e:79:32:5a:9c:36:96:
                    a0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E7:80:4E:E5:D8:5B:CB:78:ED:A5:26:6C:FB:8C:25:07:5C:27:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/5d51b866-9db5-3321-9967-ca60b87a1f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:17:9b:ee:35:3e:ce:47:ca:5e:15:2f:12:b5:f5:1e:c6:0d:
         ca:91:af:65:5b:6a:11:f1:b0:e0:ea:d8:2a:ab:7d:20:5e:c4:
         ab:8a:a1:d3:cc:59:be:03:22:61:2f:74:5f:b3:19:00:21:96:
         65:e6:e1:43:73:57:44:ec:90:8a:2f:c4:25:75:ef:50:56:3d:
         52:b8:15:e6:96:7b:94:bb:57:18:d3:42:aa:6c:e6:67:43:86:
         e2:31:74:ed:d7:d5:98:b2:e8:f8:4a:37:b9:ef:9b:80:2f:2c:
         ae:80:db:0c:48:10:45:b5:4d:e6:9c:c4:1b:00:fa:7f:de:8c:
         fd:3a:fb:c1:d2:c5:ce:30:26:0c:4e:5a:dc:21:4c:4c:64:4f:
         31:00:d4:e5:21:ed:5f:fa:e4:b1:db:15:aa:36:d0:67:87:a0:
         67:e3:cb:c3:1c:14:14:21:26:ef:45:dd:95:e9:fd:43:57:29:
         4f:73:ef:9f:bc:d7:f1:66:6b:fd:ab:d8:a2:c3:88:9a:03:44:
         a0:dc:48:23:2c:67:1e:00:10:d1:02:ce:fe:e6:f4:04:60:40:
         be:7a:90:f4:c3:5b:29:b5:27:75:4f:56:9c:ef:cd:20:38:53:
         58:ac:33:60:62:e0:f4:d2:af:32:49:47:e8:10:1a:3c:92:35:
         c3:d5:7a:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDoQzi6HtJzevDYLqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTIxMDUyNjA0MDAwMFoXDTIzMDgzMDA0MDAwMFowLzEtMCsGA1UEAxMk
OWEzZGM2YjMtNDE0Mi00OThmLTkwYzgtN2M1NDRhZDEzMWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlniWCHWXjzyTc44MB+LQ1wFPhPKAYutCbrEz
87BICP7AgIzYvV2A8/nYm2ZxPe81rNi6SkxiwmSU3VPFM4NH+c0FLt7Ve3jp/qg4
eoo9LE98PgKGs4U5Xpz80DaJU8tWcdxxTjEtjSbAvB9AAc+CmqXPujOc2DCven2c
E3kpxx3jOwR2414snHOzGxkwKBbAIpkTNPqQZPzmnx5cuCZP3CvhZFr0KAoeyMBk
8+kvgZwvP++U8/KbzJmyXrqmaz6l6e4hovf++bYDxPj3H/UE0DvgA6QQa9Mm+wln
JfZ41szKPIkwmTRMDtF/5Zd4bgALxGl29pLMH055MlqcNpagBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ7ngE7l2FvLeO2lJmz7jCUHXCcpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNWQ1MWI4NjYtOWRiNS0z
MzIxLTk5NjctY2E2MGI4N2ExZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiAQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgXm+41Ps5Hyl4VLxK19R7GDcqRr2VbahHxsODq2CqrfSBexKuKodPM
Wb4DImEvdF+zGQAhlmXm4UNzV0TskIovxCV171BWPVK4FeaWe5S7VxjTQqps5mdD
huIxdO3X1Ziy6PhKN7nvm4AvLK6A2wxIEEW1TeacxBsA+n/ejP06+8HSxc4wJgxO
WtwhTExkTzEA1OUh7V/65LHbFao20GeHoGfjy8McFBQhJu9F3ZXp/UNXKU9z75+8
1/Fma/2r2KLDiJoDRKDcSCMsZx4AENECzv7m9ARgQL56kPTDWym1J3VPVpzvzSA4
U1isM2Bi4PTSrzJJR+gQGjySNcPVeuA=
-----END CERTIFICATE-----
Generated at Wed Aug 30 04:13:20 2023 by rpki-client on console-fra.rpki-client.org