Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/b96b4e64-f2c6-3561-bf7a-99cda93e9818.roa
File:                     b96b4e64-f2c6-3561-bf7a-99cda93e9818.roa (raw, json)
Hash identifier:          KRHtTc0MK8EPA6r2pW5nonBY3p+B0P7XU1RmbhSyEVk=
Subject key identifier:   D5:91:C5:2E:0A:24:D2:7E:85:EB:D2:77:5C:60:33:21:9F:FD:04:F3
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583BFB88F25F1CAD442ED659C700
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/b96b4e64-f2c6-3561-bf7a-99cda93e9818.roa
Signing time:             Wed 26 May 2021 04:00:00 +0000
ROA not before:           Wed 26 May 2021 04:00:00 +0000
ROA not after:            Thu 22 Feb 2024 05:00:00 +0000
asID:                     19905
IP address blocks:        190.92.128.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fb:88:f2:5f:1c:ad:44:2e:d6:59:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: May 26 04:00:00 2021 GMT
            Not After : Feb 22 05:00:00 2024 GMT
        Subject: CN=8a5e2489-7dd7-4af2-8315-da921a30abe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:30:8a:2f:d5:ee:2f:e3:35:7a:7c:90:84:43:
                    5b:7b:13:e7:e1:74:2c:44:6a:62:ad:b2:29:c8:ea:
                    10:6a:2a:b9:66:a2:48:47:34:e5:57:66:e8:ca:3c:
                    b3:1a:14:55:3c:f4:78:17:81:0d:11:66:03:69:cf:
                    ff:2d:96:37:2d:f0:11:90:ad:58:58:b1:91:d8:2d:
                    f5:dd:16:ba:89:8e:80:bf:72:83:a3:e3:00:09:7a:
                    c5:01:a4:85:c5:83:a1:ee:6c:40:50:26:ab:b9:73:
                    b6:af:f6:3e:da:17:a6:5a:1e:d7:04:0a:54:dd:07:
                    18:3f:63:25:da:e5:ec:ec:a7:55:0f:b6:f7:9f:c5:
                    c7:d5:f9:f2:77:5d:c9:aa:6a:78:94:f7:27:89:3a:
                    a4:11:49:8d:54:de:02:dd:2b:b6:a8:02:42:50:81:
                    01:5d:cb:6c:2e:de:b0:f5:00:00:02:ab:c5:25:9e:
                    64:19:c2:27:5e:c5:49:5b:78:9b:34:19:6a:12:7d:
                    29:20:8a:86:82:d1:ba:78:4e:5f:4f:ce:89:7b:f0:
                    2c:c6:61:7c:7d:42:66:42:2e:d6:f2:03:9e:90:b0:
                    34:bd:80:40:f4:a9:07:99:eb:26:76:e7:ab:50:1f:
                    65:a4:99:c5:63:22:e8:c0:a2:ab:19:54:ee:20:46:
                    85:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:91:C5:2E:0A:24:D2:7E:85:EB:D2:77:5C:60:33:21:9F:FD:04:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/b96b4e64-f2c6-3561-bf7a-99cda93e9818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d5:83:dc:43:aa:f5:98:e1:c7:10:0d:e3:72:07:88:a8:3f:
         b5:2e:84:5a:08:c0:04:7c:6c:51:71:e1:97:18:22:b2:e9:c7:
         4b:10:67:1a:a5:0c:cc:db:b6:95:9e:bf:d1:f4:15:0e:cf:10:
         e1:7b:24:e4:d6:2d:7e:1e:90:61:4c:c3:d5:41:78:c0:bc:49:
         b0:2e:14:9a:53:b4:14:83:72:6a:22:1d:12:50:6f:31:c6:d5:
         e5:3a:46:d7:e6:08:b0:78:34:f4:d2:a7:4b:f0:4c:4a:b3:aa:
         55:fb:d2:1f:ee:d7:e5:69:c6:ce:45:d9:a1:8d:e2:2b:02:22:
         1b:7b:39:74:6b:46:3d:8b:03:38:01:92:80:94:38:b9:b2:fb:
         d6:66:e9:7d:4e:48:8e:bf:ea:e0:18:88:9c:e7:c3:07:f2:50:
         38:e1:49:e8:43:ff:5b:f1:e7:1a:53:86:63:6a:5e:45:be:47:
         f0:81:cb:6d:e9:30:54:6f:01:ef:41:14:c2:f9:45:de:46:e4:
         01:2b:6e:62:44:7e:f6:79:e5:be:67:d0:6c:6c:dd:4d:e1:50:
         f2:51:27:b7:d8:7a:72:12:84:be:e1:8a:93:dc:5e:41:75:66:
         2f:12:b4:a5:75:10:ee:57:32:e3:a5:d2:d7:1c:05:b6:5f:3a:
         5e:2e:5f:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDv7iPJfHK1ELtZZxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTIxMDUyNjA0MDAwMFoXDTI0MDIyMjA1MDAwMFowLzEtMCsGA1UEAxMk
OGE1ZTI0ODktN2RkNy00YWYyLTgzMTUtZGE5MjFhMzBhYmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDCKL9XuL+M1enyQhENbexPn4XQsRGpirbIp
yOoQaiq5ZqJIRzTlV2boyjyzGhRVPPR4F4ENEWYDac//LZY3LfARkK1YWLGR2C31
3Ra6iY6Av3KDo+MACXrFAaSFxYOh7mxAUCaruXO2r/Y+2hemWh7XBApU3QcYP2Ml
2uXs7KdVD7b3n8XH1fnyd13Jqmp4lPcniTqkEUmNVN4C3Su2qAJCUIEBXctsLt6w
9QAAAqvFJZ5kGcInXsVJW3ibNBlqEn0pIIqGgtG6eE5fT86Je/AsxmF8fUJmQi7W
8gOekLA0vYBA9KkHmesmduerUB9lpJnFYyLowKKrGVTuIEaFzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWRxS4KJNJ+hevSd1xgMyGf/QTzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYjk2YjRlNjQtZjJjNi0z
NTYxLWJmN2EtOTljZGE5M2U5ODE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvlyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJTVg9xDqvWY4ccQDeNyB4ioP7UuhFoIwAR8bFFx4ZcYIrLpx0sQZxql
DMzbtpWev9H0FQ7PEOF7JOTWLX4ekGFMw9VBeMC8SbAuFJpTtBSDcmoiHRJQbzHG
1eU6RtfmCLB4NPTSp0vwTEqzqlX70h/u1+Vpxs5F2aGN4isCIht7OXRrRj2LAzgB
koCUOLmy+9Zm6X1OSI6/6uAYiJznwwfyUDjhSehD/1vx5xpThmNqXkW+R/CBy23p
MFRvAe9BFML5Rd5G5AErbmJEfvZ55b5n0Gxs3U3hUPJRJ7fYenIShL7hipPcXkF1
Zi8StKV1EO5XMuOl0tccBbZfOl4uX2g=
-----END CERTIFICATE-----
Generated at Thu Feb 22 09:35:26 2024 by rpki-client on console-fra.rpki-client.org