Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/65c782cb-c581-37e2-96c3-0b63f5e98f55.roa
File:                     65c782cb-c581-37e2-96c3-0b63f5e98f55.roa (raw, json)
Hash identifier:          dCyRBfrqG3cyzW5gu0ssgABUJqr/+zo9E5pskvY8eQU=
Subject key identifier:   E7:9A:D6:1C:31:B1:43:CC:D2:F0:50:5C:86:AF:81:50:FD:43:B5:5C
Certificate issuer:       /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Certificate serial:       010D0C9F4328584214479EE18AC50A31BA1C9480
Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/65c782cb-c581-37e2-96c3-0b63f5e98f55.roa
Signing time:             Thu 01 Jun 2023 21:45:44 +0000
ROA not before:           Thu 01 Jun 2023 21:45:44 +0000
ROA not after:            Wed 30 Aug 2023 21:45:44 +0000
asID:                     54702
IP address blocks:        199.187.188.0/22 maxlen: 22
                          205.196.8.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:14:47:9e:e1:8a:c5:0a:31:ba:1c:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
        Validity
            Not Before: Jun  1 21:45:44 2023 GMT
            Not After : Aug 30 21:45:44 2023 GMT
        Subject: CN=6f0a13bc-50f1-4ba8-9a4e-fc22d1faeb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:82:0d:11:9d:f5:05:77:1a:4b:f5:ce:07:
                    2a:4e:a9:2b:36:1a:9c:31:dc:24:47:cf:a8:15:9d:
                    54:f6:25:d8:20:b6:9f:74:f3:18:9d:91:d0:27:8e:
                    9e:4c:7b:23:17:cc:e5:e6:13:65:7a:6b:ed:50:ec:
                    b2:54:c6:0b:94:89:de:24:9f:6a:11:e6:05:5b:91:
                    8e:61:65:d1:d0:b3:8c:67:be:d4:ef:2f:8b:63:00:
                    e2:c4:55:22:6d:0e:fa:b8:4d:74:cc:55:b3:75:3f:
                    dd:52:35:a0:25:2b:b1:4d:6a:28:01:76:da:9f:ad:
                    bb:1a:2d:b0:97:03:47:f9:65:3d:79:90:39:7e:8f:
                    fd:27:d6:0d:d6:69:92:d5:59:15:df:c0:00:0f:ea:
                    e7:e5:de:55:b9:1f:fc:d7:6c:cc:1a:cf:28:c2:c2:
                    8f:fb:e7:06:98:c7:73:23:2d:c2:13:62:b0:dc:2f:
                    cd:4a:8b:e1:7b:f0:70:c4:ad:ad:8e:11:75:4e:05:
                    87:9d:f1:03:3a:19:c6:36:8f:03:4d:e0:f0:f1:23:
                    52:f5:32:64:7c:3a:39:a5:2b:87:e3:36:ee:b9:30:
                    70:13:7e:fb:28:54:af:21:36:a7:16:59:12:e6:51:
                    da:a4:b2:33:5e:2d:19:0b:76:76:04:38:c0:e8:18:
                    53:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9A:D6:1C:31:B1:43:CC:D2:F0:50:5C:86:AF:81:50:FD:43:B5:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/65c782cb-c581-37e2-96c3-0b63f5e98f55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl

            X509v3 Authority Key Identifier:
                keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.188.0/22
                  205.196.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:19:d2:a2:5e:71:99:5e:84:9e:fe:be:50:11:f1:fc:bb:82:
         fd:56:2a:71:cc:02:18:89:38:20:31:de:e7:f2:cf:c0:b8:d8:
         83:2f:5f:d7:57:da:fd:b7:59:f6:64:a8:98:12:57:4c:40:db:
         df:87:9b:34:c9:ec:af:c4:50:76:3c:f4:f0:1d:6c:80:98:4f:
         e6:5e:0a:78:91:1b:e0:38:26:53:c3:8a:76:59:f4:1f:b2:ac:
         fc:95:4b:e4:0c:26:ea:f9:e0:0a:b9:9a:d6:a1:f5:51:7e:e4:
         2a:22:6b:44:64:1c:22:95:62:2c:2e:48:ad:a5:bf:23:50:0e:
         0b:20:33:e5:a0:8c:0f:a8:7f:16:c7:d0:0d:f1:14:79:6f:1f:
         02:4b:20:34:22:57:25:dd:5c:dd:d1:c3:64:71:14:c9:df:97:
         4a:b5:68:e8:0c:78:40:96:22:84:31:26:05:fc:27:44:62:43:
         d0:14:3e:34:2d:bb:c8:52:78:0b:ba:1c:61:4a:fa:f8:f3:f1:
         dd:e1:72:e5:b2:3b:c1:ca:34:c9:93:c2:3f:34:10:96:b5:ed:
         ca:db:8e:c4:8f:40:72:b2:a7:9b:bc:10:fd:85:8c:08:59:9a:
         ec:ff:8c:50:0f:ca:7b:f9:f4:fb:d5:f8:61:13:e2:8a:0b:46:
         f3:88:a0:af
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEIUR57hisUKMboclIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj
NDYwMB4XDTIzMDYwMTIxNDU0NFoXDTIzMDgzMDIxNDU0NFowLzEtMCsGA1UEAxMk
NmYwYTEzYmMtNTBmMS00YmE4LTlhNGUtZmMyMmQxZmFlYjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr12CDRGd9QV3Gkv1zgcqTqkrNhqcMdwkR8+o
FZ1U9iXYILafdPMYnZHQJ46eTHsjF8zl5hNlemvtUOyyVMYLlIneJJ9qEeYFW5GO
YWXR0LOMZ77U7y+LYwDixFUibQ76uE10zFWzdT/dUjWgJSuxTWooAXban627Gi2w
lwNH+WU9eZA5fo/9J9YN1mmS1VkV38AAD+rn5d5VuR/812zMGs8owsKP++cGmMdz
Iy3CE2Kw3C/NSovhe/BwxK2tjhF1TgWHnfEDOhnGNo8DTeDw8SNS9TJkfDo5pSuH
4zbuuTBwE377KFSvITanFlkS5lHapLIzXi0ZC3Z2BDjA6BhThQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFOea1hwxsUPM0vBQXIavgVD9Q7VcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk
M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvNjVjNzgyY2ItYzU4MS0z
N2UyLTk2YzMtMGI2M2Y1ZTk4ZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0
MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1
YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2
N2E5NWM0NjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCx7u8AwQC
zcQIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIYZ0qJecZlehJ7+vlAR8fy7gv1WKnHMAhiJOCAx3ufyz8C4
2IMvX9dX2v23WfZkqJgSV0xA29+HmzTJ7K/EUHY89PAdbICYT+ZeCniRG+A4JlPD
inZZ9B+yrPyVS+QMJur54Aq5mtah9VF+5Coia0RkHCKVYiwuSK2lvyNQDgsgM+Wg
jA+ofxbH0A3xFHlvHwJLIDQiVyXdXN3Rw2RxFMnfl0q1aOgMeECWIoQxJgX8J0Ri
Q9AUPjQtu8hSeAu6HGFK+vjz8d3hcuWyO8HKNMmTwj80EJa17crbjsSPQHKyp5u8
EP2FjAhZmuz/jFAPynv59PvV+GET4ooLRvOIoK8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:09 2024 by rpki-client on console-fra.rpki-client.org