Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f606593b-dbc6-4b4d-9308-6ed517dceb85/63d6c1a8-6bbb-3adb-a6ad-66f69853b773.roa
File:                     63d6c1a8-6bbb-3adb-a6ad-66f69853b773.roa (raw, json)
Hash identifier:          SvxYgWxH3EIJXjFLYsA2zViTrGrhiJJVEDIPiTwsQr0=
Subject key identifier:   7A:7A:45:A1:EE:4F:FA:3C:FB:0F:17:62:0F:8D:41:94:69:ED:78:7B
Certificate issuer:       /CN=f606593b-dbc6-4b4d-9308-6ed517dceb85
Certificate serial:       010D0C9F43285839815132FD79D01808E30A0A80
Authority key identifier: C9:B3:87:B6:18:71:13:3E:08:55:BC:B1:61:B5:BC:F1:2F:82:F9:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f606593b-dbc6-4b4d-9308-6ed517dceb85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f606593b-dbc6-4b4d-9308-6ed517dceb85/63d6c1a8-6bbb-3adb-a6ad-66f69853b773.roa
Signing time:             Thu 01 Apr 2021 04:00:00 +0000
ROA not before:           Thu 01 Apr 2021 04:00:00 +0000
ROA not after:            Sat 01 Apr 2023 04:00:00 +0000
asID:                     207722
IP address blocks:        45.42.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:81:51:32:fd:79:d0:18:08:e3:0a:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f606593b-dbc6-4b4d-9308-6ed517dceb85
        Validity
            Not Before: Apr  1 04:00:00 2021 GMT
            Not After : Apr  1 04:00:00 2023 GMT
        Subject: CN=6cc5ce6f-a96c-4cf4-8680-71388179a5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:37:4f:30:77:69:af:7a:46:99:43:5b:98:
                    fd:99:8e:51:e2:28:f0:b1:35:e9:bc:9c:bb:8d:fb:
                    e7:5e:95:34:50:04:94:c6:87:d6:98:a7:5a:87:52:
                    9e:12:65:da:45:7b:54:93:91:db:a5:d0:ef:06:a1:
                    2e:54:60:84:ef:cd:c8:da:53:42:51:d9:46:bd:f4:
                    68:eb:88:e4:bf:6c:8a:5f:e0:d4:04:da:0e:b7:c7:
                    2a:be:d0:4e:36:0b:ae:a5:b8:39:bc:63:1b:a2:2c:
                    76:24:9c:b2:1f:7a:38:91:7d:95:bd:5c:95:99:24:
                    f3:c1:e9:12:7c:64:d9:69:cf:fb:22:99:a5:cd:c7:
                    be:a7:c4:e5:53:fd:5e:f9:d9:73:15:c5:db:a9:26:
                    6a:1d:67:3f:9f:f9:75:b3:35:5e:32:95:6b:ee:30:
                    72:5c:e7:a0:25:b2:41:07:62:e7:43:92:a9:03:54:
                    1b:a4:6d:10:28:69:75:13:44:58:3a:f6:68:eb:3f:
                    6d:d6:1f:2f:74:71:f7:9c:5c:ca:f9:e3:89:b4:8e:
                    12:cf:4d:64:e4:5f:49:f6:53:db:eb:22:54:e5:4c:
                    b6:b0:b8:52:a1:89:1d:89:06:5a:4f:2f:84:af:be:
                    0b:b8:3a:87:02:50:e2:c2:b3:30:8c:d5:7b:03:2a:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7A:45:A1:EE:4F:FA:3C:FB:0F:17:62:0F:8D:41:94:69:ED:78:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f606593b-dbc6-4b4d-9308-6ed517dceb85/63d6c1a8-6bbb-3adb-a6ad-66f69853b773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f606593b-dbc6-4b4d-9308-6ed517dceb85/f606593b-dbc6-4b4d-9308-6ed517dceb85.crl

            X509v3 Authority Key Identifier:
                keyid:C9:B3:87:B6:18:71:13:3E:08:55:BC:B1:61:B5:BC:F1:2F:82:F9:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f606593b-dbc6-4b4d-9308-6ed517dceb85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:8d:bf:d8:cb:e0:bc:d8:b0:22:a9:6d:b1:da:88:47:d6:65:
         d4:b5:b6:aa:ee:e0:a7:0d:93:ba:58:ba:53:a9:bb:04:a1:40:
         77:51:92:4a:17:9a:7a:78:bc:b7:79:06:32:78:64:55:00:fd:
         d3:89:d3:95:c9:ef:91:a3:20:0f:e8:8e:97:d7:44:72:92:9c:
         cd:91:8c:1e:26:1e:7f:cc:f1:1f:e2:da:0a:b1:7c:49:31:26:
         a5:0b:fd:3b:3a:ca:de:c8:3f:e4:ed:dc:25:de:db:e4:c1:ae:
         07:68:f4:57:8d:2b:05:66:f8:d7:c4:fc:fe:9e:39:78:2b:d5:
         6f:be:1d:f1:70:5a:2d:76:5a:ba:7d:b7:fa:e4:a0:6e:ae:d5:
         af:50:b2:ff:6a:6a:8d:5e:e0:06:5c:4a:ee:7a:08:63:88:9a:
         cf:f2:87:7a:ec:bc:44:e4:90:f9:8f:b5:1d:c0:0d:ff:b0:3c:
         0f:3b:c9:5d:c3:46:c9:76:53:18:26:87:f0:ff:be:5f:bb:7c:
         43:26:a6:4f:90:ce:f1:84:30:05:ae:65:29:d0:5e:ee:92:33:
         62:63:9b:79:dd:56:7f:95:4e:a2:a0:fb:93:a4:05:39:3d:c7:
         95:be:70:62:42:86:72:f4:fb:f7:f8:16:49:71:40:cb:6f:d8:
         64:f0:65:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDmBUTL9edAYCOMKCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYwNjU5M2ItZGJjNi00YjRkLTkzMDgtNmVkNTE3ZGNl
Yjg1MB4XDTIxMDQwMTA0MDAwMFoXDTIzMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
NmNjNWNlNmYtYTk2Yy00Y2Y0LTg2ODAtNzEzODgxNzlhNWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDo3TzB3aa96RplDW5j9mY5R4ijwsTXpvJy7
jfvnXpU0UASUxofWmKdah1KeEmXaRXtUk5HbpdDvBqEuVGCE783I2lNCUdlGvfRo
64jkv2yKX+DUBNoOt8cqvtBONguupbg5vGMboix2JJyyH3o4kX2VvVyVmSTzwekS
fGTZac/7Ipmlzce+p8TlU/1e+dlzFcXbqSZqHWc/n/l1szVeMpVr7jByXOegJbJB
B2LnQ5KpA1QbpG0QKGl1E0RYOvZo6z9t1h8vdHH3nFzK+eOJtI4Sz01k5F9J9lPb
6yJU5Uy2sLhSoYkdiQZaTy+Er74LuDqHAlDiwrMwjNV7AyoNcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHp6RaHuT/o8+w8XYg+NQZRp7Xh7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNjA2
NTkzYi1kYmM2LTRiNGQtOTMwOC02ZWQ1MTdkY2ViODUvNjNkNmMxYTgtNmJiYi0z
YWRiLWE2YWQtNjZmNjk4NTNiNzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjYwNjU5M2ItZGJjNi00YjRkLTkz
MDgtNmVkNTE3ZGNlYjg1L2Y2MDY1OTNiLWRiYzYtNGI0ZC05MzA4LTZlZDUxN2Rj
ZWI4NS5jcmwwHwYDVR0jBBgwFoAUybOHthhxEz4IVbyxYbW88S+C+QgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mNjA2NTkzYi1kYmM2LTRiNGQtOTMwOC02ZWQ1
MTdkY2ViODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSrVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+Nv9jL4LzYsCKpbbHaiEfWZdS1tqru4KcNk7pYulOpuwShQHdRkkoX
mnp4vLd5BjJ4ZFUA/dOJ05XJ75GjIA/ojpfXRHKSnM2RjB4mHn/M8R/i2gqxfEkx
JqUL/Ts6yt7IP+Tt3CXe2+TBrgdo9FeNKwVm+NfE/P6eOXgr1W++HfFwWi12Wrp9
t/rkoG6u1a9Qsv9qao1e4AZcSu56CGOIms/yh3rsvETkkPmPtR3ADf+wPA87yV3D
Rsl2Uxgmh/D/vl+7fEMmpk+QzvGEMAWuZSnQXu6SM2Jjm3ndVn+VTqKg+5OkBTk9
x5W+cGJChnL0+/f4FklxQMtv2GTwZT8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:36 2024 by rpki-client on console-ams.rpki-client.org