Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ec6be2d7-5214-38c8-bcfd-96ceaab2e20d.roa
File:                     ec6be2d7-5214-38c8-bcfd-96ceaab2e20d.roa (raw, json)
Hash identifier:          d3p0d4mFxDbYnr1OODaAXchBCVXPCRBA45uD+QPB22g=
Subject key identifier:   63:A9:8F:27:95:F2:8A:5F:DD:F9:FD:99:57:FE:A4:64:FA:11:30:0B
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285843C246B2FE8F8CC2571ECEA700
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ec6be2d7-5214-38c8-bcfd-96ceaab2e20d.roa
Signing time:             Thu 02 Nov 2023 22:21:28 +0000
ROA not before:           Thu 02 Nov 2023 22:21:28 +0000
ROA not after:            Wed 31 Jan 2024 23:21:28 +0000
asID:                     271
IP address blocks:        206.12.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c2:46:b2:fe:8f:8c:c2:57:1e:ce:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Nov  2 22:21:28 2023 GMT
            Not After : Jan 31 23:21:28 2024 GMT
        Subject: CN=6aaffaef-7399-4160-a5cb-e6a76a73e280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:22:0f:67:27:a0:38:14:48:a6:b6:bc:44:88:
                    6d:1e:a5:3b:4b:e4:8f:fd:39:2c:53:f7:cc:9f:47:
                    6a:ab:02:e2:8c:ea:0f:71:7b:f0:fd:16:ab:38:56:
                    a7:a7:cb:a4:79:ff:4d:68:0d:e9:a5:86:81:f4:b0:
                    70:8d:41:e0:dd:b8:d3:37:f5:a5:11:ea:8a:d1:66:
                    d1:58:76:72:a1:d1:ac:65:8e:5a:1b:65:29:49:d7:
                    23:e8:1b:c9:03:54:a3:f9:9f:73:32:2e:c7:a7:63:
                    db:27:f5:1a:db:05:ac:bf:54:72:dc:e1:e9:fe:d7:
                    a3:98:79:b0:60:27:90:1d:70:2e:0b:81:96:5c:19:
                    49:e6:89:d4:b5:73:5b:88:46:1b:55:4d:50:51:4b:
                    9e:80:61:21:23:4d:db:09:d1:6b:6c:1f:5f:6e:a4:
                    e2:08:a5:5c:e1:5a:64:04:8e:65:a3:c6:9e:8b:df:
                    6c:86:e0:e5:d9:be:1a:1b:77:f5:0e:e9:c3:32:72:
                    5c:80:46:0b:cd:f2:d6:f2:53:f0:79:34:54:db:6d:
                    23:a9:39:be:7e:a8:04:d2:cd:ca:d5:5c:4c:8a:ad:
                    95:95:e6:c7:30:fb:59:62:7f:51:39:52:20:8b:98:
                    62:83:95:b9:73:28:00:bc:7e:91:81:b7:a7:6d:74:
                    cd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A9:8F:27:95:F2:8A:5F:DD:F9:FD:99:57:FE:A4:64:FA:11:30:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ec6be2d7-5214-38c8-bcfd-96ceaab2e20d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:50:bc:70:3d:b0:84:b5:65:82:29:73:86:1e:6a:72:3e:b4:
         61:d7:28:1b:9f:5f:09:73:62:88:35:71:b3:f8:09:97:0f:18:
         18:2f:da:e1:2d:91:c2:88:1e:23:7a:3e:2a:de:97:cd:df:55:
         3e:ee:58:a2:0b:99:ee:ca:0c:74:81:e6:e1:9d:fe:6d:d4:eb:
         35:59:db:8c:9c:b6:a4:77:e7:32:ec:8e:de:cb:38:54:fd:91:
         2d:e3:e4:12:75:61:2e:7d:6e:66:88:dd:57:47:49:0b:29:e3:
         56:8a:94:5f:9b:39:03:bb:ab:b2:fe:f5:02:c6:78:76:1c:54:
         96:a0:d5:90:d7:79:c9:5a:71:20:63:02:1e:1f:17:5a:a2:41:
         50:6f:fb:de:b1:2a:02:d8:67:46:da:fa:5e:2d:67:34:76:59:
         07:47:e0:ff:69:fc:79:05:1f:87:7f:ac:8d:eb:39:ea:a8:e7:
         be:83:43:6f:2b:48:69:a9:64:18:80:d5:f5:e5:5e:51:0c:d5:
         1f:d5:e5:c6:b7:2d:57:8d:a6:b4:d7:6d:f0:53:43:42:40:89:
         46:20:c8:a7:5c:a1:1d:0c:3a:b5:43:09:47:0e:76:f0:ae:07:
         cb:ce:78:82:78:11:96:56:27:64:d8:06:1c:5e:72:98:7c:32:
         cd:6b:4b:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEPCRrL+j4zCVx7OpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTIzMTEwMjIyMjEyOFoXDTI0MDEzMTIzMjEyOFowLzEtMCsGA1UEAxMk
NmFhZmZhZWYtNzM5OS00MTYwLWE1Y2ItZTZhNzZhNzNlMjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCIPZyegOBRIpra8RIhtHqU7S+SP/TksU/fM
n0dqqwLijOoPcXvw/RarOFanp8ukef9NaA3ppYaB9LBwjUHg3bjTN/WlEeqK0WbR
WHZyodGsZY5aG2UpSdcj6BvJA1Sj+Z9zMi7Hp2PbJ/Ua2wWsv1Ry3OHp/tejmHmw
YCeQHXAuC4GWXBlJ5onUtXNbiEYbVU1QUUuegGEhI03bCdFrbB9fbqTiCKVc4Vpk
BI5lo8aei99shuDl2b4aG3f1DunDMnJcgEYLzfLW8lPweTRU220jqTm+fqgE0s3K
1VxMiq2VlebHMPtZYn9ROVIgi5hig5W5cygAvH6RgbenbXTNPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGOpjyeV8opf3fn9mVf+pGT6ETALMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZWM2YmUyZDctNTIxNC0z
OGM4LWJjZmQtOTZjZWFhYjJlMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzgyZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZQvHA9sIS1ZYIpc4YeanI+tGHXKBufXwlzYog1cbP4CZcPGBgv2uEt
kcKIHiN6Pirel83fVT7uWKILme7KDHSB5uGd/m3U6zVZ24yctqR35zLsjt7LOFT9
kS3j5BJ1YS59bmaI3VdHSQsp41aKlF+bOQO7q7L+9QLGeHYcVJag1ZDXeclacSBj
Ah4fF1qiQVBv+96xKgLYZ0ba+l4tZzR2WQdH4P9p/HkFH4d/rI3rOeqo576DQ28r
SGmpZBiA1fXlXlEM1R/V5ca3LVeNprTXbfBTQ0JAiUYgyKdcoR0MOrVDCUcOdvCu
B8vOeIJ4EZZWJ2TYBhxecph8Ms1rS/Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org