Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/32c24ccb-2ee0-3523-bdf5-a3a562f2b1c3.roa
File:                     32c24ccb-2ee0-3523-bdf5-a3a562f2b1c3.roa (raw, json)
Hash identifier:          wWVl9MUlRe23oXNhEhxGoKcidhcZ12JEysR/xknk6mk=
Subject key identifier:   FC:33:DC:07:34:06:19:F6:02:07:CB:D0:83:F8:AC:98:35:E6:7A:A7
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F43285843ADE683D7DE81E63C1A4BDA80
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/32c24ccb-2ee0-3523-bdf5-a3a562f2b1c3.roa
Signing time:             Thu 26 Oct 2023 15:11:30 +0000
ROA not before:           Thu 26 Oct 2023 15:11:30 +0000
ROA not after:            Wed 24 Jan 2024 16:11:30 +0000
asID:                     10317
IP address blocks:        204.155.112.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ad:e6:83:d7:de:81:e6:3c:1a:4b:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Oct 26 15:11:30 2023 GMT
            Not After : Jan 24 16:11:30 2024 GMT
        Subject: CN=8c0c118d-5ad3-4812-8c09-34247fc0292b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:9a:0f:63:a8:25:2b:e7:e4:08:28:1a:fc:
                    c3:4c:36:da:de:83:5b:d1:c7:86:d1:62:23:1b:b5:
                    29:7f:b3:4a:2c:80:e0:07:4e:f9:bf:ea:a2:0c:d2:
                    3a:35:e9:4a:26:3c:1c:80:7c:2d:13:d6:90:52:64:
                    42:f0:7d:7c:d4:62:09:ae:ff:38:fc:ec:93:ec:4c:
                    bf:9d:f0:a9:4e:3d:cb:38:48:47:80:a9:66:07:ee:
                    ff:a8:35:78:10:38:31:7d:ea:27:24:17:f0:3b:2c:
                    e8:ea:05:44:dc:0c:eb:5f:d8:71:37:78:32:15:73:
                    31:ca:96:d8:19:94:a1:c7:fd:5b:05:39:68:bd:b6:
                    ca:ed:7d:5e:80:a2:4b:19:49:3e:76:72:8d:53:89:
                    4f:ed:ce:0c:52:cd:eb:3b:e8:ce:0a:25:bb:2e:8a:
                    cb:a2:2e:10:7e:80:80:64:34:c6:7a:94:f9:0c:df:
                    08:30:06:a3:cc:f9:00:3d:5e:7f:ae:d2:2d:ab:76:
                    13:f6:6c:8a:4a:f9:76:f2:87:52:ea:22:d1:45:bf:
                    bc:11:7e:ea:6d:88:3a:85:c3:f5:30:0d:0d:a2:7c:
                    97:f4:69:23:b6:1d:1d:79:fb:ac:89:44:65:d4:b1:
                    5a:d9:64:52:a0:50:61:8f:1a:77:85:43:87:0e:f3:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:33:DC:07:34:06:19:F6:02:07:CB:D0:83:F8:AC:98:35:E6:7A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/32c24ccb-2ee0-3523-bdf5-a3a562f2b1c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e2:c4:9e:62:61:0f:1f:c4:37:bc:fe:c5:d7:b0:83:7d:b6:
         63:e0:86:96:e0:d8:dc:17:c4:85:40:f1:3e:6b:b3:40:9a:0c:
         e2:73:a4:7e:85:bc:14:9a:5c:46:49:e2:a6:f8:87:8c:96:9d:
         52:a7:43:ba:57:88:c4:47:2f:52:6e:64:08:87:46:3e:48:78:
         ba:42:16:6e:97:34:eb:3b:33:64:b2:9c:c6:90:a1:da:5d:a9:
         4f:8c:93:ae:62:d1:1c:6e:4b:0c:11:ad:7a:9c:97:27:ae:95:
         3e:f3:b6:00:55:bd:74:64:b8:1f:7c:b8:88:7e:55:50:cb:03:
         0c:23:bd:8d:c7:86:cb:df:3b:7a:5c:e9:80:05:9f:b2:42:09:
         78:fa:71:be:a2:a5:c7:88:fc:92:18:f1:b2:62:32:a5:e0:fb:
         a5:a1:00:62:b6:a5:09:ca:4d:68:76:12:29:b3:db:7c:55:85:
         44:dd:56:04:4c:85:fd:eb:be:05:7e:af:03:1f:f6:80:c8:a8:
         35:83:83:fd:fa:a2:59:c1:96:d9:74:ad:cb:cc:53:e5:44:68:
         37:a0:71:7e:ea:b0:d0:73:91:52:e8:c3:fc:a3:dc:a3:0f:e2:
         0c:e7:d7:af:12:f0:47:3c:69:ea:d0:e1:e9:60:6b:df:98:87:
         27:d0:96:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOt5oPX3oHmPBpL2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3
NWFiMB4XDTIzMTAyNjE1MTEzMFoXDTI0MDEyNDE2MTEzMFowLzEtMCsGA1UEAxMk
OGMwYzExOGQtNWFkMy00ODEyLThjMDktMzQyNDdmYzAyOTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYGaD2OoJSvn5AgoGvzDTDba3oNb0ceG0WIj
G7Upf7NKLIDgB075v+qiDNI6NelKJjwcgHwtE9aQUmRC8H181GIJrv84/OyT7Ey/
nfCpTj3LOEhHgKlmB+7/qDV4EDgxfeonJBfwOyzo6gVE3AzrX9hxN3gyFXMxypbY
GZShx/1bBTlovbbK7X1egKJLGUk+dnKNU4lP7c4MUs3rO+jOCiW7LorLoi4QfoCA
ZDTGepT5DN8IMAajzPkAPV5/rtItq3YT9myKSvl28odS6iLRRb+8EX7qbYg6hcP1
MA0NonyX9Gkjth0defusiURl1LFa2WRSoFBhjxp3hUOHDvNj6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwz3Ac0Bhn2AgfL0IP4rJg15nqnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3
MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvMzJjMjRjY2ItMmVlMC0z
NTIzLWJkZjUtYTNhNTYyZjJiMWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj
ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3
NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz
NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzJtwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATixJ5iYQ8fxDe8/sXXsIN9tmPghpbg2NwXxIVA8T5rs0CaDOJzpH6F
vBSaXEZJ4qb4h4yWnVKnQ7pXiMRHL1JuZAiHRj5IeLpCFm6XNOs7M2SynMaQodpd
qU+Mk65i0RxuSwwRrXqclyeulT7ztgBVvXRkuB98uIh+VVDLAwwjvY3HhsvfO3pc
6YAFn7JCCXj6cb6ipceI/JIY8bJiMqXg+6WhAGK2pQnKTWh2Eimz23xVhUTdVgRM
hf3rvgV+rwMf9oDIqDWDg/36olnBltl0rcvMU+VEaDegcX7qsNBzkVLow/yj3KMP
4gzn168S8Ec8aerQ4elga9+YhyfQlno=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org