Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/6cbe4910-9449-3051-9e3d-7dd6d2a8887d.roa
File:                     6cbe4910-9449-3051-9e3d-7dd6d2a8887d.roa (raw, json)
Hash identifier:          7F8fE+g4hz7+c2nGrr1gw3mar1dY1RGT/Wx1k0kCw5s=
Subject key identifier:   E6:44:51:FA:33:46:67:08:3F:3A:AC:57:00:1D:86:F6:14:7B:DD:95
Certificate issuer:       /CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
Certificate serial:       010D0C9F432858435D6111DCB3554C651F111CC0
Authority key identifier: DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/6cbe4910-9449-3051-9e3d-7dd6d2a8887d.roa
Signing time:             Wed 27 Sep 2023 18:57:58 +0000
ROA not before:           Wed 27 Sep 2023 18:57:58 +0000
ROA not after:            Tue 26 Dec 2023 19:57:58 +0000
asID:                     62739
IP address blocks:        162.220.116.0/24 maxlen: 24
                          162.220.117.0/24 maxlen: 24
                          162.220.118.0/24 maxlen: 24
                          162.220.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5d:61:11:dc:b3:55:4c:65:1f:11:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3779ad5d-5ca7-4c23-928f-091e0e1a3f93
        Validity
            Not Before: Sep 27 18:57:58 2023 GMT
            Not After : Dec 26 19:57:58 2023 GMT
        Subject: CN=c9c26bc4-f7b2-49f9-ba6b-44acf5466444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6b:81:47:52:54:92:07:86:d0:fa:82:3f:f2:
                    f4:dc:9c:c7:d3:d7:57:fc:13:06:a5:e0:ca:26:55:
                    70:e7:92:f3:10:3f:ba:9d:af:e9:fd:07:1f:a4:2b:
                    d4:6a:98:fc:99:4e:ff:05:96:bd:6d:3d:3a:08:9a:
                    86:3a:43:bf:13:8b:07:80:10:e8:75:55:bf:c7:19:
                    12:71:e5:53:eb:c9:66:61:d7:73:86:8a:59:15:4a:
                    04:d6:b8:33:37:95:ec:ab:4b:7a:9b:ff:4d:ae:26:
                    0e:99:ec:fe:c4:16:1e:35:a6:3b:46:c9:7f:c3:2a:
                    5c:57:97:7f:4e:11:42:88:ed:cf:23:dc:fa:8c:5e:
                    e4:81:b0:b7:67:c8:13:42:e7:dd:1d:51:be:80:bd:
                    dc:6e:09:b9:2a:0b:ae:ca:e2:57:9c:f0:ec:c2:e2:
                    99:d0:b0:d7:17:6d:2f:16:18:18:3e:9d:5e:cc:1b:
                    48:25:f5:53:3a:e1:4d:40:6f:85:86:f4:84:e0:0f:
                    33:f5:04:ed:86:fc:58:a5:73:09:5f:f8:e4:dc:92:
                    85:39:f5:69:dd:72:82:16:ce:86:b2:cb:00:56:89:
                    6c:35:48:6c:54:2c:b7:54:67:ad:8d:24:65:91:49:
                    f7:2b:12:0f:9b:d1:a3:0c:82:38:96:ac:39:d8:ac:
                    7b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:44:51:FA:33:46:67:08:3F:3A:AC:57:00:1D:86:F6:14:7B:DD:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/6cbe4910-9449-3051-9e3d-7dd6d2a8887d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.crl

            X509v3 Authority Key Identifier:
                keyid:DD:40:58:A3:BD:22:13:B4:A1:67:C5:07:2E:03:D5:40:0B:92:1C:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3779ad5d-5ca7-4c23-928f-091e0e1a3f93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:8a:50:d2:46:35:dd:9e:79:bb:d3:29:dc:07:19:8c:b0:f2:
         d1:37:dd:3d:43:10:4c:40:ad:da:6e:89:68:ab:c7:a8:61:0b:
         52:2b:5b:08:00:00:37:8e:f5:4c:fc:22:63:2b:88:ac:a8:1f:
         c0:99:8e:1c:25:67:d4:bb:17:81:96:e4:66:07:da:87:7f:81:
         2f:70:46:14:55:c5:7c:1d:db:bf:f8:eb:07:fd:07:10:45:63:
         a5:15:cb:12:86:90:ca:dc:45:26:f6:6b:44:c0:36:86:f2:35:
         19:9f:9e:86:37:fe:c7:31:3c:d2:27:b8:9d:7d:d6:d5:3c:dd:
         79:fb:f1:b3:da:c4:27:57:eb:04:50:63:47:40:97:35:d2:0f:
         02:b0:2c:20:f2:be:28:90:7e:72:c4:cb:fc:b9:1e:a1:70:71:
         32:b2:ee:f8:38:e0:5f:29:03:25:e7:10:b4:3d:01:4d:6f:f4:
         28:a6:38:0f:6b:7f:2c:45:c2:35:71:d5:0c:d8:55:d6:ff:54:
         44:1c:57:f6:4b:6a:50:9e:18:fe:76:4f:f9:08:6c:6f:41:b7:
         62:ff:d1:88:ed:80:a3:ce:9a:ef:57:29:9c:b9:2f:95:af:b0:
         48:09:46:1e:00:6b:cb:40:62:d3:4f:44:1c:10:90:e7:3f:82:
         65:73:67:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWENdYRHcs1VMZR8RHMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzc3OWFkNWQtNWNhNy00YzIzLTkyOGYtMDkxZTBlMWEz
ZjkzMB4XDTIzMDkyNzE4NTc1OFoXDTIzMTIyNjE5NTc1OFowLzEtMCsGA1UEAxMk
YzljMjZiYzQtZjdiMi00OWY5LWJhNmItNDRhY2Y1NDY2NDQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWuBR1JUkgeG0PqCP/L03JzH09dX/BMGpeDK
JlVw55LzED+6na/p/QcfpCvUapj8mU7/BZa9bT06CJqGOkO/E4sHgBDodVW/xxkS
ceVT68lmYddzhopZFUoE1rgzN5Xsq0t6m/9NriYOmez+xBYeNaY7Rsl/wypcV5d/
ThFCiO3PI9z6jF7kgbC3Z8gTQufdHVG+gL3cbgm5KguuyuJXnPDswuKZ0LDXF20v
FhgYPp1ezBtIJfVTOuFNQG+FhvSE4A8z9QTthvxYpXMJX/jk3JKFOfVp3XKCFs6G
sssAVolsNUhsVCy3VGetjSRlkUn3KxIPm9GjDII4lqw52Kx7XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOZEUfozRmcIPzqsVwAdhvYUe92VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNzc5
YWQ1ZC01Y2E3LTRjMjMtOTI4Zi0wOTFlMGUxYTNmOTMvNmNiZTQ5MTAtOTQ0OS0z
MDUxLTllM2QtN2RkNmQyYTg4ODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzc3OWFkNWQtNWNhNy00YzIzLTky
OGYtMDkxZTBlMWEzZjkzLzM3NzlhZDVkLTVjYTctNGMyMy05MjhmLTA5MWUwZTFh
M2Y5My5jcmwwHwYDVR0jBBgwFoAU3UBYo70iE7ShZ8UHLgPVQAuSHEUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNzc5YWQ1ZC01Y2E3LTRjMjMtOTI4Zi0wOTFl
MGUxYTNmOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotx0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6KUNJGNd2eebvTKdwHGYyw8tE33T1DEExArdpuiWirx6hhC1IrWwgA
ADeO9Uz8ImMriKyoH8CZjhwlZ9S7F4GW5GYH2od/gS9wRhRVxXwd27/46wf9BxBF
Y6UVyxKGkMrcRSb2a0TANobyNRmfnoY3/scxPNInuJ191tU83Xn78bPaxCdX6wRQ
Y0dAlzXSDwKwLCDyviiQfnLEy/y5HqFwcTKy7vg44F8pAyXnELQ9AU1v9CimOA9r
fyxFwjVx1QzYVdb/VEQcV/ZLalCeGP52T/kIbG9Bt2L/0YjtgKPOmu9XKZy5L5Wv
sEgJRh4Aa8tAYtNPRBwQkOc/gmVzZ4Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:12 2024 by rpki-client on console-fra.rpki-client.org