Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/3b4725b9-df42-333e-ab24-830b40a11495.roa
File:                     3b4725b9-df42-333e-ab24-830b40a11495.roa (raw, json)
Hash identifier:          //KMUg1Gw7/Fa62ia4Ylv9omseFw4Poa7+uC/+dSvu0=
Subject key identifier:   B1:91:BE:66:65:13:B0:4E:7B:CA:C9:72:C9:3D:A7:11:02:E1:97:5D
Certificate issuer:       /CN=77836eaa-7214-4a69-8b5a-41b55d93e689
Certificate serial:       010D0C9F43285843AFA3F18BF3AF433BA3864840
Authority key identifier: 33:E4:62:D4:47:A7:41:15:52:A2:EF:26:A1:7C:09:93:89:29:43:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/3b4725b9-df42-333e-ab24-830b40a11495.roa
Signing time:             Fri 27 Oct 2023 06:08:59 +0000
ROA not before:           Fri 27 Oct 2023 06:08:59 +0000
ROA not after:            Thu 25 Jan 2024 07:08:59 +0000
asID:                     16399
IP address blocks:        66.244.160.0/19 maxlen: 24
                          74.222.32.0/19 maxlen: 24
                          207.135.160.0/19 maxlen: 24
                          216.21.32.0/19 maxlen: 24
                          216.146.64.0/19 maxlen: 24
                          216.159.224.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:af:a3:f1:8b:f3:af:43:3b:a3:86:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77836eaa-7214-4a69-8b5a-41b55d93e689
        Validity
            Not Before: Oct 27 06:08:59 2023 GMT
            Not After : Jan 25 07:08:59 2024 GMT
        Subject: CN=fa1dde1c-6a7b-429e-ba6f-5523b2303171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1a:a6:bb:fc:c5:dd:5d:ba:7d:77:2b:54:31:
                    71:7c:a1:f7:61:17:06:4e:1b:a2:e9:16:60:89:b8:
                    89:e4:f9:fe:14:13:13:88:a0:73:6d:82:b7:ba:56:
                    c1:f2:bf:1b:25:da:b0:8a:a3:b7:32:58:e0:5e:11:
                    19:6f:4d:ea:26:36:34:ec:1b:3c:f6:01:17:78:61:
                    c6:85:9a:3c:ae:32:ee:8a:8b:c1:68:c2:d7:6a:0b:
                    48:67:28:44:ed:51:af:09:db:62:2b:f4:21:04:a5:
                    68:3c:9f:11:45:27:d7:fd:12:e5:d2:88:3b:59:55:
                    d6:00:7b:d8:dc:80:61:4b:8e:9e:68:a8:27:2d:f5:
                    ad:f5:f3:d4:b1:23:13:16:37:74:71:79:62:05:f4:
                    7b:e5:5b:6c:cd:61:fc:2e:ea:42:5d:19:d6:ea:24:
                    b9:4a:21:b9:43:5d:61:6d:d3:8f:bc:61:b8:45:6c:
                    79:74:61:0b:d7:5f:94:e0:73:05:3f:f4:a5:51:25:
                    3e:b9:0e:f3:43:21:67:25:40:7f:89:eb:34:94:26:
                    30:70:a6:a5:da:ff:c6:19:1e:6a:f3:87:1e:a6:e4:
                    92:04:1f:82:52:b3:fe:42:de:bc:f9:85:6e:9e:6d:
                    cd:6d:c4:d0:d2:23:3c:6f:6f:2a:9d:22:dd:66:87:
                    4f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:91:BE:66:65:13:B0:4E:7B:CA:C9:72:C9:3D:A7:11:02:E1:97:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/3b4725b9-df42-333e-ab24-830b40a11495.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/77836eaa-7214-4a69-8b5a-41b55d93e689.crl

            X509v3 Authority Key Identifier:
                keyid:33:E4:62:D4:47:A7:41:15:52:A2:EF:26:A1:7C:09:93:89:29:43:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.244.160.0/19
                  74.222.32.0/19
                  207.135.160.0/19
                  216.21.32.0/19
                  216.146.64.0/19
                  216.159.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:45:b8:ba:52:b0:74:6a:44:0a:4e:34:ef:1d:31:67:28:c4:
         57:d7:24:04:41:e8:af:8c:78:7f:7b:da:eb:f3:d4:b8:c8:02:
         a2:14:a2:33:bb:eb:81:51:d6:cd:40:93:18:c9:d7:c9:ee:ff:
         cb:73:18:ad:84:28:24:b3:8f:e3:48:54:ab:e8:7a:28:aa:c3:
         a8:24:8b:89:0e:73:8f:28:d8:ba:fe:6f:e1:7b:47:00:85:d0:
         42:25:b7:37:3f:9a:ea:95:78:92:f0:35:5b:ab:74:9a:7a:8f:
         55:42:cd:f4:b3:c1:49:08:0d:ed:80:e5:06:e9:61:40:a7:ec:
         4c:0d:af:9f:ed:3c:6e:9e:7a:56:e7:57:e9:40:03:1d:b6:75:
         91:5f:ae:75:d8:c2:1d:d7:e7:63:7b:c5:4d:dd:c1:c4:7b:37:
         db:1c:fc:18:53:b3:a0:31:71:31:b7:30:5b:a0:f9:38:df:74:
         21:5c:f8:7e:12:19:6d:1f:0d:41:75:62:e8:c1:68:75:e8:5e:
         2b:ae:37:9d:e6:22:1a:57:f8:c5:76:46:e7:a7:88:a0:a8:3f:
         72:d4:5f:a0:42:45:a9:47:de:06:ff:c3:7d:ae:00:72:51:49:
         f3:e8:33:ce:ad:14:a2:2e:9e:d8:56:c2:60:fc:55:b0:e5:ca:
         74:68:c9:d1
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEOvo/GL869DO6OGSEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc4MzZlYWEtNzIxNC00YTY5LThiNWEtNDFiNTVkOTNl
Njg5MB4XDTIzMTAyNzA2MDg1OVoXDTI0MDEyNTA3MDg1OVowLzEtMCsGA1UEAxMk
ZmExZGRlMWMtNmE3Yi00MjllLWJhNmYtNTUyM2IyMzAzMTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhqmu/zF3V26fXcrVDFxfKH3YRcGThui6RZg
ibiJ5Pn+FBMTiKBzbYK3ulbB8r8bJdqwiqO3MljgXhEZb03qJjY07Bs89gEXeGHG
hZo8rjLuiovBaMLXagtIZyhE7VGvCdtiK/QhBKVoPJ8RRSfX/RLl0og7WVXWAHvY
3IBhS46eaKgnLfWt9fPUsSMTFjd0cXliBfR75VtszWH8LupCXRnW6iS5SiG5Q11h
bdOPvGG4RWx5dGEL11+U4HMFP/SlUSU+uQ7zQyFnJUB/ies0lCYwcKal2v/GGR5q
84cepuSSBB+CUrP+Qt68+YVunm3NbcTQ0iM8b28qnSLdZodPiQIDAQABo4IDczCC
A28wHQYDVR0OBBYEFLGRvmZlE7BOe8rJcsk9pxEC4ZddMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83Nzgz
NmVhYS03MjE0LTRhNjktOGI1YS00MWI1NWQ5M2U2ODkvM2I0NzI1YjktZGY0Mi0z
MzNlLWFiMjQtODMwYjQwYTExNDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzc4MzZlYWEtNzIxNC00YTY5LThi
NWEtNDFiNTVkOTNlNjg5Lzc3ODM2ZWFhLTcyMTQtNGE2OS04YjVhLTQxYjU1ZDkz
ZTY4OS5jcmwwHwYDVR0jBBgwFoAUM+Ri1EenQRVSou8moXwJk4kpQxUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83NzgzNmVhYS03MjE0LTRhNjktOGI1YS00MWI1
NWQ5M2U2ODkuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQFQvSgAwQF
St4gAwQFz4egAwQF2BUgAwQF2JJAAwQF2J/gMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB1FuLpSsHRqRApO
NO8dMWcoxFfXJARB6K+MeH972uvz1LjIAqIUojO764FR1s1AkxjJ18nu/8tzGK2E
KCSzj+NIVKvoeiiqw6gki4kOc48o2Lr+b+F7RwCF0EIltzc/muqVeJLwNVurdJp6
j1VCzfSzwUkIDe2A5QbpYUCn7EwNr5/tPG6eelbnV+lAAx22dZFfrnXYwh3X52N7
xU3dwcR7N9sc/BhTs6AxcTG3MFug+TjfdCFc+H4SGW0fDUF1YujBaHXoXiuuN53m
IhpX+MV2RueniKCoP3LUX6BCRalH3gb/w32uAHJRSfPoM86tFKIunthWwmD8VbDl
ynRoydE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org