Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/84dc0821-78d3-34f9-bd51-04b75a020043.roa
File:                     84dc0821-78d3-34f9-bd51-04b75a020043.roa (raw, json)
Hash identifier:          +3rXhWJWGRPtG5c9TqB2HNvxz7Rpoq2hJi4yVriwsLk=
Subject key identifier:   3C:2F:3B:5E:CB:82:02:03:24:02:6F:DE:B1:9C:A3:3B:4D:78:D6:99
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F4328584368D656EDEC1EC85FA7E33440
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/84dc0821-78d3-34f9-bd51-04b75a020043.roa
Signing time:             Sun 01 Oct 2023 21:28:08 +0000
ROA not before:           Sun 01 Oct 2023 21:28:08 +0000
ROA not after:            Sat 30 Dec 2023 22:28:08 +0000
asID:                     209242
IP address blocks:        216.205.52.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:68:d6:56:ed:ec:1e:c8:5f:a7:e3:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: Oct  1 21:28:08 2023 GMT
            Not After : Dec 30 22:28:08 2023 GMT
        Subject: CN=7dfef942-cb8b-4ec8-afca-66f4f67a89c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:44:21:d8:01:31:68:0f:c1:6b:fb:c4:02:
                    08:02:5f:d7:49:bb:1d:35:d2:eb:a1:20:02:d2:f7:
                    2e:5a:16:16:2c:65:02:bb:44:10:eb:44:7f:cc:56:
                    37:9a:cc:e6:5b:12:3d:a4:2d:3f:8b:ca:68:a0:02:
                    02:3b:60:be:8f:93:4b:3e:46:2f:de:35:f8:ea:82:
                    2c:10:0b:3b:e5:b7:12:64:c6:f9:33:c5:27:5c:a0:
                    d0:e5:cd:78:fa:eb:78:a1:3a:d8:6a:fb:b4:58:01:
                    f3:00:d1:e2:e0:01:4d:fc:61:cc:f9:10:3c:de:94:
                    e3:09:b3:8e:40:91:3f:eb:64:df:83:1d:30:54:47:
                    f0:c5:ce:40:78:2f:ef:22:d7:ca:79:a0:be:76:8c:
                    94:b2:85:4b:20:2d:0e:95:b4:70:33:97:4a:d4:12:
                    4b:c7:66:e4:ba:7f:02:10:5a:4f:6f:ee:e6:d4:2c:
                    28:bf:0f:df:35:50:6b:5f:b7:31:04:6d:7f:b3:a2:
                    10:01:69:40:b9:a2:ab:48:35:72:1d:0e:e8:4f:cc:
                    fb:94:e4:7e:1e:46:31:4a:97:07:46:70:8e:0b:73:
                    6d:06:da:54:d1:73:11:42:b9:cc:b2:9d:72:4b:33:
                    a6:1f:33:fd:30:14:39:39:92:44:74:7e:b1:33:39:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2F:3B:5E:CB:82:02:03:24:02:6F:DE:B1:9C:A3:3B:4D:78:D6:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/84dc0821-78d3-34f9-bd51-04b75a020043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ad:d4:3a:80:ad:70:c4:72:e6:23:4c:b6:55:90:97:46:95:
         83:00:f6:ff:96:ef:78:72:1d:11:02:1a:ae:c2:7d:37:84:29:
         c3:ca:da:1a:8b:0c:d7:af:64:4d:d2:8b:72:b4:c8:f6:2a:03:
         8a:c6:ec:8d:92:b1:fb:e3:00:a4:50:b5:a4:b7:bb:1f:46:82:
         a7:8b:44:1d:c8:f8:60:06:05:95:0d:e4:be:df:8f:45:df:f3:
         34:d5:ad:a6:8d:f3:61:18:10:3a:34:c6:f7:4c:7e:68:1b:5d:
         9d:4e:cb:01:c2:f8:3f:41:61:fb:6d:03:c4:d2:3b:f9:c2:67:
         aa:90:25:a3:bb:a0:fe:e5:8e:8e:47:bc:3f:7d:04:63:f4:18:
         48:3c:1f:56:d0:6a:d7:32:fb:a9:92:4a:45:a1:23:5a:3e:f7:
         bb:c6:24:ab:4d:c5:d5:d1:e8:59:5d:a8:15:d2:e4:cb:5b:38:
         64:3b:75:85:3a:1b:37:7c:b8:e8:32:84:38:e3:e6:92:9a:7b:
         a6:b2:66:79:3c:fb:70:14:c5:db:5d:d4:ad:b4:a3:31:84:4e:
         29:3e:b7:62:e1:45:7a:3b:44:d7:6b:81:02:bc:5d:24:d0:8b:
         2b:ab:1b:3a:46:32:bc:1a:9c:1c:12:63:86:47:eb:91:49:58:
         75:bb:37:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWENo1lbt7B7IX6fjNEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNiNjk0OGQtM2VlMS00MTUzLTljNDAtMWNkNzQ2NWJl
YTJiMB4XDTIzMTAwMTIxMjgwOFoXDTIzMTIzMDIyMjgwOFowLzEtMCsGA1UEAxMk
N2RmZWY5NDItY2I4Yi00ZWM4LWFmY2EtNjZmNGY2N2E4OWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0FEIdgBMWgPwWv7xAIIAl/XSbsdNdLroSAC
0vcuWhYWLGUCu0QQ60R/zFY3mszmWxI9pC0/i8pooAICO2C+j5NLPkYv3jX46oIs
EAs75bcSZMb5M8UnXKDQ5c14+ut4oTrYavu0WAHzANHi4AFN/GHM+RA83pTjCbOO
QJE/62Tfgx0wVEfwxc5AeC/vItfKeaC+doyUsoVLIC0OlbRwM5dK1BJLx2bkun8C
EFpPb+7m1Cwovw/fNVBrX7cxBG1/s6IQAWlAuaKrSDVyHQ7oT8z7lOR+HkYxSpcH
RnCOC3NtBtpU0XMRQrnMsp1ySzOmHzP9MBQ5OZJEdH6xMzmsLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDwvO17LggIDJAJv3rGcoztNeNaZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2
OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3NDY1YmVhMmIvODRkYzA4MjEtNzhkMy0z
NGY5LWJkNTEtMDRiNzVhMDIwMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTNiNjk0OGQtM2VlMS00MTUzLTlj
NDAtMWNkNzQ2NWJlYTJiL2EzYjY5NDhkLTNlZTEtNDE1My05YzQwLTFjZDc0NjVi
ZWEyYi5jcmwwHwYDVR0jBBgwFoAUkI1uPag85edr1T1okg9nW6bWPkowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3
NDY1YmVhMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2M00MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJyt1DqArXDEcuYjTLZVkJdGlYMA9v+W73hyHRECGq7CfTeEKcPK2hqL
DNevZE3Si3K0yPYqA4rG7I2SsfvjAKRQtaS3ux9GgqeLRB3I+GAGBZUN5L7fj0Xf
8zTVraaN82EYEDo0xvdMfmgbXZ1OywHC+D9BYfttA8TSO/nCZ6qQJaO7oP7ljo5H
vD99BGP0GEg8H1bQatcy+6mSSkWhI1o+97vGJKtNxdXR6FldqBXS5MtbOGQ7dYU6
Gzd8uOgyhDjj5pKae6ayZnk8+3AUxdtd1K20ozGETik+t2LhRXo7RNdrgQK8XSTQ
iyurGzpGMrwanBwSY4ZH65FJWHW7N/E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org