Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/8465bbf2-25b8-31fc-8a78-5621863ede9d.roa
File:                     8465bbf2-25b8-31fc-8a78-5621863ede9d.roa (raw, json)
Hash identifier:          9GbqUJv8m1yG28LyixrDbVb2vv6rsbbZ1Zucu0wV+9U=
Subject key identifier:   15:7C:9E:DE:7A:E5:ED:9F:F8:25:D7:38:C7:65:5A:B3:F8:17:4B:27
Certificate issuer:       /CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
Certificate serial:       010D0C9F4328584368FA74325A5FDA8AEA978680
Authority key identifier: CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/8465bbf2-25b8-31fc-8a78-5621863ede9d.roa
Signing time:             Sun 01 Oct 2023 22:40:54 +0000
ROA not before:           Sun 01 Oct 2023 22:40:54 +0000
ROA not after:            Sat 30 Dec 2023 23:40:54 +0000
asID:                     14618
IP address blocks:        2602:fcee:400::/48 maxlen: 48
                          2602:fcee:404::/48 maxlen: 48
                          2602:fcee:408::/48 maxlen: 48
                          2602:fcee:ff4::/48 maxlen: 48
                          2602:fcee:ff5::/48 maxlen: 48
                          2602:fcee:ff6::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:68:fa:74:32:5a:5f:da:8a:ea:97:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
        Validity
            Not Before: Oct  1 22:40:54 2023 GMT
            Not After : Dec 30 23:40:54 2023 GMT
        Subject: CN=5f812ff5-3287-48e2-ac9e-9206299a28ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ca:11:85:82:a5:25:fe:92:07:39:83:a0:d6:
                    15:72:dc:95:61:d1:d5:90:2b:93:ce:fc:00:d7:e0:
                    63:b7:3c:d8:1f:01:d1:af:ed:86:d6:fa:d9:94:5e:
                    09:68:35:a5:6d:24:8c:21:34:e0:a2:d6:68:dd:d0:
                    20:01:d8:d9:5c:20:d2:2f:db:59:26:b7:14:a3:c8:
                    fc:ec:fd:15:7b:58:a9:58:3a:84:74:0a:ed:47:6b:
                    a1:ea:53:52:f0:c4:a1:8f:80:38:a8:ba:bb:a7:bd:
                    fd:5b:9d:50:5b:33:5a:1c:0e:6a:de:dc:3a:95:3f:
                    c3:62:56:03:85:77:ea:25:93:8c:ee:e7:b7:d8:ee:
                    ea:ba:dd:66:47:d0:6a:f3:9b:04:0f:2c:d6:7e:d9:
                    e7:df:52:73:f6:b7:ac:68:ff:4d:87:0b:6a:63:b4:
                    cb:ec:96:2a:7e:74:a1:cf:ef:d5:44:6d:b0:56:33:
                    d1:dc:c3:d1:a2:de:f8:3d:a9:c0:4f:d4:26:1e:9f:
                    17:fb:67:5a:07:0c:62:e2:08:f5:ad:9a:4b:a0:dc:
                    a0:e4:6c:84:cd:96:f1:b7:63:b8:19:4a:bc:20:26:
                    d4:c7:57:c0:c8:e6:13:84:c5:93:0f:a6:f5:7b:80:
                    80:fd:07:d7:07:55:a6:e6:e1:dd:b7:b9:4f:22:54:
                    92:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7C:9E:DE:7A:E5:ED:9F:F8:25:D7:38:C7:65:5A:B3:F8:17:4B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/8465bbf2-25b8-31fc-8a78-5621863ede9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcee:400::/48
                  2602:fcee:404::/48
                  2602:fcee:408::/48
                  2602:fcee:ff4::-2602:fcee:ff6:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:ee:17:d1:74:67:a7:b7:79:bd:4e:b5:bf:c7:c7:6f:4c:60:
         03:4b:50:bf:ef:ee:5f:e8:af:b0:69:09:bb:c3:01:32:ab:18:
         6a:1b:19:72:67:c4:6c:02:85:4f:fa:28:a4:ee:9b:ea:63:42:
         e3:82:d1:4a:10:11:40:45:a0:b1:68:04:c6:da:b5:01:56:a0:
         53:e8:7b:b4:d1:1e:89:f2:d7:9b:84:8b:70:70:25:ac:1a:ae:
         df:f0:a8:c2:f9:f6:1b:78:36:0f:81:e5:ee:1a:d6:fb:a8:4a:
         26:ac:9e:b1:83:48:73:66:39:c4:f5:e4:5f:27:a2:9b:4c:84:
         e1:c5:b1:b6:c9:03:60:87:1d:95:f5:9e:0b:71:f8:a8:33:2c:
         51:95:b3:91:8c:ae:4c:19:a8:e6:26:05:53:5f:7f:e9:f5:0e:
         da:a8:6a:67:96:c3:f7:50:ce:1c:29:e1:c8:89:77:dd:e7:1e:
         f2:ef:32:15:31:af:2c:a8:82:32:22:e8:14:e8:20:38:76:4d:
         f2:60:27:59:ea:54:e6:24:98:95:29:64:bc:6f:10:94:d6:03:
         16:36:16:9d:b8:84:62:3e:79:16:d6:c6:95:dc:af:c0:69:37:
         65:e1:94:2d:7c:48:9c:ff:52:7d:51:fb:ef:9c:70:44:c4:d5:
         08:5d:74:62
-----BEGIN CERTIFICATE-----
MIIGbDCCBVSgAwIBAgIUAQ0Mn0MoWENo+nQyWl/aiuqXhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE4MTZhZTYtNTE4Ni00NGY3LWFlNWItZWMxMzM4Yjdh
NzdhMB4XDTIzMTAwMTIyNDA1NFoXDTIzMTIzMDIzNDA1NFowLzEtMCsGA1UEAxMk
NWY4MTJmZjUtMzI4Ny00OGUyLWFjOWUtOTIwNjI5OWEyOGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcoRhYKlJf6SBzmDoNYVctyVYdHVkCuTzvwA
1+BjtzzYHwHRr+2G1vrZlF4JaDWlbSSMITTgotZo3dAgAdjZXCDSL9tZJrcUo8j8
7P0Ve1ipWDqEdArtR2uh6lNS8MShj4A4qLq7p739W51QWzNaHA5q3tw6lT/DYlYD
hXfqJZOM7ue32O7qut1mR9Bq85sEDyzWftnn31Jz9resaP9NhwtqY7TL7JYqfnSh
z+/VRG2wVjPR3MPRot74PanAT9QmHp8X+2daBwxi4gj1rZpLoNyg5GyEzZbxt2O4
GUq8ICbUx1fAyOYThMWTD6b1e4CA/QfXB1Wm5uHdt7lPIlSSPwIDAQABo4IDfjCC
A3owHQYDVR0OBBYEFBV8nt565e2f+CXXOMdlWrP4F0snMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMTgx
NmFlNi01MTg2LTQ0ZjctYWU1Yi1lYzEzMzhiN2E3N2EvODQ2NWJiZjItMjViOC0z
MWZjLThhNzgtNTYyMTg2M2VkZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTE4MTZhZTYtNTE4Ni00NGY3LWFl
NWItZWMxMzM4YjdhNzdhL2UxODE2YWU2LTUxODYtNDRmNy1hZTViLWVjMTMzOGI3
YTc3YS5jcmwwHwYDVR0jBBgwFoAUzs4Ag6hVUyVkoML7oxzNirrmnAIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lMTgxNmFlNi01MTg2LTQ0ZjctYWU1Yi1lYzEz
MzhiN2E3N2EuY2VyMEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAAjAvAwcAJgL87gQA
AwcAJgL87gQEAwcAJgL87gQIMBIDBwImAvzuD/QDBwAmAvzuD/YwVAYDVR0gAQH/
BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu
Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA
b+4X0XRnp7d5vU61v8fHb0xgA0tQv+/uX+ivsGkJu8MBMqsYahsZcmfEbAKFT/oo
pO6b6mNC44LRShARQEWgsWgExtq1AVagU+h7tNEeifLXm4SLcHAlrBqu3/Cowvn2
G3g2D4Hl7hrW+6hKJqyesYNIc2Y5xPXkXyeim0yE4cWxtskDYIcdlfWeC3H4qDMs
UZWzkYyuTBmo5iYFU19/6fUO2qhqZ5bD91DOHCnhyIl33ece8u8yFTGvLKiCMiLo
FOggOHZN8mAnWepU5iSYlSlkvG8QlNYDFjYWnbiEYj55FtbGldyvwGk3ZeGULXxI
nP9SfVH775xwRMTVCF10Yg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org