Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/7756fd15-cfb7-3c26-99e6-081d2e7d415b.roa
File:                     7756fd15-cfb7-3c26-99e6-081d2e7d415b.roa (raw, json)
Hash identifier:          +IGZeh5Z4jMz54ZF9dPcMlzQR3xEVz9/U686q0cAVc4=
Subject key identifier:   B7:B4:49:94:2C:F4:59:E9:1E:F2:1D:67:6E:6A:48:2D:26:26:DE:02
Certificate issuer:       /CN=70ddad33-55eb-4125-9221-0129168a645b
Certificate serial:       010D0C9F43285842C8B95331284EA6E2ED8CF480
Authority key identifier: 7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/7756fd15-cfb7-3c26-99e6-081d2e7d415b.roa
Signing time:             Sat 05 Aug 2023 13:00:18 +0000
ROA not before:           Sat 05 Aug 2023 13:00:18 +0000
ROA not after:            Fri 03 Nov 2023 13:00:18 +0000
asID:                     8075
IP address blocks:        165.140.216.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c8:b9:53:31:28:4e:a6:e2:ed:8c:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70ddad33-55eb-4125-9221-0129168a645b
        Validity
            Not Before: Aug  5 13:00:18 2023 GMT
            Not After : Nov  3 13:00:18 2023 GMT
        Subject: CN=6977fa4c-65e2-46d1-b440-184bd1999653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:04:2c:9f:e0:d1:8c:35:02:6d:4f:45:1c:36:
                    ff:22:09:eb:4d:7c:e3:78:aa:0e:de:5b:12:ca:e4:
                    21:2e:3d:e5:14:f0:37:70:4a:57:ea:6b:d6:90:67:
                    12:f9:99:1b:de:42:7e:e3:4c:20:6f:d6:13:f7:56:
                    fb:e0:89:f9:91:86:8b:61:7a:52:28:dd:2f:c4:f0:
                    44:a9:83:e6:0b:f3:db:0d:e5:9b:f0:01:f7:a6:a1:
                    ea:7d:3e:f9:dd:3c:e9:bd:cd:cc:63:27:30:2c:e6:
                    f5:26:e2:93:c0:13:34:8a:31:e2:ae:12:61:ca:0c:
                    24:26:ef:7e:ff:29:a0:80:c8:58:26:ff:bd:a5:75:
                    af:4e:28:53:08:e7:56:43:85:9a:20:0c:db:65:e0:
                    5e:ae:04:84:91:59:f0:d9:88:6f:e1:2b:5b:f1:b4:
                    4f:e6:a2:f4:57:33:51:7a:cf:8a:b4:63:2d:ad:88:
                    ec:c3:3a:9b:41:0c:2e:11:d6:45:8b:fa:c0:ec:e1:
                    68:15:00:57:9b:0c:5e:1e:1c:9b:4e:f7:f5:4a:a3:
                    ba:5e:da:23:f8:64:1d:24:7d:16:4c:b7:d0:ba:15:
                    f7:99:14:12:06:86:ac:98:27:f6:d5:c2:83:20:a5:
                    9c:91:c7:32:b9:f1:6b:2e:42:12:bc:60:1b:50:ce:
                    15:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B4:49:94:2C:F4:59:E9:1E:F2:1D:67:6E:6A:48:2D:26:26:DE:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/7756fd15-cfb7-3c26-99e6-081d2e7d415b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl

            X509v3 Authority Key Identifier:
                keyid:7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:3a:1b:e9:a3:4b:4f:a8:12:ac:f5:ab:b4:e5:a8:1e:82:7d:
         66:6d:cb:56:91:34:f8:66:e1:31:1c:54:b9:32:ae:32:19:09:
         d7:f4:4e:86:f9:a1:8f:63:e0:9f:31:bf:b3:f0:93:70:e8:36:
         23:21:7e:05:08:1b:96:ce:f4:5a:76:96:66:e8:e2:8c:0c:76:
         f1:27:91:54:f9:0c:5b:95:d6:bc:22:d5:a6:3c:df:32:96:ba:
         95:70:2f:28:03:38:65:ce:ff:ee:f5:e8:71:34:a7:10:52:91:
         ed:cd:45:64:8f:f7:5a:8d:d1:41:a0:31:b8:18:e1:47:34:f3:
         28:a4:41:60:12:43:c0:4b:8c:48:e5:51:9d:c2:4f:16:d1:af:
         28:81:bd:19:be:7d:71:4d:35:92:cb:52:dd:aa:93:8e:8f:1c:
         a3:0f:11:b6:a4:8a:60:27:00:0a:54:e1:5d:8f:c4:c3:f5:18:
         6e:28:39:2f:f0:86:72:b6:d9:ff:1e:23:fe:72:23:00:ef:00:
         14:a4:7a:41:3f:ed:47:32:53:d5:0d:e6:ca:7a:d5:a2:1e:c5:
         db:4c:87:f3:05:10:d2:d3:bb:ab:3e:d8:d0:00:88:db:19:af:
         89:c0:a9:c6:fe:32:33:3a:a6:77:3a:6c:db:20:04:b3:4f:8d:
         8f:0f:44:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELIuVMxKE6m4u2M9IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzBkZGFkMzMtNTVlYi00MTI1LTkyMjEtMDEyOTE2OGE2
NDViMB4XDTIzMDgwNTEzMDAxOFoXDTIzMTEwMzEzMDAxOFowLzEtMCsGA1UEAxMk
Njk3N2ZhNGMtNjVlMi00NmQxLWI0NDAtMTg0YmQxOTk5NjUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQQsn+DRjDUCbU9FHDb/IgnrTXzjeKoO3lsS
yuQhLj3lFPA3cEpX6mvWkGcS+Zkb3kJ+40wgb9YT91b74In5kYaLYXpSKN0vxPBE
qYPmC/PbDeWb8AH3pqHqfT753Tzpvc3MYycwLOb1JuKTwBM0ijHirhJhygwkJu9+
/ymggMhYJv+9pXWvTihTCOdWQ4WaIAzbZeBergSEkVnw2Yhv4Stb8bRP5qL0VzNR
es+KtGMtrYjswzqbQQwuEdZFi/rA7OFoFQBXmwxeHhybTvf1SqO6Xtoj+GQdJH0W
TLfQuhX3mRQSBoasmCf21cKDIKWckccyufFrLkISvGAbUM4V2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLe0SZQs9FnpHvIdZ25qSC0mJt4CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGRk
YWQzMy01NWViLTQxMjUtOTIyMS0wMTI5MTY4YTY0NWIvNzc1NmZkMTUtY2ZiNy0z
YzI2LTk5ZTYtMDgxZDJlN2Q0MTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBkZGFkMzMtNTVlYi00MTI1LTky
MjEtMDEyOTE2OGE2NDViLzcwZGRhZDMzLTU1ZWItNDEyNS05MjIxLTAxMjkxNjhh
NjQ1Yi5jcmwwHwYDVR0jBBgwFoAUf0ykIqPLu6XWd5wlAfN/5dkOtL0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83MGRkYWQzMy01NWViLTQxMjUtOTIyMS0wMTI5
MTY4YTY0NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYzYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALI6G+mjS0+oEqz1q7TlqB6CfWZty1aRNPhm4TEcVLkyrjIZCdf0Tob5
oY9j4J8xv7Pwk3DoNiMhfgUIG5bO9Fp2lmbo4owMdvEnkVT5DFuV1rwi1aY83zKW
upVwLygDOGXO/+716HE0pxBSke3NRWSP91qN0UGgMbgY4Uc08yikQWASQ8BLjEjl
UZ3CTxbRryiBvRm+fXFNNZLLUt2qk46PHKMPEbakimAnAApU4V2PxMP1GG4oOS/w
hnK22f8eI/5yIwDvABSkekE/7UcyU9UN5sp61aIexdtMh/MFENLTu6s+2NAAiNsZ
r4nAqcb+MjM6pnc6bNsgBLNPjY8PREU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:40 2024 by rpki-client on console-ams.rpki-client.org