Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/53c9dcdd-20cd-3957-9941-0aa8705139c5.roa
File:                     53c9dcdd-20cd-3957-9941-0aa8705139c5.roa (raw, json)
Hash identifier:          P7phYOgfWY6vcji5oDI7wejH7WQ/NlQ17xWKSpCWxgM=
Subject key identifier:   2A:9B:CB:F0:B4:F4:79:C6:DC:93:C3:ED:43:AB:45:85:E8:D7:E2:78
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328576D51CC73C042CFC1712D370415
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/53c9dcdd-20cd-3957-9941-0aa8705139c5.roa
Signing time:             Mon 30 Mar 2020 20:51:52 +0000
ROA not before:           Wed 12 Jun 2019 04:00:00 +0000
ROA not after:            Sun 03 Jul 2022 04:00:00 +0000
asID:                     138699
IP address blocks:        199.103.24.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:2d:37:04:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Jun 12 04:00:00 2019 GMT
            Not After : Jul  3 04:00:00 2022 GMT
        Subject: CN=3adb64ad-6396-47f5-8ac7-436d801c5448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:67:b1:77:e5:ec:63:b7:f6:d5:41:21:3d:
                    07:06:70:c5:e4:17:fd:f1:99:34:e2:60:b9:92:3d:
                    74:02:61:f6:13:da:86:74:ef:ca:11:36:46:f7:51:
                    74:c3:98:b5:ba:9a:dd:fb:ce:ce:cb:49:e0:32:a3:
                    e5:f0:77:5e:8d:e9:b5:81:ed:47:6b:42:9c:37:80:
                    74:d6:7e:29:d2:56:67:c2:5b:ec:9b:6c:9f:a0:da:
                    a6:fe:fc:6c:bb:ea:fa:7a:22:5e:11:24:c5:dd:70:
                    3c:d8:cd:bc:a9:56:42:62:be:74:55:6d:4b:ac:64:
                    00:ed:3c:27:3f:4a:a9:8c:48:c4:36:30:a8:fa:e9:
                    ae:14:fa:6f:b3:9c:1a:32:de:44:7a:6f:00:39:c9:
                    2f:20:25:0a:7b:bd:18:bc:df:b6:a4:b8:24:bf:c0:
                    06:cb:ea:da:ec:d4:68:0a:44:4a:c1:1a:43:3c:13:
                    c4:86:99:30:1b:9a:3d:94:1b:7b:8d:6c:73:ed:e9:
                    f8:54:52:fa:4f:d3:71:c2:20:93:4b:06:40:d3:b5:
                    4b:41:bb:e7:95:b4:7e:a0:b5:7e:75:45:51:3c:7f:
                    ec:1d:03:0a:12:52:df:a4:6c:c5:9b:79:90:21:2c:
                    f7:89:a3:eb:61:74:51:5d:f6:13:da:42:93:72:c7:
                    45:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9B:CB:F0:B4:F4:79:C6:DC:93:C3:ED:43:AB:45:85:E8:D7:E2:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/53c9dcdd-20cd-3957-9941-0aa8705139c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.103.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b3:6c:7b:0b:51:40:23:8b:ac:dd:9d:69:83:16:e0:28:2f:
         40:64:b2:bc:90:d4:1e:f0:be:89:4d:a6:3d:8e:27:88:34:53:
         c1:68:66:e0:48:66:3f:6f:67:ad:1c:b5:82:bb:83:7b:b8:af:
         bf:e2:41:26:0c:b3:ec:3c:b4:f5:98:d0:0f:32:23:33:d7:96:
         77:84:60:8b:d0:78:aa:6b:ec:45:ef:5d:0a:3d:ad:ed:42:9d:
         85:6b:50:09:54:80:f1:aa:7b:ab:7b:34:85:25:61:67:b2:45:
         7f:eb:1e:c0:6d:32:1c:27:9e:df:96:e1:e3:b5:d9:53:d2:06:
         86:ba:c4:00:1e:28:d1:5e:9d:32:71:00:cf:1e:a7:72:fb:16:
         0c:14:77:20:2f:2d:6e:fb:eb:3a:bc:f3:b5:f5:b2:03:d9:82:
         d1:4b:2b:ee:a9:28:38:c5:e8:89:f7:da:50:7b:09:f9:77:c1:
         7d:5a:58:47:1f:3b:cf:3f:a8:0f:dc:1f:29:2a:3f:c2:f1:81:
         79:d5:1e:d5:a5:14:a7:a9:df:b4:9e:5d:bd:e4:78:d7:1f:b5:
         c3:92:b1:e8:d1:a8:7d:26:98:82:b2:34:dd:82:31:fd:05:8d:
         ac:17:5e:1d:57:a8:f1:20:42:99:e3:09:8c:3b:8a:dc:26:7d:
         ca:c4:9e:29
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcS03BBUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRlZjM0
NTAeFw0xOTA2MTIwNDAwMDBaFw0yMjA3MDMwNDAwMDBaMC8xLTArBgNVBAMTJDNh
ZGI2NGFkLTYzOTYtNDdmNS04YWM3LTQzNmQ4MDFjNTQ0ODCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKw4Z7F35exjt/bVQSE9BwZwxeQX/fGZNOJguZI9
dAJh9hPahnTvyhE2RvdRdMOYtbqa3fvOzstJ4DKj5fB3Xo3ptYHtR2tCnDeAdNZ+
KdJWZ8Jb7Jtsn6Dapv78bLvq+noiXhEkxd1wPNjNvKlWQmK+dFVtS6xkAO08Jz9K
qYxIxDYwqPrprhT6b7OcGjLeRHpvADnJLyAlCnu9GLzftqS4JL/ABsvq2uzUaApE
SsEaQzwTxIaZMBuaPZQbe41sc+3p+FRS+k/TccIgk0sGQNO1S0G755W0fqC1fnVF
UTx/7B0DChJS36RsxZt5kCEs94mj62F0UV32E9pCk3LHRUcCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQqm8vwtPR5xtyTw+1Dq0WF6NfieDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4
YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVmMzQ1LzUzYzlkY2RkLTIwY2QtMzk1
Ny05OTQxLTBhYTg3MDUxMzljNS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4
LTFjNTA0YTRlZjM0NS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYz
NDUuY3JsMB8GA1UdIwQYMBaAFNnfe6M68wQRk3GCcDJU74JBLV9TMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRh
NGVmMzQ1LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcdnGDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAMrNsewtRQCOLrN2daYMW4CgvQGSyvJDUHvC+iU2mPY4niDRTwWhm4EhmP29n
rRy1gruDe7ivv+JBJgyz7Dy09ZjQDzIjM9eWd4Rgi9B4qmvsRe9dCj2t7UKdhWtQ
CVSA8ap7q3s0hSVhZ7JFf+sewG0yHCee35bh47XZU9IGhrrEAB4o0V6dMnEAzx6n
cvsWDBR3IC8tbvvrOrzztfWyA9mC0Usr7qkoOMXoiffaUHsJ+XfBfVpYRx87zz+o
D9wfKSo/wvGBedUe1aUUp6nftJ5dveR41x+1w5Kx6NGofSaYgrI03YIx/QWNrBde
HVeo8SBCmeMJjDuK3CZ9ysSeKQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org