Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/317072d3-65fa-3ea1-84c7-f1c91fa9e3cd.roa
File:                     317072d3-65fa-3ea1-84c7-f1c91fa9e3cd.roa (raw, json)
Hash identifier:          CoIQ3aGUqfeCahxNm0KOd6RtUo7aWeraOrIxBI7z6g8=
Subject key identifier:   31:AC:F1:B7:73:D2:50:13:FD:21:CB:5C:41:68:D7:72:B3:17:29:A0
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F43285843DD38D8AC7718BE544DE7DF20
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/317072d3-65fa-3ea1-84c7-f1c91fa9e3cd.roa
Signing time:             Sun 12 Nov 2023 14:00:20 +0000
ROA not before:           Sun 12 Nov 2023 14:00:20 +0000
ROA not after:            Sat 10 Feb 2024 14:00:20 +0000
asID:                     6498
IP address blocks:        75.78.168.0/22 maxlen: 24
                          75.78.184.0/22 maxlen: 24
                          75.78.164.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:dd:38:d8:ac:77:18:be:54:4d:e7:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Nov 12 14:00:20 2023 GMT
            Not After : Feb 10 14:00:20 2024 GMT
        Subject: CN=62821333-d33f-431b-ac8a-c643ffd77c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:24:d1:56:62:dd:42:08:3e:c2:ae:8b:fc:39:
                    ab:8b:45:78:1a:5c:26:3c:56:78:cb:26:41:72:fe:
                    77:4c:16:d5:5d:63:1f:90:cd:87:58:f8:33:54:ce:
                    a4:3f:6c:57:03:8b:ef:6f:77:b7:27:50:97:43:9a:
                    d5:d0:e8:c0:f8:70:a0:88:f1:25:0d:4e:32:09:99:
                    cf:7a:6e:52:95:94:78:8a:8f:fb:9b:fb:d3:e4:b3:
                    a9:ef:fd:d2:d7:ec:87:0a:bb:2a:eb:2c:d9:fe:2f:
                    47:a0:00:f9:af:e0:8c:24:7f:bc:79:ca:a8:2c:09:
                    b3:1a:dd:9c:ca:00:bf:38:d6:1e:ef:eb:b2:f7:06:
                    04:2a:0a:92:15:23:19:b8:09:08:a3:f8:44:2c:3d:
                    46:a2:3f:3b:99:5c:6e:25:ce:d1:b2:dc:8f:35:93:
                    2e:b7:67:f9:0d:5e:bb:c8:ac:85:94:46:62:77:2e:
                    f5:62:5d:90:a7:1f:90:64:d1:98:e0:38:fa:a8:61:
                    9c:a0:fb:85:7b:05:65:71:6d:9e:c8:a4:fc:c1:66:
                    82:ae:4d:1e:8a:6a:ef:b4:b8:d2:d1:f1:a9:8d:22:
                    c7:80:a2:3c:45:57:01:e0:4e:ef:71:18:0a:5f:eb:
                    06:a9:8a:66:a6:76:d5:22:ec:67:9d:8e:13:f5:a9:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AC:F1:B7:73:D2:50:13:FD:21:CB:5C:41:68:D7:72:B3:17:29:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/317072d3-65fa-3ea1-84c7-f1c91fa9e3cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.164.0-75.78.171.255
                  75.78.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d6:09:f4:19:83:59:29:48:5e:27:da:fc:57:30:23:dd:e3:
         f2:71:8c:db:ba:2f:67:1e:b1:8d:32:fc:ff:1c:ef:23:2f:bc:
         99:3a:8d:a4:cb:f2:e8:6d:bd:ab:98:37:4b:87:d8:d9:46:81:
         e1:24:88:19:00:e8:31:15:9d:22:eb:25:db:66:c6:07:16:d1:
         40:ee:79:79:be:e1:c1:0a:49:fe:63:57:ee:7b:16:0b:b3:18:
         25:60:3e:5b:59:5c:d1:1e:dc:ab:bf:6b:d2:ba:0f:5f:52:4b:
         9b:b2:58:35:8e:ea:a3:e8:09:3b:c6:21:d7:f5:c3:57:03:3e:
         71:c1:7f:10:66:73:f7:7e:bc:ee:36:0a:78:64:8e:2c:8f:33:
         80:57:36:77:94:51:ac:66:e1:cc:ca:b1:85:e7:cf:60:1e:3d:
         de:a8:ef:31:2c:c0:1a:3c:33:71:3b:72:54:8f:03:b0:23:ff:
         f9:14:f8:ee:8a:66:1a:4f:fe:1b:43:2e:ab:ee:22:2e:84:28:
         7a:f7:f2:91:01:25:d3:3d:22:cc:31:57:5c:8b:80:49:38:9e:
         25:d0:83:82:4c:73:d6:08:62:6d:75:5b:a3:3e:3e:87:3b:aa:
         ea:61:cd:9f:70:8f:76:64:6d:06:44:17:f6:2c:c5:8f:12:b6:
         fd:47:4e:58
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEPdONisdxi+VE3n3yAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk
NjkwMB4XDTIzMTExMjE0MDAyMFoXDTI0MDIxMDE0MDAyMFowLzEtMCsGA1UEAxMk
NjI4MjEzMzMtZDMzZi00MzFiLWFjOGEtYzY0M2ZmZDc3YzlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iTRVmLdQgg+wq6L/Dmri0V4GlwmPFZ4yyZB
cv53TBbVXWMfkM2HWPgzVM6kP2xXA4vvb3e3J1CXQ5rV0OjA+HCgiPElDU4yCZnP
em5SlZR4io/7m/vT5LOp7/3S1+yHCrsq6yzZ/i9HoAD5r+CMJH+8ecqoLAmzGt2c
ygC/ONYe7+uy9wYEKgqSFSMZuAkIo/hELD1Goj87mVxuJc7RstyPNZMut2f5DV67
yKyFlEZidy71Yl2Qpx+QZNGY4Dj6qGGcoPuFewVlcW2eyKT8wWaCrk0eimrvtLjS
0fGpjSLHgKI8RVcB4E7vcRgKX+sGqYpmpnbVIuxnnY4T9amhjQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFDGs8bdz0lAT/SHLXEFo13KzFymgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1
MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvMzE3MDcyZDMtNjVmYS0z
ZWExLTg0YzctZjFjOTFmYTllM2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky
ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx
ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy
NmVlMWQ2OTAuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAJLTqQD
BAJLTqgDBAJLTrgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEALtYJ9BmDWSlIXifa/FcwI93j8nGM27ovZx6x
jTL8/xzvIy+8mTqNpMvy6G29q5g3S4fY2UaB4SSIGQDoMRWdIusl22bGBxbRQO55
eb7hwQpJ/mNX7nsWC7MYJWA+W1lc0R7cq79r0roPX1JLm7JYNY7qo+gJO8Yh1/XD
VwM+ccF/EGZz93687jYKeGSOLI8zgFc2d5RRrGbhzMqxhefPYB493qjvMSzAGjwz
cTtyVI8DsCP/+RT47opmGk/+G0Muq+4iLoQoevfykQEl0z0izDFXXIuASTieJdCD
gkxz1ghibXVboz4+hzuq6mHNn3CPdmRtBkQX9izFjxK2/UdOWA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org