Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/9d7dfcd3-ce5c-3667-aa78-496c0c7fb99c.roa
File:                     9d7dfcd3-ce5c-3667-aa78-496c0c7fb99c.roa (raw, json)
Hash identifier:          T52KYfb0Ye7Q3DtbKVLV4UdDdjqsyrvGhJxyxpIrMoY=
Subject key identifier:   F7:B4:23:5D:F3:4E:7B:A2:5A:88:B9:E1:32:17:31:46:E8:FE:FC:6A
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328576D51CC73C042CFC171322F4CCE
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/9d7dfcd3-ce5c-3667-aa78-496c0c7fb99c.roa
Signing time:             Tue 31 Mar 2020 20:01:32 +0000
ROA not before:           Fri 05 Apr 2019 04:00:00 +0000
ROA not after:            Mon 04 Jul 2022 04:00:00 +0000
asID:                     5645
IP address blocks:        184.175.0.0/18 maxlen: 18
                          184.175.56.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:32:2f:4c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Apr  5 04:00:00 2019 GMT
            Not After : Jul  4 04:00:00 2022 GMT
        Subject: CN=ab75672b-1aae-4be5-add3-533e82a9521d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:00:fa:41:41:de:98:d2:8b:ca:92:a2:d8:
                    a8:a7:dc:b2:1e:8e:d9:26:d2:b1:ff:6c:27:99:5e:
                    1f:08:77:95:df:3e:92:37:a1:c0:a9:21:d1:25:69:
                    bd:1c:a7:d7:e2:3a:d3:b8:65:98:d9:78:cb:dc:e8:
                    87:7a:63:92:cd:fa:33:05:f2:ec:14:88:f2:e8:33:
                    aa:4a:c7:f9:60:27:88:74:e5:b4:bc:09:a0:d3:e7:
                    74:fa:bb:2d:ef:dd:0c:8c:2f:03:cd:32:b1:db:e0:
                    5f:0f:18:72:fd:1e:b6:a7:92:86:5a:64:41:b3:f6:
                    e9:6f:fc:bb:37:6b:35:d5:e9:15:ed:78:b2:88:9c:
                    9a:dd:f4:09:b4:ec:b5:ab:5e:fb:34:94:25:e2:64:
                    fa:e1:b9:3b:6d:20:20:03:91:a3:51:6f:7b:3c:b1:
                    3c:a1:01:c2:e0:13:59:7e:e9:e7:e3:a5:35:ee:64:
                    49:6e:b2:1f:72:bb:c7:77:06:16:9b:68:64:0c:7b:
                    42:dc:86:15:09:2e:09:75:8a:31:fa:f4:50:0f:be:
                    83:b4:c2:5b:8c:3d:b9:e5:7d:60:04:8d:63:b6:98:
                    8c:45:79:49:02:8b:f9:8f:ec:bb:22:ac:8e:86:7f:
                    a0:54:a1:5a:3c:c2:cf:ec:42:c3:58:49:e2:af:51:
                    f3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B4:23:5D:F3:4E:7B:A2:5A:88:B9:E1:32:17:31:46:E8:FE:FC:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/9d7dfcd3-ce5c-3667-aa78-496c0c7fb99c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.175.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:5f:ec:c7:22:ef:f7:92:cf:6f:ff:7a:18:3e:24:0b:ea:65:
         53:74:c5:f0:51:90:d9:ba:6d:a1:0f:5e:94:57:16:31:1c:00:
         6f:ec:44:ca:91:d3:2b:d8:af:f2:13:9c:ee:9e:a4:2d:1f:ec:
         f7:96:1a:dd:d5:33:48:56:98:6d:92:14:0e:9a:99:a5:e6:98:
         c0:fe:c7:92:1a:84:54:af:ec:f5:fe:07:e4:71:ad:45:50:57:
         01:3f:41:b2:20:c6:bd:3e:64:0b:08:27:69:a0:cb:35:0a:91:
         28:46:8d:d7:07:62:a3:8f:4a:a6:f8:1d:e5:52:11:2e:f4:19:
         15:bb:d6:8d:2c:c6:5e:f7:7b:cb:4c:4d:1c:d7:2d:43:38:ab:
         c8:cf:4a:03:59:64:06:75:58:eb:f2:3a:4a:fd:4d:24:7d:a8:
         2e:d7:82:b3:e7:b2:99:e3:39:f7:16:e2:a2:cc:57:85:48:93:
         96:2f:3e:a2:c5:aa:e2:fa:67:08:23:05:04:f6:c6:b6:2a:58:
         3e:23:cb:19:9e:6d:84:96:03:42:cd:f2:f5:fb:46:f1:ee:31:
         4a:8f:9f:77:f2:a9:e9:99:f3:07:d6:30:c3:47:d2:ae:53:d5:
         ca:00:12:81:3a:fe:a1:c8:c2:d6:7c:e1:7d:1f:c6:98:a0:19:
         19:f0:df:2d
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcTIvTM4wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2LTc2N2Q4YTY3MTE5
MjAeFw0xOTA0MDUwNDAwMDBaFw0yMjA3MDQwNDAwMDBaMC8xLTArBgNVBAMTJGFi
NzU2NzJiLTFhYWUtNGJlNS1hZGQzLTUzM2U4MmE5NTIxZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKpPAPpBQd6Y0ovKkqLYqKfcsh6O2SbSsf9sJ5le
Hwh3ld8+kjehwKkh0SVpvRyn1+I607hlmNl4y9zoh3pjks36MwXy7BSI8ugzqkrH
+WAniHTltLwJoNPndPq7Le/dDIwvA80ysdvgXw8Ycv0etqeShlpkQbP26W/8uzdr
NdXpFe14soicmt30CbTstate+zSUJeJk+uG5O20gIAORo1FvezyxPKEBwuATWX7p
5+OlNe5kSW6yH3K7x3cGFptoZAx7QtyGFQkuCXWKMfr0UA++g7TCW4w9ueV9YASN
Y7aYjEV5SQKL+Y/suyKsjoZ/oFShWjzCz+xCw1hJ4q9R8yUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBT3tCNd8057olqIueEyFzFG6P78ajCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3
Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhhNjcxMTkyLzlkN2RmY2QzLWNlNWMtMzY2
Ny1hYTc4LTQ5NmMwYzdmYjk5Yy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQ1ZGU0N2NhLTBiNTItNDRhYi1hZjI2
LTc2N2Q4YTY3MTE5Mi80NWRlNDdjYS0wYjUyLTQ0YWItYWYyNi03NjdkOGE2NzEx
OTIuY3JsMB8GA1UdIwQYMBaAFMYImSfJ/okMCppHcbD7Iaab0YDzMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNDVkZTQ3Y2EtMGI1Mi00NGFiLWFmMjYtNzY3ZDhh
NjcxMTkyLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBrivADBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEApV/sxyLv95LPb/96GD4kC+plU3TF8FGQ2bptoQ9elFcWMRwAb+xEypHTK9iv
8hOc7p6kLR/s95Ya3dUzSFaYbZIUDpqZpeaYwP7HkhqEVK/s9f4H5HGtRVBXAT9B
siDGvT5kCwgnaaDLNQqRKEaN1wdio49Kpvgd5VIRLvQZFbvWjSzGXvd7y0xNHNct
QziryM9KA1lkBnVY6/I6Sv1NJH2oLteCs+eymeM59xbiosxXhUiTli8+osWq4vpn
CCMFBPbGtipYPiPLGZ5thJYDQs3y9ftG8e4xSo+fd/Kp6ZnzB9Yww0fSrlPVygAS
gTr+ocjC1nzhfR/GmKAZGfDfLQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org