Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/0d68160f-f66e-3dfc-acf8-7ee96f0d3893.roa
File:                     0d68160f-f66e-3dfc-acf8-7ee96f0d3893.roa (raw, json)
Hash identifier:          +HcasHuTUfrL9IXF9/LZrYziC4v3HmfjyZBzXxa71B8=
Subject key identifier:   92:47:B7:A7:BD:1E:D7:B2:32:4B:D3:E7:08:12:49:11:40:29:E0:D2
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328576D51CC73C042CFC1702FC8CE4B
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/0d68160f-f66e-3dfc-acf8-7ee96f0d3893.roa
Signing time:             Mon 10 Feb 2020 15:47:34 +0000
ROA not before:           Mon 10 Feb 2020 05:00:00 +0000
ROA not after:            Sun 15 May 2022 04:00:00 +0000
asID:                     32710
IP address blocks:        164.153.128.0/24 maxlen: 32
                          164.153.129.0/24 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:2f:c8:ce:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Feb 10 05:00:00 2020 GMT
            Not After : May 15 04:00:00 2022 GMT
        Subject: CN=2e112a1e-fc93-4fcd-9369-d615b8043080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ce:cd:09:53:ac:94:0a:31:bb:97:ee:e8:cd:
                    ac:7c:6e:31:95:79:82:d7:e6:d0:a8:34:d1:5f:6e:
                    09:a0:f8:d7:b4:88:05:80:ca:01:ac:2b:2e:b7:59:
                    77:1b:04:f5:4d:af:e6:af:39:de:9e:c2:c3:35:0d:
                    a8:65:54:62:d9:9b:55:e7:6a:50:a5:01:da:ac:9b:
                    59:b2:cb:ae:97:b6:23:01:e4:65:5d:4e:b6:4e:78:
                    a8:24:46:7d:e2:7a:45:8d:ba:f7:51:b8:c9:95:74:
                    19:70:cd:e9:4d:2c:a9:f5:94:4f:34:40:df:5a:52:
                    79:76:ff:cc:37:af:b8:64:18:d5:f4:d9:1e:7d:22:
                    ae:de:9f:7c:5f:c9:e7:22:4c:3b:47:ab:30:33:a9:
                    fa:1b:bb:50:ec:9b:1c:ea:45:e8:4d:56:6e:fa:73:
                    ff:a6:fd:d8:63:32:42:b3:96:e1:e4:87:5e:a8:3c:
                    48:9a:70:81:f6:00:c3:81:1e:cb:bf:39:5a:8e:66:
                    b5:20:5c:17:18:33:4d:20:95:b5:77:37:04:1c:79:
                    32:cd:43:f5:d9:42:74:a8:7d:38:37:68:84:4d:09:
                    a3:af:c9:d6:2f:dd:e3:6d:27:86:2a:9b:75:8e:3c:
                    5b:7c:5c:82:b9:d3:5d:47:65:35:08:d3:39:ac:e0:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:47:B7:A7:BD:1E:D7:B2:32:4B:D3:E7:08:12:49:11:40:29:E0:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/0d68160f-f66e-3dfc-acf8-7ee96f0d3893.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c6:00:67:67:1f:80:9b:59:2d:00:1f:c4:07:21:ad:e0:73:
         8f:2e:48:fb:2c:7d:40:61:62:7c:cd:fd:36:1f:5f:bb:a0:29:
         52:f2:f6:b0:ed:0b:77:d3:56:47:6b:1a:34:01:c5:8a:b8:6e:
         6b:ee:3c:3d:a2:07:26:26:b6:66:a7:b1:f3:3d:12:7f:a7:e4:
         e6:20:be:dc:17:0c:53:0e:38:5f:27:79:d0:60:20:02:64:62:
         b8:45:fd:f9:3d:5d:e6:f6:dc:38:2c:82:a6:83:d3:ee:15:89:
         d0:6f:22:64:01:9b:91:ed:72:fa:2e:87:2f:01:40:5f:d2:31:
         79:47:df:49:62:d3:b4:3e:e7:4a:e7:f9:f7:cb:2a:8c:b6:aa:
         f2:b4:95:70:9e:07:7e:53:24:98:5a:ce:9d:d0:3d:e4:ab:2b:
         45:4f:e9:ea:80:c3:05:15:78:72:77:34:c8:12:1c:4f:cf:83:
         0f:54:b0:50:b8:f1:03:89:87:7c:d7:a6:f1:a4:50:54:81:c1:
         fb:8e:7d:28:8f:cd:11:8c:ca:51:25:10:9b:95:2a:3f:da:2e:
         47:63:8c:1a:b0:56:3d:3c:52:f9:20:ae:17:37:e1:2c:ca:f2:
         66:e3:ea:23:73:1a:fa:1c:fc:8d:4b:90:92:fc:95:5a:c0:5b:
         02:88:c1:11
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcC/IzkswCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2ZGRh
MDAeFw0yMDAyMTAwNTAwMDBaFw0yMjA1MTUwNDAwMDBaMC8xLTArBgNVBAMTJDJl
MTEyYTFlLWZjOTMtNGZjZC05MzY5LWQ2MTViODA0MzA4MDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMzOzQlTrJQKMbuX7ujNrHxuMZV5gtfm0Kg00V9u
CaD417SIBYDKAawrLrdZdxsE9U2v5q853p7CwzUNqGVUYtmbVedqUKUB2qybWbLL
rpe2IwHkZV1Otk54qCRGfeJ6RY2691G4yZV0GXDN6U0sqfWUTzRA31pSeXb/zDev
uGQY1fTZHn0irt6ffF/J5yJMO0erMDOp+hu7UOybHOpF6E1Wbvpz/6b92GMyQrOW
4eSHXqg8SJpwgfYAw4Eey785Wo5mtSBcFxgzTSCVtXc3BBx5Ms1D9dlCdKh9ODdo
hE0Jo6/J1i/d420nhiqbdY48W3xcgrnTXUdlNQjTOazgtScCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBSSR7envR7XsjJL0+cIEkkRQCng0jCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQz
NjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZkZGEwLzBkNjgxNjBmLWY2NmUtM2Rm
Yy1hY2Y4LTdlZTk2ZjBkMzg5My5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYw
LTUzYzU0ZWY2ZGRhMC82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRk
YTAuY3JsMB8GA1UdIwQYMBaAFKyLqW5PWdzrEVmlF6arn54UOPF/MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRl
ZjZkZGEwLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAaSZgDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAbcYAZ2cfgJtZLQAfxAchreBzjy5I+yx9QGFifM39Nh9fu6ApUvL2sO0Ld9NW
R2saNAHFirhua+48PaIHJia2Zqex8z0Sf6fk5iC+3BcMUw44Xyd50GAgAmRiuEX9
+T1d5vbcOCyCpoPT7hWJ0G8iZAGbke1y+i6HLwFAX9IxeUffSWLTtD7nSuf598sq
jLaq8rSVcJ4HflMkmFrOndA95KsrRU/p6oDDBRV4cnc0yBIcT8+DD1SwULjxA4mH
fNem8aRQVIHB+459KI/NEYzKUSUQm5UqP9ouR2OMGrBWPTxS+SCuFzfhLMryZuPq
I3Ma+hz8jUuQkvyVWsBbAojBEQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:40 2024 by rpki-client on console-fra.rpki-client.org