Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e87e352-78eb-3bd5-b534-03fbb0161f47.roa
File:                     2e87e352-78eb-3bd5-b534-03fbb0161f47.roa (raw, json)
Hash identifier:          hd1U8hNPu5QmZPb4LydV6ug23aIO/Ek+PJX3YqeoHNk=
Subject key identifier:   49:BB:3A:69:1B:92:F0:1B:41:B8:EC:52:C1:9A:EA:0D:3F:33:FE:F6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285843693FB4D6F98545AA82B9DC40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e87e352-78eb-3bd5-b534-03fbb0161f47.roa
Signing time:             Mon 02 Oct 2023 01:00:23 +0000
ROA not before:           Mon 02 Oct 2023 01:00:23 +0000
ROA not after:            Sun 31 Dec 2023 02:00:23 +0000
asID:                     701
IP address blocks:        205.197.48.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:69:3f:b4:d6:f9:85:45:aa:82:b9:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  2 01:00:23 2023 GMT
            Not After : Dec 31 02:00:23 2023 GMT
        Subject: CN=424319c1-510b-4e6b-8ee8-d523875591bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ae:19:d6:75:41:96:13:fb:bb:31:af:a6:5f:
                    2d:22:db:56:07:32:ba:87:c8:c8:97:39:91:42:89:
                    27:16:b7:4c:f7:04:22:97:f5:1a:78:b6:12:1a:71:
                    a4:d8:cd:06:df:ba:bf:86:fd:bf:73:ae:b1:70:f0:
                    b4:96:27:86:d7:cb:36:45:35:25:d6:7d:4d:21:4c:
                    b1:17:1c:25:a8:ad:d7:1c:df:05:9e:cb:09:98:1e:
                    7d:83:7f:91:28:14:95:c0:54:0b:d7:35:58:dc:0c:
                    8a:f6:56:60:28:9a:9a:bb:6c:88:97:b7:67:56:f6:
                    6a:1e:b8:c9:cd:56:a0:75:05:47:0d:25:2c:da:a9:
                    28:6f:3b:b8:9c:b2:88:2d:bc:12:49:ad:fb:ef:5e:
                    2d:84:18:b0:99:ef:dc:29:4c:08:7e:ea:07:a0:3c:
                    5d:9b:a1:26:6c:07:e6:d3:7d:9c:42:c1:cd:99:85:
                    f0:85:ca:ad:d5:76:ee:81:30:7b:93:21:85:c4:d1:
                    38:53:90:bf:d9:25:39:1f:17:04:88:ba:87:2e:f9:
                    c9:4a:76:e7:f9:30:5d:95:76:dd:c3:3e:c8:e4:17:
                    aa:ae:b5:01:10:cb:3c:4d:e7:c5:19:c2:8f:94:30:
                    92:c5:4b:f1:71:56:d9:94:00:91:e1:1e:02:8f:17:
                    ab:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BB:3A:69:1B:92:F0:1B:41:B8:EC:52:C1:9A:EA:0D:3F:33:FE:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e87e352-78eb-3bd5-b534-03fbb0161f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.197.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:1c:b2:49:ff:ad:41:39:2c:57:62:a6:92:8f:1c:bb:39:c4:
         24:a8:e7:67:db:31:c7:ea:cb:88:95:17:bf:01:39:ab:6e:48:
         d6:fe:9c:3d:0a:ba:17:ba:9f:e2:30:88:2d:c1:6c:01:2e:e3:
         2d:2b:9a:41:61:a5:b9:c8:34:d4:71:1b:52:52:db:e5:55:48:
         be:b5:cd:02:23:85:34:01:5f:d3:b0:70:89:79:44:02:91:c4:
         f8:6c:cf:fa:3d:a0:7d:7b:13:e4:67:14:35:d7:17:17:dd:69:
         a3:fd:39:cb:da:cb:5e:f8:5b:c2:f4:33:0d:8d:77:24:ec:46:
         eb:11:0e:3c:0d:6c:fd:35:f2:06:54:51:89:d1:07:9a:83:11:
         d7:ca:c7:e5:2a:11:c7:44:c4:4b:81:82:3d:47:e6:d8:aa:83:
         24:98:c2:8e:08:6f:b5:8d:92:56:c6:05:0a:1a:fc:41:11:2d:
         8f:c8:7b:e8:d3:9d:bb:46:ee:c8:77:c4:e6:c8:b6:f5:03:3d:
         22:82:87:1f:ef:7c:29:d2:d4:6c:46:20:53:19:cc:63:9d:3e:
         19:14:2d:8b:c5:0c:96:e8:ab:19:7b:f9:3d:bb:21:15:5e:d9:
         a5:51:e6:3d:a0:fe:87:29:76:09:f9:14:1f:45:b9:a1:79:5d:
         94:b2:94:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWENpP7TW+YVFqoK53EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTIzMTAwMjAxMDAyM1oXDTIzMTIzMTAyMDAyM1owLzEtMCsGA1UEAxMk
NDI0MzE5YzEtNTEwYi00ZTZiLThlZTgtZDUyMzg3NTU5MWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK4Z1nVBlhP7uzGvpl8tIttWBzK6h8jIlzmR
QoknFrdM9wQil/UaeLYSGnGk2M0G37q/hv2/c66xcPC0lieG18s2RTUl1n1NIUyx
FxwlqK3XHN8FnssJmB59g3+RKBSVwFQL1zVY3AyK9lZgKJqau2yIl7dnVvZqHrjJ
zVagdQVHDSUs2qkobzu4nLKILbwSSa37714thBiwme/cKUwIfuoHoDxdm6EmbAfm
032cQsHNmYXwhcqt1XbugTB7kyGFxNE4U5C/2SU5HxcEiLqHLvnJSnbn+TBdlXbd
wz7I5BeqrrUBEMs8TefFGcKPlDCSxUvxcVbZlACR4R4CjxerEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEm7OmkbkvAbQbjsUsGa6g0/M/72MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmU4N2UzNTItNzhlYi0z
YmQ1LWI1MzQtMDNmYmIwMTYxZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzcUwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKkcskn/rUE5LFdippKPHLs5xCSo52fbMcfqy4iVF78BOatuSNb+nD0K
uhe6n+IwiC3BbAEu4y0rmkFhpbnINNRxG1JS2+VVSL61zQIjhTQBX9OwcIl5RAKR
xPhsz/o9oH17E+RnFDXXFxfdaaP9Ocvay174W8L0Mw2NdyTsRusRDjwNbP018gZU
UYnRB5qDEdfKx+UqEcdExEuBgj1H5tiqgySYwo4Ib7WNklbGBQoa/EERLY/Ie+jT
nbtG7sh3xObItvUDPSKChx/vfCnS1GxGIFMZzGOdPhkULYvFDJboqxl7+T27IRVe
2aVR5j2g/ocpdgn5FB9FuaF5XZSylLU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:41 2024 by rpki-client on console-fra.rpki-client.org