Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6d98207a-0a69-323e-b3ee-5b47083957c9.roa
File:                     6d98207a-0a69-323e-b3ee-5b47083957c9.roa (raw, json)
Hash identifier:          KVLx6Nex9a/1GnIauno3MrQFLGFn+n4/Qj2NhbhZIaU=
Subject key identifier:   1B:E3:B3:C7:E2:A1:12:18:51:8D:B3:3C:7E:DF:99:AA:C5:6A:77:37
Certificate issuer:       /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Certificate serial:       010D0C9F4328576D51CC73C042CFC173BB115E21
Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6d98207a-0a69-323e-b3ee-5b47083957c9.roa
Signing time:             Tue 04 Aug 2020 20:02:24 +0000
ROA not before:           Sat 07 Mar 2020 05:00:00 +0000
ROA not after:            Mon 07 Nov 2022 05:00:00 +0000
asID:                     14618
IP address blocks:        170.10.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:bb:11:5e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
        Validity
            Not Before: Mar  7 05:00:00 2020 GMT
            Not After : Nov  7 05:00:00 2022 GMT
        Subject: CN=292ba2f1-45d6-4dea-9a32-0cf219ca1714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:55:d2:94:fb:c3:b2:71:e5:7e:8a:73:8e:82:
                    f8:40:d9:b1:e4:79:d6:96:52:13:df:99:6a:4b:b1:
                    1f:5b:48:07:df:52:b5:51:50:41:e0:c1:2d:aa:c1:
                    06:2c:c7:75:ab:04:7f:dc:6e:38:c2:10:65:8d:cd:
                    0e:79:69:2d:f4:35:59:17:f7:c8:a0:ac:bc:12:7f:
                    21:f8:48:1e:b7:96:a7:37:f9:32:ee:b7:4b:98:48:
                    ce:ef:48:c6:74:d7:4e:c2:f0:3b:81:17:d9:d7:7e:
                    f0:af:4c:6b:61:3a:65:83:7c:74:8e:fd:34:20:bb:
                    d0:df:ab:38:de:01:8c:8f:33:ad:2c:d5:59:39:f9:
                    68:7d:3b:1e:25:3d:ff:f2:c5:44:1d:f9:09:30:d3:
                    ea:6e:72:57:ea:d3:b9:8e:82:4f:d8:5f:84:19:19:
                    15:38:21:17:45:21:ef:59:4c:f8:b3:4d:05:3d:eb:
                    a3:33:49:64:f2:3c:5b:f4:80:75:82:b0:19:27:ab:
                    20:86:05:16:77:26:66:75:41:84:55:0d:34:ad:35:
                    a6:8b:2e:8b:02:27:ef:c0:10:cd:32:a9:9a:d5:5f:
                    92:c6:9f:ab:47:6d:cc:d0:b6:8d:cc:01:5e:da:5e:
                    80:e1:cd:99:9f:cf:d9:6a:17:9e:7b:a8:b3:5a:4a:
                    19:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E3:B3:C7:E2:A1:12:18:51:8D:B3:3C:7E:DF:99:AA:C5:6A:77:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/6d98207a-0a69-323e-b3ee-5b47083957c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl

            X509v3 Authority Key Identifier:
                keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:56:4e:d4:4c:1a:eb:63:64:35:fc:93:f0:7e:98:55:bb:b4:
         f1:26:24:00:db:59:73:7b:39:61:80:ab:81:1b:df:da:d6:d8:
         2b:92:35:e0:e9:e5:66:94:00:8f:40:3c:61:eb:dc:e0:88:42:
         da:f1:d6:37:53:48:fe:92:c3:59:14:de:16:98:ac:51:ed:77:
         67:6b:b0:ce:a3:a1:f9:a9:3b:a0:ac:25:f6:e4:67:68:fd:98:
         4b:f1:94:d6:f9:cc:c3:c1:47:a2:c9:e5:e1:5c:e6:80:5d:56:
         92:19:05:96:e3:dd:64:49:8c:f6:c8:8d:1a:29:73:88:1c:8f:
         87:e9:12:e0:03:46:5a:e5:08:e4:84:d6:3e:03:e0:b6:f3:84:
         ca:29:5d:48:81:e5:a1:c8:33:62:b4:fb:45:5d:d5:84:6d:a4:
         bd:b2:d4:e7:b2:0f:99:b0:92:aa:bf:9d:51:9c:ca:ca:9b:12:
         b6:bf:01:3b:4b:fc:1b:d5:1b:51:6c:20:54:2a:07:6b:46:14:
         47:37:fe:0c:77:70:79:ec:22:eb:80:73:62:77:fd:58:3c:dc:
         3e:9d:27:44:cd:ec:72:46:99:97:6d:76:68:f6:db:cc:06:a5:
         29:6e:a7:7a:1e:0e:82:1d:da:e7:f9:30:2f:65:8f:d0:a7:bf:
         33:92:ca:cc
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc7sRXiEwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0MjhjMTU4
ZTAeFw0yMDAzMDcwNTAwMDBaFw0yMjExMDcwNTAwMDBaMC8xLTArBgNVBAMTJDI5
MmJhMmYxLTQ1ZDYtNGRlYS05YTMyLTBjZjIxOWNhMTcxNDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMdV0pT7w7Jx5X6Kc46C+EDZseR51pZSE9+Zakux
H1tIB99StVFQQeDBLarBBizHdasEf9xuOMIQZY3NDnlpLfQ1WRf3yKCsvBJ/IfhI
HreWpzf5Mu63S5hIzu9IxnTXTsLwO4EX2dd+8K9Ma2E6ZYN8dI79NCC70N+rON4B
jI8zrSzVWTn5aH07HiU9//LFRB35CTDT6m5yV+rTuY6CT9hfhBkZFTghF0Uh71lM
+LNNBT3rozNJZPI8W/SAdYKwGSerIIYFFncmZnVBhFUNNK01posuiwIn78AQzTKp
mtVfksafq0dtzNC2jcwBXtpegOHNmZ/P2WoXnnuos1pKGRUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQb47PH4qESGFGNszx+35mqxWp3NzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRi
MjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMxNThlLzZkOTgyMDdhLTBhNjktMzIz
ZS1iM2VlLTViNDcwODM5NTdjOS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzc0YTlkYjIyLThkNDktNDkzOC05YzZm
LWUzZmQ0MjhjMTU4ZS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1
OGUuY3JsMB8GA1UdIwQYMBaAFJj7qQ7Fd2roaZqDhVdULjOgHCZBMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQy
OGMxNThlLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKoK3zBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAoFZO1Ewa62NkNfyT8H6YVbu08SYkANtZc3s5YYCrgRvf2tbYK5I14OnlZpQA
j0A8Yevc4IhC2vHWN1NI/pLDWRTeFpisUe13Z2uwzqOh+ak7oKwl9uRnaP2YS/GU
1vnMw8FHosnl4VzmgF1WkhkFluPdZEmM9siNGilziByPh+kS4ANGWuUI5ITWPgPg
tvOEyildSIHlocgzYrT7RV3VhG2kvbLU57IPmbCSqr+dUZzKypsStr8BO0v8G9Ub
UWwgVCoHa0YURzf+DHdweewi64BzYnf9WDzcPp0nRM3sckaZl212aPbbzAalKW6n
eh4Ogh3a5/kwL2WP0Ke/M5LKzA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:29 2023 by rpki-client on console-fra.rpki-client.org