Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9/1ee5f21b-e291-3f26-88e7-3c7ba143aa2b.roa
File:                     1ee5f21b-e291-3f26-88e7-3c7ba143aa2b.roa (raw, json)
Hash identifier:          uTtl+JAT0WefpQRaWvHNKVEqu07uM/P/zJhBFDGWmLE=
Subject key identifier:   CA:A3:B7:F0:DC:0C:83:DE:1B:92:25:93:2D:90:FB:90:43:60:2E:2D
Certificate issuer:       /CN=89aee2c8-b766-4bba-b142-4f98c4c382e9
Certificate serial:       010D0C9F4328576D51CC73C042CFC171EAC322D5
Authority key identifier: 8F:19:C0:A1:E2:D4:D5:94:85:15:94:02:91:EE:E2:D3:53:EF:A9:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9/1ee5f21b-e291-3f26-88e7-3c7ba143aa2b.roa
Signing time:             Wed 06 May 2020 16:13:09 +0000
ROA not before:           Tue 05 May 2020 04:00:00 +0000
ROA not after:            Tue 09 Aug 2022 04:00:00 +0000
asID:                     30219
IP address blocks:        209.102.192.0/19 maxlen: 24
                          209.102.193.0/24 maxlen: 24
                          209.102.196.0/24 maxlen: 24
                          209.102.199.0/24 maxlen: 24
                          209.102.205.0/24 maxlen: 24
                          209.102.213.0/24 maxlen: 24
                          209.102.214.0/24 maxlen: 24
                          209.102.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:ea:c3:22:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89aee2c8-b766-4bba-b142-4f98c4c382e9
        Validity
            Not Before: May  5 04:00:00 2020 GMT
            Not After : Aug  9 04:00:00 2022 GMT
        Subject: CN=e015e7da-9077-4c59-afaf-1ea4b23bf145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:b8:2c:70:7a:67:11:5c:ea:36:48:00:41:
                    d1:ea:b1:f9:c2:0c:e3:1f:55:04:26:80:87:cf:97:
                    09:fd:0a:7a:32:be:dc:f0:ee:fa:51:42:5f:f2:92:
                    c3:21:ae:69:16:e4:b1:bf:62:cd:82:9f:e4:6b:53:
                    eb:5d:7e:b0:5d:d2:e0:c4:eb:7d:24:b6:e2:b9:8f:
                    47:d8:6f:bf:f8:cb:6e:16:5c:13:b5:a6:6e:d8:6b:
                    ca:f8:91:4f:fb:7a:67:0b:19:21:77:3f:ed:66:7a:
                    83:b3:d3:13:bf:03:a3:38:8c:d4:a2:0e:16:e2:ea:
                    49:14:c3:b1:29:6b:72:58:95:69:a3:dd:6e:a5:df:
                    97:01:c2:25:28:b9:19:12:08:7f:55:4d:f8:51:52:
                    46:74:8f:5e:b8:42:10:b2:ee:3a:e1:65:77:1e:0c:
                    51:c2:62:56:12:67:95:0a:05:c0:0b:60:dd:7c:f8:
                    4a:d1:60:7c:cc:e6:ae:cc:c3:5b:da:9c:9b:e4:9b:
                    d7:f0:06:22:e4:3a:db:7c:73:f4:5a:d9:3a:d2:68:
                    d0:73:da:ff:2c:b1:8e:f4:06:3f:46:53:ab:25:5c:
                    9e:4d:34:1d:bb:13:c2:af:af:3b:1f:89:30:1c:8f:
                    bc:d5:f3:39:ef:26:34:aa:2f:ba:1e:1e:03:36:26:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A3:B7:F0:DC:0C:83:DE:1B:92:25:93:2D:90:FB:90:43:60:2E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9/1ee5f21b-e291-3f26-88e7-3c7ba143aa2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9/89aee2c8-b766-4bba-b142-4f98c4c382e9.crl

            X509v3 Authority Key Identifier:
                keyid:8F:19:C0:A1:E2:D4:D5:94:85:15:94:02:91:EE:E2:D3:53:EF:A9:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/89aee2c8-b766-4bba-b142-4f98c4c382e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.102.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:86:fb:65:ec:e4:8c:81:b1:5c:64:e2:aa:c1:b6:7f:4e:fe:
         25:00:7a:ad:b6:fc:75:d5:8c:c5:7f:bf:cb:e4:5c:5f:5e:e2:
         e3:1b:d3:ce:1c:9f:e7:af:c1:5f:9c:ea:c0:1a:08:40:21:91:
         db:16:66:49:49:1b:28:dc:37:cd:7d:f1:b8:ca:06:e6:03:09:
         81:5c:96:28:4d:73:77:43:fd:b8:71:1b:fa:44:31:08:6a:c9:
         58:90:4a:b6:db:b6:96:23:97:20:d2:18:8c:ed:f4:35:28:46:
         7d:2d:9d:66:cb:83:4f:7b:d5:55:15:fb:98:35:63:10:bd:92:
         ab:0b:8a:1c:c8:d6:1c:15:b1:35:4c:d9:54:48:a0:02:f1:cf:
         6e:b4:19:ea:46:3b:a3:20:46:55:44:47:57:b3:55:39:75:27:
         61:16:d4:b8:db:d8:fe:99:1c:77:8d:d9:70:a0:77:72:ca:43:
         c9:cd:73:af:77:2e:58:53:dc:e2:16:a0:38:ff:2d:bf:7f:59:
         ce:ad:37:79:8b:3e:fc:f5:5a:ee:62:0c:7d:a2:5d:97:bf:42:
         8c:59:24:c4:56:b0:92:a6:2a:47:21:f2:ba:7e:5f:20:3f:64:
         04:87:0a:db:ba:7f:79:16:f0:31:2c:77:81:88:70:05:b9:ff:
         07:30:6a:51
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcerDItUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDg5YWVlMmM4LWI3NjYtNGJiYS1iMTQyLTRmOThjNGMzODJl
OTAeFw0yMDA1MDUwNDAwMDBaFw0yMjA4MDkwNDAwMDBaMC8xLTArBgNVBAMTJGUw
MTVlN2RhLTkwNzctNGM1OS1hZmFmLTFlYTRiMjNiZjE0NTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKTjuCxwemcRXOo2SABB0eqx+cIM4x9VBCaAh8+X
Cf0KejK+3PDu+lFCX/KSwyGuaRbksb9izYKf5GtT611+sF3S4MTrfSS24rmPR9hv
v/jLbhZcE7WmbthryviRT/t6ZwsZIXc/7WZ6g7PTE78DoziM1KIOFuLqSRTDsSlr
cliVaaPdbqXflwHCJSi5GRIIf1VN+FFSRnSPXrhCELLuOuFldx4MUcJiVhJnlQoF
wAtg3Xz4StFgfMzmrszDW9qcm+Sb1/AGIuQ623xz9FrZOtJo0HPa/yyxjvQGP0ZT
qyVcnk00HbsTwq+vOx+JMByPvNXzOe8mNKovuh4eAzYmFzsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTKo7fw3AyD3huSJZMtkPuQQ2AuLTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODlhZWUy
YzgtYjc2Ni00YmJhLWIxNDItNGY5OGM0YzM4MmU5LzFlZTVmMjFiLWUyOTEtM2Yy
Ni04OGU3LTNjN2JhMTQzYWEyYi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzg5YWVlMmM4LWI3NjYtNGJiYS1iMTQy
LTRmOThjNGMzODJlOS84OWFlZTJjOC1iNzY2LTRiYmEtYjE0Mi00Zjk4YzRjMzgy
ZTkuY3JsMB8GA1UdIwQYMBaAFI8ZwKHi1NWUhRWUApHu4tNT76kvMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvODlhZWUyYzgtYjc2Ni00YmJhLWIxNDItNGY5OGM0
YzM4MmU5LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdFmwDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAt4b7ZezkjIGxXGTiqsG2f07+JQB6rbb8ddWMxX+/y+RcX17i4xvTzhyf56/B
X5zqwBoIQCGR2xZmSUkbKNw3zX3xuMoG5gMJgVyWKE1zd0P9uHEb+kQxCGrJWJBK
ttu2liOXINIYjO30NShGfS2dZsuDT3vVVRX7mDVjEL2SqwuKHMjWHBWxNUzZVEig
AvHPbrQZ6kY7oyBGVURHV7NVOXUnYRbUuNvY/pkcd43ZcKB3cspDyc1zr3cuWFPc
4hagOP8tv39Zzq03eYs+/PVa7mIMfaJdl79CjFkkxFawkqYqRyHyun5fID9kBIcK
27p/eRbwMSx3gYhwBbn/BzBqUQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org