Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/8cfdde39-7b81-3920-9e5a-9834fc7a923c.roa
File:                     8cfdde39-7b81-3920-9e5a-9834fc7a923c.roa (raw, json)
Hash identifier:          M9vL4wr/GV4n3SbY2DZQcl/4DoSZ2xSCmeb8mRn4Wgo=
Subject key identifier:   75:C0:B9:E2:4D:85:68:04:9B:E0:1B:A0:4F:AA:1E:0E:C0:67:67:DC
Certificate issuer:       /CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f
Certificate serial:       010D0C9F4328576D51CC73C042CFC171C875CA30
Authority key identifier: BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/8cfdde39-7b81-3920-9e5a-9834fc7a923c.roa
Signing time:             Thu 30 Apr 2020 00:21:34 +0000
ROA not before:           Wed 29 Apr 2020 04:00:00 +0000
ROA not after:            Tue 02 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        216.152.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:c8:75:ca:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f
        Validity
            Not Before: Apr 29 04:00:00 2020 GMT
            Not After : Aug  2 04:00:00 2022 GMT
        Subject: CN=e6b2d99d-18ce-40c8-a948-d50f6071a204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5a:21:81:7a:5d:cc:19:18:c9:8a:8f:bf:f7:
                    27:3d:0b:b9:9b:ef:de:e8:4d:8b:c9:00:99:e2:9d:
                    aa:2d:a0:27:5d:af:a6:a5:8e:0d:a7:cd:b6:fd:43:
                    c9:6e:91:b9:1e:f9:59:12:c3:4e:68:52:f2:ad:41:
                    30:0a:4e:e4:2f:0a:64:45:ec:f3:2a:70:23:57:22:
                    4a:56:20:53:0c:dd:c2:3c:a3:0f:54:79:54:77:0e:
                    da:c8:66:a5:fd:ed:71:04:6b:18:06:12:bd:84:4c:
                    aa:76:1e:bd:c4:ef:6b:b5:88:98:86:c6:0d:9e:09:
                    8f:29:ec:7e:6e:a3:18:ba:bb:40:ab:9b:67:ae:ef:
                    66:93:ff:1d:8f:a1:d3:12:c3:e9:5c:48:0a:80:57:
                    05:53:5f:10:3d:10:e8:62:a6:96:af:f3:45:28:6a:
                    b0:a5:78:41:06:ab:a9:e8:a8:50:0e:99:b1:58:9a:
                    84:59:c1:73:3e:73:8b:19:53:2a:a1:b3:d3:ce:21:
                    c9:f2:a9:9c:f3:f9:a6:c4:6f:cc:d3:d7:7c:d8:cb:
                    3b:13:ec:2f:f3:95:e7:f5:ae:cb:f2:54:d0:72:5a:
                    7a:e9:1a:d4:be:c6:90:b0:ac:89:a1:ac:2d:ee:b8:
                    a9:17:b2:0c:ef:56:12:3b:34:65:c9:e1:c0:52:55:
                    15:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C0:B9:E2:4D:85:68:04:9B:E0:1B:A0:4F:AA:1E:0E:C0:67:67:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/8cfdde39-7b81-3920-9e5a-9834fc7a923c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl

            X509v3 Authority Key Identifier:
                keyid:BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.152.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:d4:d0:a8:c6:06:56:4e:22:47:2a:ad:ce:be:8a:23:c9:ce:
         d0:e3:3a:8e:48:c9:34:ec:67:5c:25:99:9c:04:28:6d:5a:18:
         b5:ce:d6:65:69:d3:61:21:88:e8:57:43:63:10:5f:b4:ee:e4:
         fe:64:50:9a:24:a4:54:61:2b:c6:a4:2a:bf:f3:51:5d:e7:f5:
         51:53:80:4e:4a:d0:9e:ca:17:2c:ad:66:a5:c9:30:a2:ba:86:
         78:03:f9:43:62:d6:5e:5a:6a:83:b9:2e:66:2e:3c:6d:71:16:
         d2:4c:42:05:fb:0f:0b:88:fc:cb:48:08:13:ac:3a:34:ba:1b:
         5f:cb:e3:d0:c4:36:bc:30:97:c9:20:fc:9c:4d:2d:08:24:e1:
         b5:83:85:b3:ee:f7:6f:b3:5a:66:67:9c:79:da:bc:e7:8f:07:
         89:1f:2e:84:2c:f5:4c:bc:45:4a:b2:b7:b9:08:97:26:03:ed:
         63:4a:9a:b7:b9:f4:eb:dc:f5:07:58:63:c9:18:f1:13:55:79:
         b0:69:dc:dc:af:99:3f:44:09:cc:4d:a7:50:11:2b:57:1e:b2:
         b3:32:0e:c6:90:86:e8:33:55:b9:47:bb:df:8c:3a:c8:4a:1e:
         a2:4c:15:c7:46:a2:74:a8:b1:eb:fa:69:5b:7a:a0:4d:59:9d:
         61:7d:f7:6c
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bcch1yjAwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGE3ZWFmZTY1LWNjMTYtNDhhNy1iMjIxLWIwMGJmYzE4MWYz
ZjAeFw0yMDA0MjkwNDAwMDBaFw0yMjA4MDIwNDAwMDBaMC8xLTArBgNVBAMTJGU2
YjJkOTlkLTE4Y2UtNDBjOC1hOTQ4LWQ1MGY2MDcxYTIwNDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMpaIYF6XcwZGMmKj7/3Jz0LuZvv3uhNi8kAmeKd
qi2gJ12vpqWODafNtv1DyW6RuR75WRLDTmhS8q1BMApO5C8KZEXs8ypwI1ciSlYg
UwzdwjyjD1R5VHcO2shmpf3tcQRrGAYSvYRMqnYevcTva7WImIbGDZ4Jjynsfm6j
GLq7QKubZ67vZpP/HY+h0xLD6VxICoBXBVNfED0Q6GKmlq/zRShqsKV4QQarqeio
UA6ZsViahFnBcz5zixlTKqGz084hyfKpnPP5psRvzNPXfNjLOxPsL/OV5/Wuy/JU
0HJaeuka1L7GkLCsiaGsLe64qReyDO9WEjs0ZcnhwFJVFWUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBR1wLniTYVoBJvgG6BPqh4OwGdn3DCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlYWZl
NjUtY2MxNi00OGE3LWIyMjEtYjAwYmZjMTgxZjNmLzhjZmRkZTM5LTdiODEtMzky
MC05ZTVhLTk4MzRmYzdhOTIzYy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2E3ZWFmZTY1LWNjMTYtNDhhNy1iMjIx
LWIwMGJmYzE4MWYzZi9hN2VhZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBiZmMxODFm
M2YuY3JsMB8GA1UdIwQYMBaAFL/uLKdDbdqoKyDM468f25JTuR93MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvYTdlYWZlNjUtY2MxNi00OGE3LWIyMjEtYjAwYmZj
MTgxZjNmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANiYTTBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAkdTQqMYGVk4iRyqtzr6KI8nO0OM6jkjJNOxnXCWZnAQobVoYtc7WZWnTYSGI
6FdDYxBftO7k/mRQmiSkVGErxqQqv/NRXef1UVOATkrQnsoXLK1mpckworqGeAP5
Q2LWXlpqg7kuZi48bXEW0kxCBfsPC4j8y0gIE6w6NLobX8vj0MQ2vDCXySD8nE0t
CCThtYOFs+73b7NaZmecedq8548HiR8uhCz1TLxFSrK3uQiXJgPtY0qat7n069z1
B1hjyRjxE1V5sGnc3K+ZP0QJzE2nUBErVx6yszIOxpCG6DNVuUe734w6yEoeokwV
x0aidKix6/ppW3qgTVmdYX33bA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org