Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9540c615-134e-3582-bb09-14943225658e.roa
File:                     9540c615-134e-3582-bb09-14943225658e.roa (raw, json)
Hash identifier:          FOScCpyqgMi63zhsatVfig/G6CS0j8bOTadS8ICpo6k=
Subject key identifier:   61:28:CB:FA:3A:B7:42:4F:AC:EF:3A:05:9C:51:1B:82:14:8F:19:EF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648EA54290A3532443DF7800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9540c615-134e-3582-bb09-14943225658e.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     54288
IP address blocks:        184.105.158.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:a5:42:90:a3:53:24:43:df:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=def68337-9e2d-405f-b4b6-75854a31061f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bc:50:af:cc:46:d8:53:1d:7e:ed:a1:45:a5:
                    ac:93:dc:b9:a3:79:2f:e0:b2:49:c5:dc:a5:c8:53:
                    43:ec:67:92:66:5d:25:46:f1:7e:7e:6b:2c:e6:f0:
                    0d:d0:f0:5b:5e:bf:48:88:c8:7f:7b:ff:8d:6d:a9:
                    2a:d7:ae:01:cf:d2:c5:52:5c:1e:21:5d:38:01:61:
                    4a:3f:e5:86:d6:79:31:81:0c:79:6c:b1:bd:27:d1:
                    27:ff:2b:e4:ee:c4:c9:c9:13:c2:e6:aa:bd:e6:4b:
                    65:ba:d2:7d:10:69:03:67:24:a3:bc:88:a1:ea:ea:
                    20:26:4f:84:a8:68:ad:79:ea:53:0a:f9:e9:2a:66:
                    58:15:db:f7:90:32:21:47:f1:f2:5f:b6:03:9e:e5:
                    c9:c2:a8:2a:dd:bf:81:f0:89:00:9c:af:52:ba:d5:
                    f4:99:80:96:6e:9d:d6:c2:23:8a:bb:c7:15:6e:12:
                    5e:23:5b:bb:7e:d2:da:96:f5:b1:ad:84:2e:3f:64:
                    5c:9f:21:29:32:62:67:08:a4:b1:0e:e7:03:03:0d:
                    4e:5b:be:2e:ca:c4:08:51:80:e2:0d:b4:57:c3:12:
                    c7:ab:d6:a9:13:ea:f9:7b:a2:17:82:35:5a:b6:c2:
                    8a:08:73:37:25:4d:49:89:eb:7b:ec:97:14:f8:85:
                    24:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:28:CB:FA:3A:B7:42:4F:AC:EF:3A:05:9C:51:1B:82:14:8F:19:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9540c615-134e-3582-bb09-14943225658e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:03:d5:a9:ed:19:e0:9c:61:42:65:ad:17:27:44:95:4c:84:
         eb:e8:28:c6:37:b8:f0:94:7b:d1:1f:6e:c5:b7:ab:a4:08:d2:
         b6:35:cd:e4:e1:00:8a:26:04:2d:cb:89:bd:8b:bc:31:e0:cd:
         13:71:ad:46:1a:a4:66:02:6d:e0:3e:40:53:84:1a:bf:c6:d0:
         62:5a:d8:f9:d7:88:7f:35:1b:ed:91:8d:21:75:c4:7a:c9:91:
         67:b0:0e:48:0a:c6:51:66:6f:d0:8a:e0:0b:02:11:9a:d6:07:
         af:6f:37:8e:e3:61:1b:c0:8f:b9:a2:ea:35:5e:9f:99:b9:b4:
         78:54:13:d0:00:32:48:52:68:9d:a7:65:b9:fc:f1:7a:10:9b:
         3a:18:d7:c4:5e:05:47:be:f0:27:69:1b:c6:cf:6f:1d:07:1b:
         96:4a:a6:22:54:ec:0e:90:6d:30:ba:54:94:e2:0a:68:cd:b7:
         52:cd:72:22:b6:63:23:cc:af:b7:fb:e6:d7:3b:d3:0b:d2:d3:
         79:63:31:ac:c5:88:a2:0d:8e:12:29:cd:9d:ce:ad:ce:d0:e1:
         a8:fa:d4:75:2c:18:0f:a0:db:af:0a:b2:ff:95:23:48:24:d9:
         28:83:44:8f:ae:1e:df:c8:bc:51:65:e1:9f:af:84:5a:a8:9e:
         2d:6c:8c:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9kjqVCkKNTJEPfeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIyMDkyNzEyMDAwMFoXDTIzMDMyODA0MDAwMFowLzEtMCsGA1UEAxMk
ZGVmNjgzMzctOWUyZC00MDVmLWI0YjYtNzU4NTRhMzEwNjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bxQr8xG2FMdfu2hRaWsk9y5o3kv4LJJxdyl
yFND7GeSZl0lRvF+fmss5vAN0PBbXr9IiMh/e/+Nbakq164Bz9LFUlweIV04AWFK
P+WG1nkxgQx5bLG9J9En/yvk7sTJyRPC5qq95ktlutJ9EGkDZySjvIih6uogJk+E
qGiteepTCvnpKmZYFdv3kDIhR/HyX7YDnuXJwqgq3b+B8IkAnK9SutX0mYCWbp3W
wiOKu8cVbhJeI1u7ftLalvWxrYQuP2RcnyEpMmJnCKSxDucDAw1OW74uysQIUYDi
DbRXwxLHq9apE+r5e6IXgjVatsKKCHM3JU1Jiet77JcU+IUkJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEoy/o6t0JPrO86BZxRG4IUjxnvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTU0MGM2MTUtMTM0ZS0z
NTgyLWJiMDktMTQ5NDMyMjU2NThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuGmeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJcD1antGeCcYUJlrRcnRJVMhOvoKMY3uPCUe9EfbsW3q6QI0rY1zeTh
AIomBC3Lib2LvDHgzRNxrUYapGYCbeA+QFOEGr/G0GJa2PnXiH81G+2RjSF1xHrJ
kWewDkgKxlFmb9CK4AsCEZrWB69vN47jYRvAj7mi6jVen5m5tHhUE9AAMkhSaJ2n
Zbn88XoQmzoY18ReBUe+8CdpG8bPbx0HG5ZKpiJU7A6QbTC6VJTiCmjNt1LNciK2
YyPMr7f75tc70wvS03ljMazFiKINjhIpzZ3Orc7Q4aj61HUsGA+g268Ksv+VI0gk
2SiDRI+uHt/IvFFl4Z+vhFqoni1sjMg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:40:44 2023 by rpki-client on console-fra.rpki-client.org