Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dfbbd747-23bb-3864-9a8c-063f1b7db676.roa
File:                     dfbbd747-23bb-3864-9a8c-063f1b7db676.roa (raw, json)
Hash identifier:          QooI2uqFi7AExh06UsMBNjhRYJXGR0Yk6kYARDAPWTQ=
Subject key identifier:   81:6A:91:7D:FB:F8:79:B0:9C:9F:B5:40:EF:3E:BB:38:06:81:45:72
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584636B997998AECCCCCB4933C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dfbbd747-23bb-3864-9a8c-063f1b7db676.roa
Signing time:             Sat 15 Jun 2024 01:00:27 +0000
ROA not before:           Sat 15 Jun 2024 01:00:27 +0000
ROA not after:            Fri 13 Sep 2024 01:00:27 +0000
asID:                     398576
IP address blocks:        209.51.187.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:36:b9:97:99:8a:ec:cc:cc:b4:93:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 15 01:00:27 2024 GMT
            Not After : Sep 13 01:00:27 2024 GMT
        Subject: CN=5f9821a6-7547-4fcd-9732-ebdef6b9eae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:4a:e1:08:06:19:95:ff:49:0c:b6:2b:f4:
                    03:32:3e:47:b6:ad:09:66:59:e0:fd:34:2c:ae:3b:
                    de:14:d7:8a:50:3c:33:02:ce:b3:7f:c5:d1:2d:34:
                    a7:7c:b9:c7:9c:88:52:5e:3d:88:fa:3f:23:03:e4:
                    b1:96:92:a5:eb:04:a6:c8:31:4e:64:8f:f2:76:f8:
                    cc:79:52:53:05:50:3e:5b:25:aa:a5:0b:47:c3:fb:
                    7b:94:91:0d:ad:39:3e:aa:c6:23:b4:e0:c4:45:b8:
                    ca:62:c7:5d:6d:22:d1:93:f6:41:bf:49:21:93:e5:
                    8c:aa:fe:0e:87:18:c5:b8:4b:0c:9a:90:60:da:3b:
                    4e:9a:cd:d8:e2:c8:3c:da:1b:31:ca:c1:e0:97:25:
                    3b:5e:9a:9d:f6:83:3f:80:d5:b5:51:5c:fb:71:8d:
                    e5:2d:c3:84:07:48:91:cc:74:53:99:7f:b0:ca:93:
                    91:16:31:30:77:4c:4e:c4:f6:17:24:91:e2:ff:2b:
                    96:43:5a:13:ba:b4:7c:5f:4e:88:a5:10:d6:61:1e:
                    5e:28:95:8a:08:f4:13:f2:b4:0a:30:86:d4:37:6e:
                    86:cc:fc:05:f2:7a:f3:ed:4f:0f:f1:be:e8:aa:1a:
                    5a:d6:7f:ac:21:b9:0e:1b:23:3b:e4:43:ee:b9:46:
                    f9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6A:91:7D:FB:F8:79:B0:9C:9F:B5:40:EF:3E:BB:38:06:81:45:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dfbbd747-23bb-3864-9a8c-063f1b7db676.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ae:de:12:68:3a:58:2a:6b:1f:3a:c7:00:28:30:6a:e6:4a:
         ed:ca:7f:3c:e0:b3:d2:59:b0:3b:65:c9:7d:f6:2a:f1:46:f6:
         b7:d2:c2:97:73:4c:e8:b1:fa:a4:ac:37:41:d9:8d:7d:a6:95:
         0d:e2:da:2c:e4:52:81:86:12:ab:fc:a4:ff:69:69:a6:7f:3e:
         0b:c0:68:f3:8c:c3:9f:5b:1b:42:a6:8a:a9:a4:2d:80:f0:bf:
         35:bc:04:00:16:84:ee:56:22:eb:f8:ce:fc:fc:d0:fa:e8:67:
         78:19:9d:8b:b8:e3:04:5d:4c:bc:58:f9:22:0d:d0:e7:3b:db:
         b2:04:16:4e:f9:81:00:af:e3:52:55:8e:c0:00:ab:c0:22:0e:
         ec:cd:57:e5:7f:9c:19:3c:ea:81:bd:40:a7:f5:72:d1:ba:26:
         63:3d:8f:02:1e:51:e5:11:81:5a:71:01:2d:82:c7:47:d4:80:
         c8:be:3c:58:47:e7:fd:0a:08:94:41:46:a6:af:79:8b:25:13:
         c0:f9:d2:e3:d7:18:44:a6:a4:b8:fe:a8:1c:79:67:2e:12:1f:
         ba:d7:72:73:1a:ea:0c:4b:32:ce:80:cf:a7:f2:e9:b8:75:bc:
         ea:59:de:6a:01:55:7c:55:79:6f:92:3b:8f:39:15:32:f6:35:
         f9:a1:9e:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEY2uZeZiuzMzLSTPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDYxNTAxMDAyN1oXDTI0MDkxMzAxMDAyN1owLzEtMCsGA1UEAxMk
NWY5ODIxYTYtNzU0Ny00ZmNkLTk3MzItZWJkZWY2YjllYWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5lK4QgGGZX/SQy2K/QDMj5Htq0JZlng/TQs
rjveFNeKUDwzAs6zf8XRLTSnfLnHnIhSXj2I+j8jA+SxlpKl6wSmyDFOZI/ydvjM
eVJTBVA+WyWqpQtHw/t7lJENrTk+qsYjtODERbjKYsddbSLRk/ZBv0khk+WMqv4O
hxjFuEsMmpBg2jtOms3Y4sg82hsxysHglyU7Xpqd9oM/gNW1UVz7cY3lLcOEB0iR
zHRTmX+wypORFjEwd0xOxPYXJJHi/yuWQ1oTurR8X06IpRDWYR5eKJWKCPQT8rQK
MIbUN26GzPwF8nrz7U8P8b7oqhpa1n+sIbkOGyM75EPuuUb5HwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIFqkX37+HmwnJ+1QO8+uzgGgUVyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZGZiYmQ3NDctMjNiYi0z
ODY0LTlhOGMtMDYzZjFiN2RiNjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TO7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABmu3hJoOlgqax86xwAoMGrmSu3Kfzzgs9JZsDtlyX32KvFG9rfSwpdz
TOix+qSsN0HZjX2mlQ3i2izkUoGGEqv8pP9paaZ/PgvAaPOMw59bG0KmiqmkLYDw
vzW8BAAWhO5WIuv4zvz80ProZ3gZnYu44wRdTLxY+SIN0Oc727IEFk75gQCv41JV
jsAAq8AiDuzNV+V/nBk86oG9QKf1ctG6JmM9jwIeUeURgVpxAS2Cx0fUgMi+PFhH
5/0KCJRBRqaveYslE8D50uPXGESmpLj+qBx5Zy4SH7rXcnMa6gxLMs6Az6fy6bh1
vOpZ3moBVXxVeW+SO485FTL2Nfmhnk8=
-----END CERTIFICATE-----