Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/d9e97eec-615f-3a43-9a90-ea552b2619f2.roa
File:                     d9e97eec-615f-3a43-9a90-ea552b2619f2.roa (raw, json)
Hash identifier:          uFpelcNoeIQIijljffRo/Mfhkzm/ZwgnM0AECyFVH9Y=
Subject key identifier:   E0:CA:0A:F9:87:92:D2:0D:F7:1B:FE:EF:BC:77:2A:C0:33:4C:AA:94
Certificate issuer:       /CN=df28494f-1d3f-4a45-8a74-bde41c2502a2
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FF3D61EC9
Authority key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/d9e97eec-615f-3a43-9a90-ea552b2619f2.roa
Signing time:             Thu 30 Jan 2020 00:24:53 +0000
ROA not before:           Tue 21 Jan 2020 05:00:00 +0000
ROA not after:            Tue 03 May 2022 04:00:00 +0000
asID:                     64236
IP address blocks:        2604:abc0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:f3:d6:1e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2
        Validity
            Not Before: Jan 21 05:00:00 2020 GMT
            Not After : May  3 04:00:00 2022 GMT
        Subject: CN=f3b7acda-f17d-4924-9598-d1ae7a088321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:18:be:5c:49:40:04:24:2b:ca:94:21:16:fc:
                    02:83:23:1d:66:1d:ab:de:e6:9c:8f:9b:fa:10:e3:
                    f9:92:8c:32:82:d0:e0:68:f9:e4:60:1e:7a:cf:b0:
                    ab:20:33:17:66:20:08:8e:4d:bf:d0:d7:0b:ee:28:
                    c6:1d:62:63:13:ad:60:91:24:3e:bf:44:92:a1:8d:
                    da:ad:b9:d5:f8:b2:99:bc:8c:c2:6f:8d:1e:68:6e:
                    e5:d0:b0:0a:98:75:f5:ec:91:67:03:f5:0a:1b:6f:
                    d0:fb:88:d1:04:dc:f1:72:2d:a9:58:99:41:f3:30:
                    01:f9:39:99:46:94:e2:d2:a5:b4:d1:d0:0b:6b:a3:
                    ec:f3:de:23:59:64:b6:05:eb:1e:53:da:81:f4:bb:
                    ec:9c:4a:75:92:d3:81:4c:1f:5f:cc:28:3d:79:62:
                    3a:00:e6:25:eb:ec:77:51:a7:28:72:46:dd:90:b7:
                    f8:c0:3f:ab:fd:6e:2c:6a:9d:63:a8:7a:db:5e:9f:
                    1c:36:40:2e:b3:76:40:6c:66:31:66:0e:df:b0:5a:
                    bb:00:8b:b1:de:26:2f:6c:98:f5:41:b8:2b:c4:7f:
                    be:e0:43:39:7d:f0:16:36:29:56:f6:9a:2d:52:b3:
                    df:f9:f7:fd:54:e1:a7:98:e9:cd:6b:17:48:fa:1e:
                    e8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CA:0A:F9:87:92:D2:0D:F7:1B:FE:EF:BC:77:2A:C0:33:4C:AA:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/d9e97eec-615f-3a43-9a90-ea552b2619f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl

            X509v3 Authority Key Identifier:
                keyid:A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:abc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:24:5c:57:58:4f:24:2e:16:5c:30:d6:43:a2:f2:df:b7:82:
         2d:8e:06:c5:3c:ba:19:1c:f9:34:e4:10:2c:31:59:8c:c7:45:
         8b:f5:14:5a:f4:6f:14:a2:46:45:fa:94:2f:55:c1:6b:db:38:
         dc:57:31:d0:d3:1f:b9:0a:c9:57:e7:e6:e0:90:8c:67:bf:a9:
         ff:3c:37:b0:0c:6f:ee:88:a8:ac:a1:fa:e5:cb:37:9d:82:82:
         ea:ce:a0:db:1f:b0:2c:c5:e9:40:8d:34:76:a2:11:b4:d8:04:
         ac:ab:cf:e9:60:ca:ce:32:a0:76:d3:c5:83:ff:b4:21:09:b0:
         17:83:28:e0:03:2f:08:38:24:83:15:d4:27:1a:10:1b:57:4e:
         72:04:48:2d:8e:7e:21:f3:5c:a9:2a:50:07:f5:35:a3:7b:e3:
         94:39:c7:e0:95:9f:53:a4:5a:d5:d3:58:b0:53:26:e8:fd:62:
         e1:75:4c:58:e6:3b:b5:32:f1:c3:fb:df:f3:8a:60:b2:a0:8a:
         46:45:ac:59:3e:35:1a:a6:f4:a5:50:0d:64:7f:03:ef:4d:3a:
         02:3a:df:4a:d1:ad:de:4b:2c:d3:bb:09:5c:cb:5d:7f:9e:50:
         cd:dc:47:ef:04:04:43:a5:91:9e:04:dc:f1:da:bc:c3:1e:b3:
         cc:52:cf:8e
-----BEGIN CERTIFICATE-----
MIIGQDCCBSqgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bb/PWHskwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGRmMjg0OTRmLTFkM2YtNGE0NS04YTc0LWJkZTQxYzI1MDJh
MjAeFw0yMDAxMjEwNTAwMDBaFw0yMjA1MDMwNDAwMDBaMC8xLTArBgNVBAMTJGYz
YjdhY2RhLWYxN2QtNDkyNC05NTk4LWQxYWU3YTA4ODMyMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMgYvlxJQAQkK8qUIRb8AoMjHWYdq97mnI+b+hDj
+ZKMMoLQ4Gj55GAees+wqyAzF2YgCI5Nv9DXC+4oxh1iYxOtYJEkPr9EkqGN2q25
1fiymbyMwm+NHmhu5dCwCph19eyRZwP1Chtv0PuI0QTc8XItqViZQfMwAfk5mUaU
4tKltNHQC2uj7PPeI1lktgXrHlPagfS77JxKdZLTgUwfX8woPXliOgDmJevsd1Gn
KHJG3ZC3+MA/q/1uLGqdY6h6216fHDZALrN2QGxmMWYO37BauwCLsd4mL2yY9UG4
K8R/vuBDOX3wFjYpVvaaLVKz3/n3/VThp5jpzWsXSPoe6EECAwEAAaOCA1YwggNS
MB0GA1UdDgQWBBTgygr5h5LSDfcb/u+8dyrAM0yqlDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGYyODQ5
NGYtMWQzZi00YTQ1LThhNzQtYmRlNDFjMjUwMmEyL2Q5ZTk3ZWVjLTYxNWYtM2E0
My05YTkwLWVhNTUyYjI2MTlmMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2RmMjg0OTRmLTFkM2YtNGE0NS04YTc0
LWJkZTQxYzI1MDJhMi9kZjI4NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0MWMyNTAy
YTIuY3JsMB8GA1UdIwQYMBaAFKigZY2wrzc633a7UL2gzCSxFUuaMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvZGYyODQ5NGYtMWQzZi00YTQ1LThhNzQtYmRlNDFj
MjUwMmEyLmNlcjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACYEq8AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDALBgkqhkiG9w0BAQsD
ggEBAKokXFdYTyQuFlww1kOi8t+3gi2OBsU8uhkc+TTkECwxWYzHRYv1FFr0bxSi
RkX6lC9VwWvbONxXMdDTH7kKyVfn5uCQjGe/qf88N7AMb+6IqKyh+uXLN52CgurO
oNsfsCzF6UCNNHaiEbTYBKyrz+lgys4yoHbTxYP/tCEJsBeDKOADLwg4JIMV1Cca
EBtXTnIESC2OfiHzXKkqUAf1NaN745Q5x+CVn1OkWtXTWLBTJuj9YuF1TFjmO7Uy
8cP73/OKYLKgikZFrFk+NRqm9KVQDWR/A+9NOgI630rRrd5LLNO7CVzLXX+eUM3c
R+8EBEOlkZ4E3PHavMMes8xSz44=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org