Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/787383db-f553-363f-a5d4-e02221f7b8cd.roa
File:                     787383db-f553-363f-a5d4-e02221f7b8cd.roa (raw, json)
Hash identifier:          47+upCmJ6bfvlpVU3Dp4SBtJSqqEJQFM8xo+1TTUyvk=
Subject key identifier:   F8:DF:9A:AA:78:6D:C3:4C:81:A1:53:06:18:6C:DC:B2:CB:34:38:28
Certificate issuer:       /CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
Certificate serial:       010D0C9F43285842620031C96831E4C87BC17F80
Authority key identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/787383db-f553-363f-a5d4-e02221f7b8cd.roa
Signing time:             Thu 29 Jun 2023 17:54:52 +0000
ROA not before:           Thu 29 Jun 2023 17:54:52 +0000
ROA not after:            Wed 27 Sep 2023 17:54:52 +0000
asID:                     834
IP address blocks:        192.48.234.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:62:00:31:c9:68:31:e4:c8:7b:c1:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
        Validity
            Not Before: Jun 29 17:54:52 2023 GMT
            Not After : Sep 27 17:54:52 2023 GMT
        Subject: CN=a62fb44c-72fa-49a5-8497-771bb849ec9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ca:72:35:dc:91:fd:7e:75:35:20:7e:35:fc:
                    fd:b0:c0:8b:23:c7:1b:53:78:d7:bb:23:9d:ea:ac:
                    0c:4c:1b:f2:d7:c5:7e:a4:87:03:a8:b3:e9:72:a9:
                    78:e4:cd:9e:c5:c2:7b:cd:e9:4a:71:81:ee:01:84:
                    c8:f0:d4:01:d7:18:d1:c3:51:1a:42:25:f3:b3:c2:
                    4f:d4:4b:27:bb:7b:68:cc:bf:16:c2:32:12:54:b0:
                    d9:e7:97:79:b1:6e:8e:20:7e:0e:de:aa:b4:34:2b:
                    db:5d:09:58:70:d8:0b:01:86:90:58:b9:97:5e:eb:
                    94:3b:22:c2:a7:22:d7:3e:f3:ab:ec:b4:30:96:a3:
                    68:6d:66:36:97:65:c4:26:c2:1c:77:95:09:b5:ad:
                    61:8f:cd:b8:70:98:9a:4a:ba:ac:fa:8e:83:3c:c1:
                    ac:57:ce:b6:31:96:f3:cb:96:63:14:66:7c:14:70:
                    c3:a6:4d:b0:c6:6c:d9:06:de:b3:c8:45:05:9c:13:
                    0e:dd:0c:74:f5:c6:fe:8e:12:d6:74:82:98:1e:c8:
                    84:12:7e:83:8e:13:67:49:88:ec:44:02:ea:32:4a:
                    75:6a:a8:d8:3f:4d:21:bb:3a:0e:3a:8c:ee:95:a6:
                    f7:36:12:c4:cc:11:6d:66:94:8f:04:54:7f:ff:93:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DF:9A:AA:78:6D:C3:4C:81:A1:53:06:18:6C:DC:B2:CB:34:38:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/787383db-f553-363f-a5d4-e02221f7b8cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl

            X509v3 Authority Key Identifier:
                keyid:17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:92:f2:d0:99:e5:31:27:3e:96:38:c8:42:73:ee:86:b7:9a:
         1c:24:2d:c0:17:ac:b2:76:b3:9a:7f:13:9a:19:02:89:de:d6:
         6d:cd:fd:71:65:47:c6:1b:c4:82:6c:9a:64:97:5d:55:da:6e:
         08:62:5a:64:12:95:ab:6a:15:3d:71:90:ef:5b:fd:c3:63:70:
         e0:2c:97:6f:b6:b7:6c:33:a6:98:e0:b7:cf:fe:57:b0:bf:34:
         26:c9:ec:f3:f1:56:ee:ba:1c:76:c3:e0:32:10:28:4a:74:6c:
         9a:76:80:ce:3b:03:b9:46:f9:88:10:1b:95:cc:9f:53:11:10:
         4f:fe:4d:80:1f:d4:1a:d6:44:36:a9:06:12:51:30:66:9e:6c:
         39:42:c4:7c:6d:a0:4f:43:4b:09:7b:d6:ac:77:79:4a:10:a0:
         1c:1b:37:43:a2:3b:df:f5:8b:2c:49:cf:11:b0:02:c7:41:d6:
         b3:d7:f5:e6:f3:d0:ec:43:4c:45:2c:87:9c:9d:4b:26:24:b6:
         b5:71:22:5b:d2:56:00:07:b0:23:76:48:d4:f4:64:1c:c3:3a:
         6c:cd:b5:c2:c8:24:c2:e3:b8:4e:79:ec:a7:bb:56:f9:f0:b4:
         7c:32:3b:5a:69:a2:37:14:65:48:25:26:5b:9f:67:f9:a2:a5:
         dd:1a:1e:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJiADHJaDHkyHvBf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTMwOTQ5OGUtOGJlZS00ZGIzLWI0ZWYtNWZkNmYzNTc2
ZWIzMB4XDTIzMDYyOTE3NTQ1MloXDTIzMDkyNzE3NTQ1MlowLzEtMCsGA1UEAxMk
YTYyZmI0NGMtNzJmYS00OWE1LTg0OTctNzcxYmI4NDllYzllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMpyNdyR/X51NSB+Nfz9sMCLI8cbU3jXuyOd
6qwMTBvy18V+pIcDqLPpcql45M2excJ7zelKcYHuAYTI8NQB1xjRw1EaQiXzs8JP
1Esnu3tozL8WwjISVLDZ55d5sW6OIH4O3qq0NCvbXQlYcNgLAYaQWLmXXuuUOyLC
pyLXPvOr7LQwlqNobWY2l2XEJsIcd5UJta1hj824cJiaSrqs+o6DPMGsV862MZbz
y5ZjFGZ8FHDDpk2wxmzZBt6zyEUFnBMO3Qx09cb+jhLWdIKYHsiEEn6DjhNnSYjs
RALqMkp1aqjYP00huzoOOozulab3NhLEzBFtZpSPBFR//5P5lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPjfmqp4bcNMgaFTBhhs3LLLNDgoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MzA5
NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2ZjM1NzZlYjMvNzg3MzgzZGItZjU1My0z
NjNmLWE1ZDQtZTAyMjIxZjdiOGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTMwOTQ5OGUtOGJlZS00ZGIzLWI0
ZWYtNWZkNmYzNTc2ZWIzLzkzMDk0OThlLThiZWUtNGRiMy1iNGVmLTVmZDZmMzU3
NmViMy5jcmwwHwYDVR0jBBgwFoAUF6EsL9Pj6jvnn/04Ze/5NaXYYakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzA5NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2
ZjM1NzZlYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDDqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGuS8tCZ5TEnPpY4yEJz7oa3mhwkLcAXrLJ2s5p/E5oZAone1m3N/XFl
R8YbxIJsmmSXXVXabghiWmQSlatqFT1xkO9b/cNjcOAsl2+2t2wzppjgt8/+V7C/
NCbJ7PPxVu66HHbD4DIQKEp0bJp2gM47A7lG+YgQG5XMn1MREE/+TYAf1BrWRDap
BhJRMGaebDlCxHxtoE9DSwl71qx3eUoQoBwbN0OiO9/1iyxJzxGwAsdB1rPX9ebz
0OxDTEUsh5ydSyYktrVxIlvSVgAHsCN2SNT0ZBzDOmzNtcLIJMLjuE557Ke7Vvnw
tHwyO1ppojcUZUglJlufZ/mipd0aHiQ=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:35:26 2023 by rpki-client on console.sobornost.net