Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/d4f5e32d-80fb-3652-bfef-d641de711ab8.roa
File:                     d4f5e32d-80fb-3652-bfef-d641de711ab8.roa (raw, json)
Hash identifier:          X/Rv6WTdx2k4Cu4hRP5Tot8nUSNnXAAUD6uQSlM0gDY=
Subject key identifier:   6C:D4:CF:B6:9A:4B:13:80:F7:C0:E5:49:D2:E7:9C:31:92:50:8B:A1
Certificate issuer:       /CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
Certificate serial:       010D0C9F43285842650FDDF630B5C64DF6D36D80
Authority key identifier: 62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/d4f5e32d-80fb-3652-bfef-d641de711ab8.roa
Signing time:             Fri 30 Jun 2023 20:13:53 +0000
ROA not before:           Fri 30 Jun 2023 20:13:53 +0000
ROA not after:            Thu 28 Sep 2023 20:13:53 +0000
asID:                     26703
IP address blocks:        66.102.208.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:65:0f:dd:f6:30:b5:c6:4d:f6:d3:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d683a54-f8a5-4d4b-8878-8a9ee78ece08
        Validity
            Not Before: Jun 30 20:13:53 2023 GMT
            Not After : Sep 28 20:13:53 2023 GMT
        Subject: CN=2fbc6dd5-1e43-4f59-9e50-63c980429e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:33:b8:fb:5b:d1:d5:19:1d:99:14:8f:29:
                    bd:17:bd:15:4d:57:f1:e4:98:66:52:ec:84:b1:33:
                    1b:b7:98:2c:f4:95:3f:57:a5:5d:83:74:4d:9d:b0:
                    dc:d4:a0:25:f0:d3:90:7e:ce:df:38:5d:8d:80:7c:
                    7e:ef:bb:56:39:a4:3f:fe:ae:a4:58:2a:4a:38:9a:
                    4b:8f:aa:eb:1b:b6:8c:85:ed:d8:77:4f:26:1f:58:
                    29:eb:be:fe:3a:30:dc:3f:c0:f4:63:b8:0d:09:6c:
                    bd:d1:a6:d3:a9:d1:1d:28:a0:fd:0a:23:d4:f3:ed:
                    50:ba:3a:ce:05:15:af:4c:67:2f:5d:9f:7d:54:44:
                    1c:ba:31:e3:56:d1:48:bf:32:fe:8e:e7:de:ff:ae:
                    44:28:50:eb:5f:9b:0f:16:32:87:bf:5c:d4:33:fe:
                    64:ea:c2:a6:88:cd:d6:0b:e5:63:37:e4:15:57:e4:
                    70:42:d8:9f:f9:2f:dd:61:b2:1b:a6:b5:42:c4:78:
                    40:4e:52:ba:f6:57:d8:77:73:78:66:1c:5b:fd:1d:
                    73:82:65:26:82:29:3a:57:0a:30:cc:22:01:04:49:
                    a2:86:b2:36:e1:da:41:f3:62:af:98:d7:90:23:04:
                    63:32:3f:3e:b4:7d:43:f2:9a:e7:71:dd:5b:9a:23:
                    c6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D4:CF:B6:9A:4B:13:80:F7:C0:E5:49:D2:E7:9C:31:92:50:8B:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/d4f5e32d-80fb-3652-bfef-d641de711ab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.crl

            X509v3 Authority Key Identifier:
                keyid:62:14:09:65:E5:B8:AB:6A:B6:A3:9B:06:70:19:CA:74:25:93:8E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0d683a54-f8a5-4d4b-8878-8a9ee78ece08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:02:b1:3b:68:ec:b6:0f:e5:ee:5f:fd:12:ca:f6:b4:15:0b:
         45:5b:fd:44:04:e0:32:ff:c3:22:dc:95:ae:19:7f:3b:94:a3:
         a8:01:5e:ac:7c:e7:3e:73:ce:2b:22:b8:b3:66:96:37:c3:6b:
         a9:ef:5b:76:7a:00:af:d1:90:57:6f:a8:4b:68:7d:15:65:a1:
         83:2d:7b:c7:6b:99:ff:3f:ae:8b:04:4e:28:86:10:ad:49:3b:
         67:22:62:e6:9e:6c:42:d7:bf:e1:12:15:98:d4:fc:ed:8c:3a:
         00:d3:10:3d:3b:cf:9d:0f:2d:37:2f:30:57:51:69:45:7d:26:
         1d:40:c1:4c:6b:0f:51:56:18:d2:aa:7c:50:98:1b:4f:5c:6a:
         30:ee:b9:1f:0b:33:43:c7:10:c5:ed:14:87:7d:1a:49:ec:c2:
         d7:fa:c8:52:64:04:bb:58:de:e9:72:97:12:a1:c8:c9:98:9f:
         57:db:0b:ef:f5:6b:bd:d9:25:58:c8:25:f1:01:a5:74:ab:88:
         7c:be:32:b6:27:87:80:9a:a3:d9:94:d3:68:6c:f0:04:4d:ce:
         ce:59:5a:24:11:13:f9:da:9c:05:84:6d:b6:de:38:0c:81:0a:
         7d:12:f1:65:0f:14:bf:d9:ec:55:11:a8:7a:4b:fe:0b:e2:cd:
         fc:fb:72:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJlD932MLXGTfbTbYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ2ODNhNTQtZjhhNS00ZDRiLTg4NzgtOGE5ZWU3OGVj
ZTA4MB4XDTIzMDYzMDIwMTM1M1oXDTIzMDkyODIwMTM1M1owLzEtMCsGA1UEAxMk
MmZiYzZkZDUtMWU0My00ZjU5LTllNTAtNjNjOTgwNDI5ZTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDkzuPtb0dUZHZkUjym9F70VTVfx5JhmUuyE
sTMbt5gs9JU/V6Vdg3RNnbDc1KAl8NOQfs7fOF2NgHx+77tWOaQ//q6kWCpKOJpL
j6rrG7aMhe3Yd08mH1gp677+OjDcP8D0Y7gNCWy90abTqdEdKKD9CiPU8+1QujrO
BRWvTGcvXZ99VEQcujHjVtFIvzL+jufe/65EKFDrX5sPFjKHv1zUM/5k6sKmiM3W
C+VjN+QVV+RwQtif+S/dYbIbprVCxHhATlK69lfYd3N4Zhxb/R1zgmUmgik6Vwow
zCIBBEmihrI24dpB82KvmNeQIwRjMj8+tH1D8prncd1bmiPGhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGzUz7aaSxOA98DlSdLnnDGSUIuhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4
M2E1NC1mOGE1LTRkNGItODg3OC04YTllZTc4ZWNlMDgvZDRmNWUzMmQtODBmYi0z
NjUyLWJmZWYtZDY0MWRlNzExYWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGQ2ODNhNTQtZjhhNS00ZDRiLTg4
NzgtOGE5ZWU3OGVjZTA4LzBkNjgzYTU0LWY4YTUtNGQ0Yi04ODc4LThhOWVlNzhl
Y2UwOC5jcmwwHwYDVR0jBBgwFoAUYhQJZeW4q2q2o5sGcBnKdCWTjqswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wZDY4M2E1NC1mOGE1LTRkNGItODg3OC04YTll
ZTc4ZWNlMDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQmbQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADICsTto7LYP5e5f/RLK9rQVC0Vb/UQE4DL/wyLcla4ZfzuUo6gBXqx8
5z5zzisiuLNmljfDa6nvW3Z6AK/RkFdvqEtofRVloYMte8drmf8/rosETiiGEK1J
O2ciYuaebELXv+ESFZjU/O2MOgDTED07z50PLTcvMFdRaUV9Jh1AwUxrD1FWGNKq
fFCYG09cajDuuR8LM0PHEMXtFId9Gknswtf6yFJkBLtY3ulylxKhyMmYn1fbC+/1
a73ZJVjIJfEBpXSriHy+MrYnh4Cao9mU02hs8ARNzs5ZWiQRE/nanAWEbbbeOAyB
Cn0S8WUPFL/Z7FURqHpL/gvizfz7cm8=
-----END CERTIFICATE-----