Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a2a7c6c-c511-30bf-aa42-90ac2b907c59.roa
File:                     1a2a7c6c-c511-30bf-aa42-90ac2b907c59.roa (raw, json)
Hash identifier:          EbHqdnNAkywe1Q+Pjs99SFCRhuRoX4CW35UAGzbpauU=
Subject key identifier:   C5:84:41:7E:9C:26:FB:FA:2D:C0:A9:3E:20:5A:B9:B8:E5:D6:00:01
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B521DBB985C1B1FAA42CC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a2a7c6c-c511-30bf-aa42-90ac2b907c59.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     36522
IP address blocks:        69.158.205.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b5:21:db:b9:85:c1:b1:fa:a4:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=f88303ff-4c49-4a43-a5eb-a63b3daaa801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c2:f9:6f:db:38:3d:4a:04:a0:3a:1c:ba:c5:
                    42:d6:56:fa:85:c9:da:a1:58:1d:2b:d4:65:86:3f:
                    5f:d3:a7:6a:9e:91:32:c2:f8:1a:62:94:c5:db:d3:
                    3f:23:93:27:19:80:19:4d:8d:a5:34:fc:43:5f:14:
                    b1:da:12:fe:0a:54:43:af:f5:cd:f1:b9:2a:75:7a:
                    fc:39:dc:e9:18:ab:77:94:72:b7:e1:38:1a:23:4f:
                    97:cf:9c:40:ee:3d:28:6b:c7:44:ac:3f:62:a9:4f:
                    83:e4:ef:ef:8a:17:a6:5a:62:17:c5:f1:8b:53:a6:
                    72:4d:fb:bf:7d:f0:d6:b2:dc:33:f0:3a:1d:49:79:
                    58:be:73:21:dd:d3:aa:ef:63:74:00:1f:e3:81:57:
                    bc:79:6f:2a:c5:18:d0:dd:45:f6:f1:08:07:75:d6:
                    bf:4f:a0:a1:95:3d:3c:61:54:74:8a:67:2b:50:8d:
                    99:6a:71:80:09:50:47:a0:7a:1a:a6:f6:9f:8b:d3:
                    d6:c6:d2:59:84:d2:2f:32:6d:be:05:89:17:bd:1c:
                    f0:d9:58:52:f8:06:d4:7c:ed:c2:52:91:68:3c:b8:
                    97:ce:92:d7:64:59:17:67:93:df:56:c8:f3:37:28:
                    fc:26:1f:51:fe:0b:24:51:97:1f:88:fd:25:c9:27:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:84:41:7E:9C:26:FB:FA:2D:C0:A9:3E:20:5A:B9:B8:E5:D6:00:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1a2a7c6c-c511-30bf-aa42-90ac2b907c59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.158.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c8:90:46:43:cc:f1:d4:99:72:2b:5a:c3:dc:f1:d5:9a:a2:
         6c:65:86:15:47:b3:65:0e:c9:d6:4d:88:b2:3f:af:a4:e7:0e:
         b3:0f:b7:63:33:94:b0:3a:be:6d:19:7f:86:e2:64:7b:9f:47:
         82:ce:ff:b2:d0:ae:8a:d8:78:8a:78:a1:80:fa:88:f7:f1:fc:
         88:0c:a1:6b:68:50:85:63:c4:e1:42:25:2b:ce:7e:49:9c:75:
         ef:c0:77:15:27:5b:f0:ba:46:49:10:ac:e6:ca:fb:9b:1f:eb:
         8f:53:7e:d3:f4:99:7a:1e:27:2e:a1:df:fb:2a:2e:4c:d0:4d:
         e2:ba:a6:fa:3b:a2:19:8b:c9:36:ef:d2:06:aa:3e:9f:22:87:
         f4:c7:79:18:ec:4d:80:bd:00:eb:40:0f:b2:3d:44:23:76:1a:
         df:d8:09:92:b0:34:eb:e1:40:0d:b2:4a:c6:ac:a6:64:f0:e5:
         e1:ab:6a:c0:ae:ac:d9:2b:4a:53:44:1d:f3:13:6d:08:4d:75:
         05:87:b5:b0:b0:f2:25:bd:86:5b:2d:84:fe:9c:9b:01:a7:e1:
         28:a1:aa:9f:39:c8:13:4d:ee:10:07:09:9a:1c:eb:9c:0d:24:
         d9:36:41:f3:b1:3f:40:90:2c:fe:9f:86:af:b2:86:aa:5f:31:
         72:c3:9e:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgmtSHbuYXBsfqkLMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
Zjg4MzAzZmYtNGM0OS00YTQzLWE1ZWItYTYzYjNkYWFhODAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsL5b9s4PUoEoDocusVC1lb6hcnaoVgdK9Rl
hj9f06dqnpEywvgaYpTF29M/I5MnGYAZTY2lNPxDXxSx2hL+ClRDr/XN8bkqdXr8
OdzpGKt3lHK34TgaI0+Xz5xA7j0oa8dErD9iqU+D5O/vihemWmIXxfGLU6ZyTfu/
ffDWstwz8DodSXlYvnMh3dOq72N0AB/jgVe8eW8qxRjQ3UX28QgHdda/T6ChlT08
YVR0imcrUI2ZanGACVBHoHoapvafi9PWxtJZhNIvMm2+BYkXvRzw2VhS+AbUfO3C
UpFoPLiXzpLXZFkXZ5PfVsjzNyj8Jh9R/gskUZcfiP0lySd+BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMWEQX6cJvv6LcCpPiBaubjl1gABMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMWEyYTdjNmMtYzUxMS0z
MGJmLWFhNDItOTBhYzJiOTA3YzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARZ7NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEbIkEZDzPHUmXIrWsPc8dWaomxlhhVHs2UOydZNiLI/r6TnDrMPt2Mz
lLA6vm0Zf4biZHufR4LO/7LQrorYeIp4oYD6iPfx/IgMoWtoUIVjxOFCJSvOfkmc
de/AdxUnW/C6RkkQrObK+5sf649TftP0mXoeJy6h3/sqLkzQTeK6pvo7ohmLyTbv
0gaqPp8ih/THeRjsTYC9AOtAD7I9RCN2Gt/YCZKwNOvhQA2ySsaspmTw5eGrasCu
rNkrSlNEHfMTbQhNdQWHtbCw8iW9hlsthP6cmwGn4Sihqp85yBNN7hAHCZoc65wN
JNk2QfOxP0CQLP6fhq+yhqpfMXLDnh0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:29 2025 by rpki-client