Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1b0ebd98-2dcf-3f31-a9bb-65f8107a35fe.roa
File:                     1b0ebd98-2dcf-3f31-a9bb-65f8107a35fe.roa (raw, json)
Hash identifier:          SLlaiVT0DiDB+MsPrrWdufhMYT4L8kZwaahbQdilzoM=
Subject key identifier:   26:37:48:52:99:F5:97:FA:4E:9E:48:FA:06:5F:48:80:23:78:55:50
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858439AE5F2A8ACEADB528884FDC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1b0ebd98-2dcf-3f31-a9bb-65f8107a35fe.roa
Signing time:             Wed 18 Oct 2023 12:00:00 +0000
ROA not before:           Wed 18 Oct 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     35911
IP address blocks:        209.226.225.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9a:e5:f2:a8:ac:ea:db:52:88:84:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Oct 18 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=a4aea9b6-dd6a-4933-a1b3-a4b036454e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ef:1a:64:ba:8e:eb:b1:e9:60:ee:b3:2f:c0:
                    03:17:a9:da:e5:a0:c8:18:f1:44:3d:66:b6:94:29:
                    cf:4f:b6:50:4a:c8:a5:c7:2a:e2:2c:c1:ae:0a:32:
                    7a:6f:9e:08:3a:f2:5b:57:3d:0d:43:86:0b:61:f2:
                    c5:a8:f9:5e:cb:82:cf:db:aa:d8:79:df:3b:52:b8:
                    65:4c:a3:48:85:25:d0:75:dc:44:33:c2:b8:44:8f:
                    7b:2b:af:bc:76:2d:d5:a7:65:d1:28:67:b7:4b:82:
                    ac:11:8c:b2:d8:e1:5f:44:b5:2d:ec:2b:86:a9:87:
                    c5:ab:f2:0a:ce:21:86:11:d1:b0:ca:7f:57:98:03:
                    24:34:68:e5:6b:26:e0:30:3b:02:a6:b5:6a:23:ee:
                    14:fe:bf:38:68:9f:d5:b0:24:49:a6:ee:9a:e7:dd:
                    bf:b4:74:1b:ca:81:bf:7e:00:4c:58:b2:10:99:1b:
                    e3:bf:fa:a8:d3:10:5e:97:39:b3:95:99:b2:1c:28:
                    fc:f4:60:12:56:d0:70:c7:9b:00:1b:69:a0:cf:6d:
                    12:95:ce:ef:0c:5f:b9:3d:51:49:e0:d5:c1:72:90:
                    c1:51:3b:c9:57:ab:f8:52:4f:f1:63:4d:44:2a:a4:
                    75:87:ef:69:82:95:3e:eb:cf:ff:1b:99:49:b3:64:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:37:48:52:99:F5:97:FA:4E:9E:48:FA:06:5F:48:80:23:78:55:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1b0ebd98-2dcf-3f31-a9bb-65f8107a35fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:18:fe:5f:59:0f:e9:c2:49:02:0b:b2:15:41:2e:30:33:48:
         61:53:b0:0e:83:b7:e1:1a:76:24:17:41:b7:dd:47:41:26:9e:
         22:00:f5:89:98:03:74:9f:b9:bb:0c:a2:6c:a0:72:59:0e:8a:
         8a:0a:86:51:51:26:a5:84:d8:c8:1f:5c:63:4c:fc:e7:a4:74:
         f9:ce:91:ff:f2:37:dd:9b:ca:c7:9c:6e:1b:55:ea:8c:43:33:
         59:a7:69:39:f6:a4:86:48:60:4c:6c:95:8e:c1:af:88:76:73:
         2f:b4:f3:5b:9b:42:dc:3e:d1:04:b3:b6:af:86:ac:e7:2e:5d:
         02:69:93:2e:db:f2:c4:e6:d7:2a:0c:19:48:65:ec:74:2a:1b:
         13:39:e1:9a:80:cf:25:a7:31:c7:74:fc:9c:db:9f:79:ca:43:
         ee:a6:73:08:52:03:da:98:fd:34:06:7c:88:12:24:99:ce:04:
         5d:56:6c:f3:d0:a8:60:b6:12:42:df:c0:89:af:ff:3d:ee:4b:
         b1:ef:65:ba:84:9d:59:f7:8d:c0:8e:cb:fa:b9:e8:67:43:ea:
         5c:84:e0:72:8c:c7:45:88:70:32:20:17:96:b8:d7:0b:87:2c:
         c3:42:98:a6:3e:ee:91:f5:82:d8:c9:55:72:d7:35:85:9e:25:
         aa:14:2d:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOa5fKorOrbUoiE/cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTIzMTAxODEyMDAwMFoXDTI0MDExODA1MDAwMFowLzEtMCsGA1UEAxMk
YTRhZWE5YjYtZGQ2YS00OTMzLWExYjMtYTRiMDM2NDU0ZTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO8aZLqO67HpYO6zL8ADF6na5aDIGPFEPWa2
lCnPT7ZQSsilxyriLMGuCjJ6b54IOvJbVz0NQ4YLYfLFqPley4LP26rYed87Urhl
TKNIhSXQddxEM8K4RI97K6+8di3Vp2XRKGe3S4KsEYyy2OFfRLUt7CuGqYfFq/IK
ziGGEdGwyn9XmAMkNGjlaybgMDsCprVqI+4U/r84aJ/VsCRJpu6a592/tHQbyoG/
fgBMWLIQmRvjv/qo0xBelzmzlZmyHCj89GASVtBwx5sAG2mgz20Slc7vDF+5PVFJ
4NXBcpDBUTvJV6v4Uk/xY01EKqR1h+9pgpU+68//G5lJs2QC9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCY3SFKZ9Zf6Tp5I+gZfSIAjeFVQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMWIwZWJkOTgtMmRjZi0z
ZjMxLWE5YmItNjVmODEwN2EzNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eLhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEkY/l9ZD+nCSQILshVBLjAzSGFTsA6Dt+EadiQXQbfdR0EmniIA9YmY
A3SfubsMomygclkOiooKhlFRJqWE2MgfXGNM/OekdPnOkf/yN92bysecbhtV6oxD
M1mnaTn2pIZIYExslY7Br4h2cy+081ubQtw+0QSztq+GrOcuXQJpky7b8sTm1yoM
GUhl7HQqGxM54ZqAzyWnMcd0/Jzbn3nKQ+6mcwhSA9qY/TQGfIgSJJnOBF1WbPPQ
qGC2EkLfwImv/z3uS7HvZbqEnVn3jcCOy/q56GdD6lyE4HKMx0WIcDIgF5a41wuH
LMNCmKY+7pH1gtjJVXLXNYWeJaoULVE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:51:17 2025 by rpki-client