Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b4a7fff0-a735-35db-b580-f54de2e5aa83.roa
File:                     b4a7fff0-a735-35db-b580-f54de2e5aa83.roa (raw, json)
Hash identifier:          EkuFArSOtKeW4XJstsfNDifiRTufKE6j/XmfKv8VjRA=
Subject key identifier:   D7:EB:E4:14:99:8F:4E:83:4F:C6:71:3B:7E:86:5D:4B:82:6E:05:1A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858449314FC0D7C0B9B0F84D67A00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b4a7fff0-a735-35db-b580-f54de2e5aa83.roa
Signing time:             Mon 15 Jan 2024 12:00:00 +0000
ROA not before:           Mon 15 Jan 2024 12:00:00 +0000
ROA not after:            Tue 16 Apr 2024 04:00:00 +0000
asID:                     10264
IP address blocks:        204.101.111.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:14:fc:0d:7c:0b:9b:0f:84:d6:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jan 15 12:00:00 2024 GMT
            Not After : Apr 16 04:00:00 2024 GMT
        Subject: CN=83518fa7-9f0d-4063-ac64-5a1968007988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:47:f9:01:42:d4:80:30:fb:a7:7f:c6:69:4c:
                    45:a2:34:76:a0:79:53:eb:b2:27:b5:eb:dd:8c:b4:
                    f4:7d:ac:96:6a:4a:f0:d5:d5:34:3a:ef:d4:b9:3c:
                    73:93:a2:8b:42:0e:c6:28:1d:56:2d:41:4a:79:00:
                    1f:ab:87:59:29:dd:41:97:95:7a:67:39:eb:e0:56:
                    6c:ee:46:49:69:9b:c9:0d:9b:68:2b:85:ef:3d:41:
                    e6:af:bb:83:82:b9:8a:3f:63:46:72:ad:65:fb:91:
                    b7:a2:c2:ff:ba:c8:c2:95:78:a8:b1:9d:8c:a1:39:
                    0b:2a:f1:c9:2b:0f:f6:98:76:d2:ac:08:2f:c5:0d:
                    6f:c1:35:0a:19:1c:7e:cd:00:05:d7:81:a3:fc:b5:
                    2d:e6:22:0d:78:50:d4:ce:1f:5e:c2:14:71:61:8c:
                    46:d2:b8:99:20:ae:97:ee:e9:74:30:b6:ca:4e:82:
                    16:ff:22:d5:d6:75:47:73:99:2e:d6:dc:67:4b:4f:
                    0a:7c:a6:47:33:95:63:71:ee:1d:77:34:3c:30:f5:
                    84:88:25:7b:c0:fb:7a:e3:9b:53:a0:0b:cd:ac:d4:
                    8d:14:c8:2e:7d:ec:7b:2b:2d:74:95:b8:74:e9:1d:
                    32:8e:de:28:7f:df:0e:15:a7:25:71:8d:d4:b4:55:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EB:E4:14:99:8F:4E:83:4F:C6:71:3B:7E:86:5D:4B:82:6E:05:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/b4a7fff0-a735-35db-b580-f54de2e5aa83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:32:5a:e7:78:49:9f:2e:10:3d:57:92:67:7e:da:10:b9:ce:
         f9:83:1b:b0:d6:65:a9:87:36:09:07:76:52:af:f6:c5:7e:94:
         f4:30:a9:fc:38:05:16:30:42:2e:06:45:08:75:b5:bf:68:9f:
         12:87:29:88:c8:b6:93:eb:db:ad:57:b3:0d:bb:0c:e5:37:36:
         8e:b3:74:0e:0a:f3:45:fe:ef:ee:0d:43:45:3b:f7:97:2d:a7:
         46:28:1c:82:49:05:99:3c:43:8b:60:e7:19:e1:a3:57:f0:6c:
         e2:63:fb:00:98:54:2e:55:b3:29:59:77:64:2d:4f:97:ea:66:
         78:0f:21:97:cf:35:8d:55:9d:9f:a2:7a:4d:90:3c:fe:22:a2:
         ac:1e:53:11:1f:cf:d1:e0:e1:46:45:6f:51:90:44:8e:b7:4d:
         4b:26:14:22:78:71:30:3d:7c:ab:42:8f:91:6f:6c:a6:db:9c:
         39:69:35:a6:a7:54:3b:e9:6a:3d:65:fb:17:cc:df:30:b0:ed:
         b0:ad:4c:54:f2:9f:ee:ae:99:4f:be:fa:ac:34:c7:dc:40:b4:
         06:3d:af:c2:49:c4:c4:83:93:53:b6:01:88:b7:f3:e7:70:f1:
         28:1c:96:b2:b1:59:f5:13:bd:cc:3e:74:fd:0d:2b:d8:21:51:
         a9:a3:4d:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESTFPwNfAubD4TWegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDExNTEyMDAwMFoXDTI0MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
ODM1MThmYTctOWYwZC00MDYzLWFjNjQtNWExOTY4MDA3OTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUf5AULUgDD7p3/GaUxFojR2oHlT67Intevd
jLT0fayWakrw1dU0Ou/UuTxzk6KLQg7GKB1WLUFKeQAfq4dZKd1Bl5V6Zznr4FZs
7kZJaZvJDZtoK4XvPUHmr7uDgrmKP2NGcq1l+5G3osL/usjClXiosZ2MoTkLKvHJ
Kw/2mHbSrAgvxQ1vwTUKGRx+zQAF14Gj/LUt5iINeFDUzh9ewhRxYYxG0riZIK6X
7ul0MLbKToIW/yLV1nVHc5ku1txnS08KfKZHM5Vjce4ddzQ8MPWEiCV7wPt645tT
oAvNrNSNFMgufex7Ky10lbh06R0yjt4of98OFaclcY3UtFVnVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNfr5BSZj06DT8ZxO36GXUuCbgUaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvYjRhN2ZmZjAtYTczNS0z
NWRiLWI1ODAtZjU0ZGUyZTVhYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzGVvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGsyWud4SZ8uED1Xkmd+2hC5zvmDG7DWZamHNgkHdlKv9sV+lPQwqfw4
BRYwQi4GRQh1tb9onxKHKYjItpPr261Xsw27DOU3No6zdA4K80X+7+4NQ0U795ct
p0YoHIJJBZk8Q4tg5xnho1fwbOJj+wCYVC5VsylZd2QtT5fqZngPIZfPNY1VnZ+i
ek2QPP4ioqweUxEfz9Hg4UZFb1GQRI63TUsmFCJ4cTA9fKtCj5FvbKbbnDlpNaan
VDvpaj1l+xfM3zCw7bCtTFTyn+6umU+++qw0x9xAtAY9r8JJxMSDk1O2AYi38+dw
8SgclrKxWfUTvcw+dP0NK9ghUamjTfk=
-----END CERTIFICATE-----
Generated at Tue Apr 16 04:25:26 2024 by rpki-client on console-fra.rpki-client.org