Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dfdb2be4-f3eb-3f74-a022-8815d7919217.roa
File:                     dfdb2be4-f3eb-3f74-a022-8815d7919217.roa (raw, json)
Hash identifier:          czK+RAmpuFLOuC7Ya1sL0uvGuC85Vq3p1cRqvluMDI4=
Subject key identifier:   2B:23:84:92:BA:D3:34:33:6B:68:FE:4B:EF:97:F3:12:04:C0:F7:D1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B573232CF0365A0E959424
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dfdb2be4-f3eb-3f74-a022-8815d7919217.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     577
IP address blocks:        142.118.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b5:73:23:2c:f0:36:5a:0e:95:94:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=16e02c44-353e-4370-90b0-55e959bb2180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:0a:57:80:1b:25:4a:64:05:e9:d2:0f:62:
                    bc:d1:e0:e7:d1:f1:04:94:f5:3c:5d:4f:68:36:7a:
                    ba:82:55:c2:5e:7f:b8:f8:10:45:f8:5a:3f:54:68:
                    d8:b3:89:6b:4c:0b:a7:9f:bb:18:43:b6:c5:86:0a:
                    5d:0a:d2:91:10:a8:96:99:05:a8:f9:66:0a:cb:16:
                    ce:1f:9f:35:f0:7c:08:19:5b:aa:80:53:90:48:c9:
                    65:a9:dd:af:c4:34:dc:b2:0a:f4:ce:35:3d:62:0a:
                    0e:93:45:ac:80:33:a5:fc:9e:5a:ba:0a:a3:68:5d:
                    b4:67:ad:de:21:2f:c7:b5:67:db:d9:5e:4f:45:36:
                    86:4b:d7:b0:be:ca:26:08:41:03:58:7f:6e:70:5f:
                    45:36:50:c5:9d:8e:c6:a7:ca:ef:73:de:d6:75:26:
                    3e:e1:73:71:76:01:28:7a:fa:40:0a:69:9e:d9:8b:
                    15:07:27:aa:76:d6:98:26:b6:0b:e0:71:2f:95:dc:
                    8e:01:db:00:9e:53:23:60:0f:d1:99:ff:35:0e:c7:
                    d5:fb:d1:7b:fc:28:3d:4f:7b:d5:6f:28:95:bc:c8:
                    f9:a3:97:c8:f8:bb:52:78:b5:c0:49:58:1b:bd:77:
                    25:3a:5c:1a:6f:83:9a:da:da:63:da:c8:81:67:14:
                    f3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:23:84:92:BA:D3:34:33:6B:68:FE:4B:EF:97:F3:12:04:C0:F7:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/dfdb2be4-f3eb-3f74-a022-8815d7919217.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.118.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:be:fa:1e:82:8e:bd:0a:77:32:d6:38:5b:36:b0:22:dd:aa:
         b9:a8:eb:dd:39:1a:8c:5b:4e:a6:21:61:36:13:9b:0e:4e:d3:
         05:e1:64:df:eb:be:78:5a:a4:f1:83:90:a7:e4:22:fc:31:b2:
         8e:7f:1c:10:82:76:51:71:4c:e8:89:a5:a7:e2:ce:73:50:6f:
         6b:d9:6b:91:3a:ef:9e:a8:bb:d4:f4:d4:6b:fa:e7:62:4a:60:
         17:b2:9e:d6:10:df:c9:2f:38:d1:ea:4b:ba:5c:99:f5:8d:3d:
         3e:5e:13:73:6a:1b:ab:59:db:38:53:a0:4e:7f:d7:cf:2e:53:
         02:3c:40:da:a0:55:3e:58:52:8f:93:d9:1f:b7:53:b1:28:0d:
         c8:a8:48:17:d1:b3:62:39:b1:19:8b:0e:7d:29:f3:5f:a8:e9:
         cf:b3:9a:20:fd:4e:38:bc:e3:1a:8a:31:c1:40:5a:8e:f4:90:
         b0:fc:39:19:89:b4:a8:7c:90:90:74:c0:d5:14:f8:9d:f5:d0:
         f9:b3:1b:c4:ca:3c:d5:5a:e6:8c:d9:e4:8b:e9:c3:22:18:6b:
         38:32:06:ea:ae:ef:f6:14:d9:05:6c:43:8f:78:f1:3b:b7:95:
         fb:6b:6e:2b:05:9b:5b:c5:23:ee:b7:4a:c4:67:ed:71:dd:34:
         7c:33:f2:08
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgmtXMjLPA2Wg6VlCQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MTIwODEyMDAwMFoXDTI1MDMxMDA0MDAwMFowLzEtMCsGA1UEAxMk
MTZlMDJjNDQtMzUzZS00MzcwLTkwYjAtNTVlOTU5YmIyMTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvkKV4AbJUpkBenSD2K80eDn0fEElPU8XU9o
Nnq6glXCXn+4+BBF+Fo/VGjYs4lrTAunn7sYQ7bFhgpdCtKREKiWmQWo+WYKyxbO
H5818HwIGVuqgFOQSMllqd2vxDTcsgr0zjU9YgoOk0WsgDOl/J5augqjaF20Z63e
IS/HtWfb2V5PRTaGS9ewvsomCEEDWH9ucF9FNlDFnY7Gp8rvc97WdSY+4XNxdgEo
evpACmme2YsVByeqdtaYJrYL4HEvldyOAdsAnlMjYA/Rmf81DsfV+9F7/Cg9T3vV
byiVvMj5o5fI+LtSeLXASVgbvXclOlwab4Oa2tpj2siBZxTzawIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCsjhJK60zQza2j+S++X8xIEwPfRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZGZkYjJiZTQtZjNlYi0z
Zjc0LWEwMjItODgxNWQ3OTE5MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjnYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnb76HoKOvQp3MtY4WzawIt2quajr3TkajFtOpiFhNhObDk7TBeFk3+u+
eFqk8YOQp+Qi/DGyjn8cEIJ2UXFM6Imlp+LOc1Bva9lrkTrvnqi71PTUa/rnYkpg
F7Ke1hDfyS840epLulyZ9Y09Pl4Tc2obq1nbOFOgTn/Xzy5TAjxA2qBVPlhSj5PZ
H7dTsSgNyKhIF9GzYjmxGYsOfSnzX6jpz7OaIP1OOLzjGooxwUBajvSQsPw5GYm0
qHyQkHTA1RT4nfXQ+bMbxMo81VrmjNnki+nDIhhrODIG6q7v9hTZBWxDj3jxO7eV
+2tuKwWbW8Uj7rdKxGftcd00fDPyCA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:50 2025 by rpki-client