Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ede49d95-576c-3954-bbc8-9c3db6a13094.roa
File:                     ede49d95-576c-3954-bbc8-9c3db6a13094.roa (raw, json)
Hash identifier:          qKwttpoaVAro2cnNIIZLZxn1ARpSBDH8ckD0CnErEM4=
Subject key identifier:   0C:E9:58:1F:42:70:FC:3C:1D:69:DC:BB:4D:45:B3:3F:58:AD:4C:53
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2AB1AD925B6420A98B6300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ede49d95-576c-3954-bbc8-9c3db6a13094.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        207.164.78.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2a:b1:ad:92:5b:64:20:a9:8b:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=1d8c43ba-3575-418e-9050-631c5694ea60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:79:6d:0a:b2:bc:57:8e:e5:8f:4e:c1:18:0b:
                    8d:cb:51:72:96:d1:9f:35:ef:b2:ff:b4:99:49:42:
                    e3:c6:a4:78:c0:d8:3b:10:d5:e6:21:3b:ce:2a:e6:
                    70:c0:4b:05:1e:25:ed:5f:d1:83:32:5a:84:13:04:
                    9f:e4:13:02:21:0f:21:47:df:11:87:a4:bc:95:0d:
                    39:02:1b:21:b9:82:8d:bf:dc:64:fa:9e:db:f4:ed:
                    d4:bb:a9:43:9f:8f:e7:4b:ec:49:43:84:fe:d8:66:
                    c6:72:d7:3b:48:67:f1:5b:49:db:eb:2c:ca:58:15:
                    b8:3c:48:07:70:60:c7:16:f9:17:90:22:c0:c9:b1:
                    ad:15:56:0b:ec:dc:00:f8:a0:78:e1:ac:32:ae:c6:
                    76:75:e3:de:d2:cd:dc:2b:ca:76:54:0c:be:d9:bf:
                    fa:4f:e9:66:d3:09:c6:6b:1c:bc:fe:a2:a6:43:89:
                    f0:87:bd:0f:47:01:a9:bb:48:5b:7d:ac:af:91:34:
                    e6:9e:4f:9d:ef:3c:a8:b9:90:33:e7:e6:ed:8f:a5:
                    68:41:28:5b:8f:78:3b:e8:97:05:bb:72:af:04:49:
                    1e:b9:1d:b8:db:88:b0:fb:31:62:11:4b:7f:74:92:
                    05:5f:ef:ed:df:c4:f5:7c:fd:f9:c0:05:9a:99:75:
                    29:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E9:58:1F:42:70:FC:3C:1D:69:DC:BB:4D:45:B3:3F:58:AD:4C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ede49d95-576c-3954-bbc8-9c3db6a13094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.164.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:bb:23:95:75:02:d7:ee:56:dd:e7:5a:19:0a:89:5f:cd:77:
         7a:01:1b:52:e6:b0:4b:d6:16:a8:a1:c9:63:e7:26:2e:2d:a5:
         3d:b6:7b:da:ed:63:a8:17:e8:d8:6b:7f:9b:ea:f6:bd:eb:f3:
         57:38:c0:70:af:84:d6:43:0c:e8:b3:05:c4:d6:40:74:d0:e1:
         3e:67:fd:83:ff:8d:9d:73:10:48:39:25:4b:cd:8c:63:8b:07:
         1d:03:d9:95:4e:c8:ca:6f:7d:07:f9:39:7a:22:d8:ac:1a:f2:
         74:28:3d:f0:7f:6f:87:fa:2e:3f:bb:44:81:b2:a6:f4:0b:2a:
         8b:88:0a:f8:b5:9b:72:07:d1:5d:7a:da:57:ab:50:45:17:77:
         ad:8e:88:9f:12:d2:d5:23:4b:e2:1f:f8:e9:d4:f8:09:03:df:
         3f:be:45:ec:61:92:8a:d5:9a:e7:c9:c0:4e:b1:5d:12:b3:1d:
         9f:1e:8c:bd:3c:30:3d:cf:c6:dd:a6:29:a3:b5:f9:77:e1:5a:
         14:f4:b8:56:e3:ed:cf:74:ed:f4:24:c8:b7:55:a8:cf:8a:85:
         4d:ed:87:92:59:b2:53:8d:8c:8f:90:b8:a2:7f:f2:76:10:05:
         28:7d:8d:75:a7:cd:50:4f:9c:35:3b:19:a1:85:ce:3f:f7:0b:
         63:a8:ac:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYtKrGtkltkIKmLYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI0MDYxMDEyMDAwMFoXDTI0MDkxMDA0MDAwMFowLzEtMCsGA1UEAxMk
MWQ4YzQzYmEtMzU3NS00MThlLTkwNTAtNjMxYzU2OTRlYTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XltCrK8V47lj07BGAuNy1FyltGfNe+y/7SZ
SULjxqR4wNg7ENXmITvOKuZwwEsFHiXtX9GDMlqEEwSf5BMCIQ8hR98Rh6S8lQ05
AhshuYKNv9xk+p7b9O3Uu6lDn4/nS+xJQ4T+2GbGctc7SGfxW0nb6yzKWBW4PEgH
cGDHFvkXkCLAybGtFVYL7NwA+KB44awyrsZ2dePe0s3cK8p2VAy+2b/6T+lm0wnG
axy8/qKmQ4nwh70PRwGpu0hbfayvkTTmnk+d7zyouZAz5+btj6VoQShbj3g76JcF
u3KvBEkeuR2424iw+zFiEUt/dJIFX+/t38T1fP35wAWamXUpDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAzpWB9CcPw8HWncu01Fsz9YrUxTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZWRlNDlkOTUtNTc2Yy0z
OTU0LWJiYzgtOWMzZGI2YTEzMDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6ROMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFG7I5V1AtfuVt3nWhkKiV/Nd3oBG1LmsEvWFqihyWPnJi4tpT22e9rt
Y6gX6Nhrf5vq9r3r81c4wHCvhNZDDOizBcTWQHTQ4T5n/YP/jZ1zEEg5JUvNjGOL
Bx0D2ZVOyMpvfQf5OXoi2Kwa8nQoPfB/b4f6Lj+7RIGypvQLKouICvi1m3IH0V16
2lerUEUXd62OiJ8S0tUjS+If+OnU+AkD3z++RexhkorVmufJwE6xXRKzHZ8ejL08
MD3Pxt2mKaO1+XfhWhT0uFbj7c907fQkyLdVqM+KhU3th5JZslONjI+QuKJ/8nYQ
BSh9jXWnzVBPnDU7GaGFzj/3C2OorPQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:20 2025 by rpki-client