Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15465c31-a42b-31d4-8ac5-7572010a34a6.roa
File:                     15465c31-a42b-31d4-8ac5-7572010a34a6.roa (raw, json)
Hash identifier:          IfM1ocF5P2XJeoPFXqLbqTHLp35hJsfSNEXIlhEXW/Y=
Subject key identifier:   F7:B8:9F:65:90:AA:64:E7:05:4C:5E:DF:3A:C4:1D:8F:87:A8:F9:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73F82A7B96D02238AAAE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15465c31-a42b-31d4-8ac5-7572010a34a6.roa
Signing time:             Fri 29 Nov 2024 13:58:38 +0000
ROA not before:           Fri 29 Nov 2024 13:58:38 +0000
ROA not after:            Thu 27 Feb 2025 13:58:38 +0000
asID:                     396615
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:f8:2a:7b:96:d0:22:38:aa:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:38 2024 GMT
            Not After : Feb 27 13:58:38 2025 GMT
        Subject: CN=23bb2523-1ea9-42ec-918b-23822e1b90e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:0f:f9:8f:ce:93:bd:20:c2:40:75:a7:02:
                    8d:7e:9b:da:d6:0a:88:b5:49:6f:12:64:e7:53:44:
                    e4:ec:6c:7f:a6:be:89:6c:91:83:36:08:5d:41:11:
                    27:b9:76:7c:e9:ab:fd:b5:a2:b8:bb:79:74:30:b4:
                    ca:aa:ab:b8:0a:5b:99:5d:ce:d3:26:b6:fc:03:ca:
                    cb:cf:72:ef:eb:44:5b:34:21:f4:92:d8:14:9b:9e:
                    22:dd:21:ac:92:aa:00:fb:6c:10:6c:3d:d7:6f:42:
                    ef:cc:e8:85:67:a4:6e:d1:3e:8d:3f:be:3d:05:00:
                    38:61:3e:b7:f3:7d:a3:31:f5:72:6b:f4:a9:fa:e4:
                    ab:89:22:30:3e:ec:0a:24:05:50:1c:5d:c8:ea:05:
                    72:bb:bf:8c:52:bd:56:26:21:1a:87:b6:76:3a:b1:
                    90:84:cb:92:12:a2:de:ff:ab:e4:25:af:99:7b:7a:
                    52:a7:06:b8:76:2d:c1:66:0b:ad:9f:bc:de:87:3f:
                    34:c8:f9:8d:81:78:1e:af:0f:50:54:45:1e:74:a4:
                    86:07:7a:95:fe:24:13:fc:67:55:a5:7c:07:3d:e5:
                    09:53:8c:a8:dc:a3:65:e8:b7:27:1b:dd:de:40:db:
                    8f:ef:07:3b:cf:63:05:7c:e4:1c:ea:49:74:f5:b8:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B8:9F:65:90:AA:64:E7:05:4C:5E:DF:3A:C4:1D:8F:87:A8:F9:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15465c31-a42b-31d4-8ac5-7572010a34a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:15:bc:59:ae:bf:73:f5:78:ab:49:e5:0a:e7:af:3d:8e:22:
         7c:08:64:fa:9c:46:43:24:43:37:e6:cd:52:dc:99:ed:22:ca:
         4e:ad:1d:fc:ea:f0:1c:10:fe:26:55:83:1b:f7:9a:4c:90:70:
         a1:1b:3a:7c:f1:8f:60:2f:9a:a1:b6:d6:98:d4:cb:82:62:45:
         14:68:77:aa:5b:ff:bf:24:56:a0:aa:e7:13:ca:f5:57:3f:70:
         5e:ac:2d:8d:dc:26:30:39:16:87:b3:01:38:cf:72:8c:07:2f:
         56:4a:3e:ce:45:12:02:6a:5b:ee:a2:1d:0b:2a:67:15:3d:92:
         47:a8:b6:2d:be:00:b7:90:eb:d3:a8:81:d3:1a:35:7a:26:f8:
         6e:c9:d7:fc:22:79:11:8e:c9:f2:1c:a9:4b:f7:77:2f:66:92:
         81:d7:ee:4d:07:84:2a:9d:a0:1e:5b:4c:4c:46:9c:af:e5:96:
         e5:dc:54:82:9b:de:00:4b:8f:07:1d:6a:f6:06:34:7d:79:7e:
         aa:4b:ef:bd:ad:c2:7d:13:d9:4a:ed:8a:c4:5b:37:26:1c:40:
         bb:16:a8:d2:23:1f:51:8c:52:a7:68:7c:5b:95:12:07:66:3a:
         3d:08:1b:4e:34:49:9c:34:4d:bb:1a:f7:32:a7:00:d5:d5:d9:
         77:30:d8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:48 2025 by rpki-client