Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26b74d1f-cbf2-310a-8b91-a1329f67745d.roa
File:                     26b74d1f-cbf2-310a-8b91-a1329f67745d.roa (raw, json)
Hash identifier:          LlWeBIxRUNfgI/ZGw+91bLR2u4e2gsacYhoZVdNd6JQ=
Subject key identifier:   6A:DA:2C:DB:94:7A:87:4A:0C:9F:F9:B3:F8:94:C0:F8:D8:91:C1:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A74008DBDA5E11DB9E55480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26b74d1f-cbf2-310a-8b91-a1329f67745d.roa
Signing time:             Fri 29 Nov 2024 13:58:42 +0000
ROA not before:           Fri 29 Nov 2024 13:58:42 +0000
ROA not after:            Thu 27 Feb 2025 13:58:42 +0000
asID:                     396827
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:74:00:8d:bd:a5:e1:1d:b9:e5:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:42 2024 GMT
            Not After : Feb 27 13:58:42 2025 GMT
        Subject: CN=f5acb5e8-5d17-4983-995e-b9b1a9c9b2dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:53:b6:92:34:63:e7:f6:47:6a:c9:fa:db:
                    af:eb:84:c8:84:e5:29:75:5c:09:96:0d:30:1f:7b:
                    d7:d8:f4:77:29:f4:5a:64:42:34:1a:7a:6d:47:b6:
                    f3:01:91:56:13:61:93:ef:16:04:b2:f2:cb:4b:26:
                    02:da:79:3a:82:af:ed:f4:e8:37:d6:00:02:91:9b:
                    97:e2:02:48:67:1d:2d:13:76:46:c3:14:39:c0:95:
                    52:d3:07:61:0c:8c:5a:cd:8b:7a:bf:7e:a8:3c:ac:
                    2c:39:77:3f:02:b3:d9:f0:ff:f0:17:c6:6f:fe:b6:
                    af:2c:d3:70:f8:5d:4a:b6:ef:e2:d6:27:a3:0f:11:
                    48:c5:06:ad:ef:e6:94:b8:43:ae:3f:6c:a8:71:72:
                    aa:c4:12:30:1a:ca:5f:c2:ee:85:ae:3f:b9:5a:25:
                    80:f4:d3:f9:b1:16:e2:13:32:1e:fe:72:e9:a1:60:
                    29:34:f3:b2:07:e4:3c:b7:06:72:7c:3a:45:7e:07:
                    35:77:ec:52:40:e4:2c:d8:66:1b:8e:f1:4c:9a:41:
                    72:ef:f8:b3:d1:bb:37:c4:7c:ac:05:af:46:f5:e2:
                    44:ba:44:4b:41:f5:d5:c0:f6:d4:43:ca:02:a3:8d:
                    8c:ca:fe:02:fb:6c:5f:1f:13:b4:99:67:ea:9e:a9:
                    d4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DA:2C:DB:94:7A:87:4A:0C:9F:F9:B3:F8:94:C0:F8:D8:91:C1:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26b74d1f-cbf2-310a-8b91-a1329f67745d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:0c:5e:a4:56:69:cb:44:11:63:4f:bd:73:bf:5c:ab:67:bd:
         13:3b:a3:c2:4f:98:8e:41:ff:3e:a1:0a:eb:c3:32:a3:04:c0:
         85:7d:65:4b:b7:ac:3e:a5:b4:90:59:b3:47:51:3f:c1:3e:34:
         9d:2a:51:9a:3f:f0:3a:39:f8:03:58:83:bc:9b:5b:bc:9b:9b:
         22:f8:dd:b5:ec:c0:76:2e:b9:d2:ef:97:cf:a7:28:18:bc:40:
         be:fa:6a:ba:31:44:a6:87:38:ff:0a:3e:e4:0b:bd:b8:ce:ce:
         b2:72:cb:b9:a6:64:10:0b:ba:4f:a7:93:f0:d7:7d:dc:2d:3b:
         24:58:f3:ba:5e:0b:74:3b:5b:0b:f6:18:cf:d3:b2:40:48:3a:
         53:ab:fe:18:3a:83:85:19:f7:db:bd:ce:de:3b:91:0f:fc:03:
         81:8f:70:8d:d3:73:eb:ea:28:f7:90:2f:71:4f:db:7c:4a:0b:
         ff:de:91:d4:1b:59:1c:09:4d:96:35:fc:d8:26:c5:45:d4:f3:
         07:4e:53:68:36:c3:53:a9:f4:ed:ed:d6:01:f0:47:3c:bb:9b:
         c0:73:0e:95:57:f5:7a:3c:e5:c6:5d:e5:f6:b6:c5:20:72:d6:
         bf:d4:71:22:28:5f:cc:35:71:90:b5:12:80:bf:78:a2:41:09:
         df:5e:72:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----