Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fa39891-5b34-3648-a36b-7d648e0a0831.roa
File:                     2fa39891-5b34-3648-a36b-7d648e0a0831.roa (raw, json)
Hash identifier:          dSAA8BN0KIHQVxW6rhHWGTpeK+mGNi1+IBBDdS6bY/s=
Subject key identifier:   BD:29:32:5B:C2:3A:C8:01:AA:94:97:F4:DC:26:AA:6A:21:FD:15:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73E291072F5B170AD8C110
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fa39891-5b34-3648-a36b-7d648e0a0831.roa
Signing time:             Fri 29 Nov 2024 13:58:28 +0000
ROA not before:           Fri 29 Nov 2024 13:58:28 +0000
ROA not after:            Thu 27 Feb 2025 13:58:28 +0000
asID:                     21313
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:e2:91:07:2f:5b:17:0a:d8:c1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:28 2024 GMT
            Not After : Feb 27 13:58:28 2025 GMT
        Subject: CN=4f7af832-12f7-47af-8d67-518c55177d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:de:05:da:a3:b8:57:e6:1f:02:8e:fe:af:
                    d7:16:bd:e7:2c:86:fa:f1:8e:9f:cf:b9:0b:d2:a2:
                    4e:30:55:80:6f:06:fa:0c:44:aa:d8:b7:6a:3d:cc:
                    ce:c5:da:9d:f7:50:bd:de:b5:75:c5:1b:b0:1e:b4:
                    f2:bf:11:97:df:e3:99:34:3a:d4:a8:a7:b0:3e:f4:
                    cc:0e:d3:34:0d:aa:98:55:69:cd:e2:db:2e:ca:22:
                    51:90:94:3b:30:1c:06:1b:b4:2d:3c:21:09:66:5b:
                    6e:a2:a6:ef:46:a2:ab:b5:bc:7e:bd:c2:62:16:61:
                    5b:60:45:e1:34:81:88:01:ff:dd:c6:11:a4:90:9d:
                    ec:9c:99:26:a1:cf:3c:c1:0e:11:fa:37:5b:2d:5b:
                    4c:4f:1f:ae:70:b6:c8:81:25:e5:92:61:54:3b:fd:
                    1a:d4:f7:12:52:f2:ec:ce:69:c5:11:68:ac:20:7d:
                    77:ea:e1:ff:93:5b:a5:25:70:5b:3b:7c:c2:54:3b:
                    97:6d:df:5c:f2:21:32:bd:ed:95:7b:a4:6d:49:cc:
                    0d:1e:3f:3a:d3:b7:48:04:a7:2a:92:ee:89:bd:0e:
                    f7:a3:d4:26:15:aa:36:c6:68:ee:c6:5f:5f:ed:7b:
                    0e:8b:29:5f:30:60:17:66:37:8f:05:3f:57:34:88:
                    12:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:29:32:5B:C2:3A:C8:01:AA:94:97:F4:DC:26:AA:6A:21:FD:15:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fa39891-5b34-3648-a36b-7d648e0a0831.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:3e:1a:06:0a:95:3a:b6:08:3c:c6:1d:cc:eb:64:92:d2:23:
         8e:d1:93:a6:d9:e9:3c:4b:d8:b4:b1:a2:0f:8c:aa:1a:6c:53:
         b5:9f:7a:2c:db:0b:b3:44:ce:a4:d7:86:b7:45:9e:25:ac:3b:
         1c:60:48:d8:98:a2:20:a7:62:f4:31:f2:ef:73:22:d2:b9:89:
         03:8d:e9:7f:7d:64:c9:81:be:28:40:f9:c8:26:e6:21:7e:49:
         38:de:45:c4:e9:72:31:cb:93:fd:38:e1:32:db:59:77:4d:99:
         8a:bb:a5:0d:2a:be:36:d7:6f:46:6c:d6:3c:10:4d:10:08:11:
         65:84:30:89:50:b8:dd:be:15:0c:13:d8:7b:92:b2:5b:1e:b2:
         a0:dc:2d:d3:87:ad:ff:37:a2:aa:92:03:37:4e:26:2f:a9:d4:
         4f:26:e1:f5:68:f4:64:14:4e:2b:17:08:d3:04:50:ff:3f:5e:
         07:d6:54:8c:b0:dd:07:ac:f3:1e:ae:e2:28:3d:17:29:50:70:
         12:15:87:84:e1:92:5d:71:b0:7d:1a:e2:32:ea:3b:db:7f:c4:
         89:cd:9a:d8:86:18:96:0b:1b:ef:3d:01:ca:9d:db:f9:f2:46:
         d1:4a:38:46:f5:63:65:22:2f:36:42:fc:90:84:65:6d:eb:21:
         f1:e1:0c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:39:26 2025 by rpki-client