Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/304edc6e-c06f-3383-82d0-5fa42658328c.roa
File:                     304edc6e-c06f-3383-82d0-5fa42658328c.roa (raw, json)
Hash identifier:          a/JerloEsqB1EN2rTQyJhw5sEsO/y+rZB5mgNOZdr1A=
Subject key identifier:   7E:2A:B2:01:DD:90:DF:F4:4A:21:E3:6E:30:40:F1:F6:5C:CF:8B:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73EC4AF2736A4497B20C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/304edc6e-c06f-3383-82d0-5fa42658328c.roa
Signing time:             Fri 29 Nov 2024 13:58:32 +0000
ROA not before:           Fri 29 Nov 2024 13:58:32 +0000
ROA not after:            Thu 27 Feb 2025 13:58:32 +0000
asID:                     396567
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:ec:4a:f2:73:6a:44:97:b2:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:32 2024 GMT
            Not After : Feb 27 13:58:32 2025 GMT
        Subject: CN=3e5cd36c-1b1f-408b-ba45-3f572f824651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:92:41:39:31:ff:83:f4:35:c1:ab:5b:ac:26:
                    d0:20:6d:36:df:5a:ff:d8:df:10:23:57:19:b0:43:
                    bc:f2:42:60:35:04:df:33:81:6c:c9:18:ac:d7:9d:
                    a4:54:f5:73:52:37:68:9f:20:15:5e:d9:1d:9c:47:
                    0d:12:e6:b3:d8:2c:2b:55:72:e3:d2:02:a9:d8:7a:
                    6b:c7:5a:de:52:d5:ed:48:ea:89:20:60:a8:24:f2:
                    96:c8:0e:f7:3e:b0:ec:f0:dc:21:70:37:1c:55:91:
                    7e:78:fa:09:d7:58:60:3e:4f:35:d0:2a:3d:87:06:
                    c4:96:1a:2e:c7:f5:61:8b:44:51:0f:c2:fc:e9:3e:
                    fd:aa:4a:a6:14:a6:ec:eb:50:8d:16:a5:c9:e5:1c:
                    69:94:c9:8d:07:fb:3a:21:a3:cd:40:b2:73:f5:27:
                    b4:a9:19:86:57:ad:65:23:af:9c:27:b7:af:56:99:
                    40:14:5f:bf:c9:69:fa:5d:91:28:23:d1:8e:8c:fc:
                    b9:d8:bc:64:db:ff:fe:a8:b7:d8:b1:72:bf:ba:ba:
                    6e:b1:02:9c:32:4b:c3:9f:59:d8:c9:1f:7c:a3:55:
                    97:1f:87:89:19:83:4c:c2:ca:eb:78:04:35:27:39:
                    56:03:b1:28:24:ad:f9:4e:b9:7d:f3:c6:11:77:9a:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2A:B2:01:DD:90:DF:F4:4A:21:E3:6E:30:40:F1:F6:5C:CF:8B:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/304edc6e-c06f-3383-82d0-5fa42658328c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:86:df:27:83:5b:e9:c3:32:52:13:28:67:b1:85:53:9d:a2:
         63:fe:91:f8:99:75:81:a1:a1:fc:b9:5d:ee:b4:34:6c:9f:f9:
         bb:aa:78:99:d2:56:01:7a:4d:b1:50:6a:d5:ec:55:5d:46:ef:
         c8:dd:3c:fa:e8:c2:8d:51:21:96:73:83:88:b2:38:a6:c0:5b:
         55:30:c6:41:05:ea:e5:34:32:db:85:7c:fe:d0:71:46:cf:da:
         73:1e:42:12:f0:8d:20:19:99:d9:e4:c0:c6:e6:4a:46:b4:a8:
         22:eb:01:40:6f:93:58:a8:5d:0b:5b:cf:fe:47:88:d3:27:93:
         66:a4:57:aa:b9:eb:58:c3:df:8c:0f:df:05:6b:67:69:7d:03:
         13:51:61:d3:8c:4a:19:08:75:8d:23:2f:2a:fa:c7:cc:08:21:
         07:35:1d:37:17:24:ec:05:0f:36:e5:bc:77:5a:07:db:3f:ab:
         7c:5f:38:2b:3e:91:1e:2f:21:4b:8c:6e:82:8a:61:33:52:2c:
         22:16:e5:b1:24:5b:26:b9:12:c7:18:36:8e:e9:d6:dd:12:de:
         21:78:25:83:bd:5e:d5:8a:75:a4:a6:42:a4:f4:1d:b3:a7:d2:
         28:af:7c:ad:6e:b6:0f:d2:72:0b:22:d6:f5:f4:79:96:1d:fe:
         50:c6:28:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:16 2025 by rpki-client