Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30f93787-7d72-3ba6-8eaa-e16a617f9812.roa
File:                     30f93787-7d72-3ba6-8eaa-e16a617f9812.roa (raw, json)
Hash identifier:          cBx1Ty96y4H5IhJ/ewXYp75MQobxCS98lvmWIVq8mVU=
Subject key identifier:   CF:90:A3:B9:65:7D:75:2B:5F:50:FE:F2:AE:7C:AA:94:D4:B0:C6:1C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73E18BC9BAD02B256D2380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30f93787-7d72-3ba6-8eaa-e16a617f9812.roa
Signing time:             Fri 29 Nov 2024 13:58:27 +0000
ROA not before:           Fri 29 Nov 2024 13:58:27 +0000
ROA not after:            Thu 27 Feb 2025 13:58:27 +0000
asID:                     396560
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:e1:8b:c9:ba:d0:2b:25:6d:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:27 2024 GMT
            Not After : Feb 27 13:58:27 2025 GMT
        Subject: CN=c6436ca8-f29e-4a6a-b13f-0ee61ccf951b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:fb:17:0b:96:80:66:30:79:74:03:34:61:
                    62:87:bf:f5:e5:5b:05:19:c6:87:15:91:38:1f:1d:
                    4e:dc:34:9a:8c:2b:c4:bc:3e:e0:f8:d5:99:30:6f:
                    7a:66:f9:22:38:5c:ec:30:f2:d8:70:88:22:a8:d2:
                    f8:47:54:e4:d3:e5:ab:a8:ef:9f:d1:b2:ca:05:4a:
                    9a:1a:18:7c:e3:59:6d:7f:a9:0e:e3:b1:40:f2:4a:
                    56:bd:e1:68:9e:95:8f:11:b1:96:7b:16:e0:90:43:
                    0f:59:45:84:ff:7f:6e:aa:11:e8:cf:76:17:63:c6:
                    ab:7e:12:fc:b4:86:cf:71:fe:de:8e:b1:4d:50:ff:
                    cb:ed:e7:2b:86:1d:21:07:67:0b:c2:c8:f0:37:af:
                    d7:ed:1e:01:cf:33:a4:7f:78:68:6a:6a:38:94:e0:
                    7a:01:80:30:32:78:1f:d2:e6:e5:b8:ae:7f:a6:a7:
                    82:01:b6:2e:e2:05:c9:f4:d5:7c:23:03:7b:cb:5f:
                    bf:19:22:7b:b3:c2:71:b5:fb:6a:df:bb:42:d1:95:
                    0c:71:f6:00:df:d5:7f:82:7e:a8:40:e4:c6:58:c3:
                    84:87:b0:f2:71:77:b9:31:f3:c0:9d:02:41:42:8a:
                    51:b9:c5:5b:33:26:99:b7:46:8e:11:99:eb:f5:8c:
                    2a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:90:A3:B9:65:7D:75:2B:5F:50:FE:F2:AE:7C:AA:94:D4:B0:C6:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/30f93787-7d72-3ba6-8eaa-e16a617f9812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:47:65:c6:ed:0f:b7:99:01:26:2f:81:00:a0:e6:41:45:1a:
         17:a1:a6:c1:6f:7f:73:03:1b:8c:70:e9:de:47:34:6f:b9:b7:
         80:17:f7:8d:c4:7d:74:a0:6a:14:1d:16:c0:64:e8:f6:d8:90:
         da:8f:de:9f:d3:c5:33:ef:d3:58:e2:4d:c6:b8:0a:f4:57:38:
         29:5b:56:fa:93:1a:60:73:e3:b2:3d:a7:c6:2f:10:0d:9c:4a:
         0a:42:a7:fa:e8:d4:06:c8:98:77:e8:9c:2d:06:5b:0e:78:c0:
         67:3d:38:f7:33:4e:64:a4:ed:f8:57:dc:1f:a8:55:d5:00:47:
         06:de:55:65:b5:47:0a:af:a1:69:6a:4f:6c:3d:98:43:78:2e:
         bc:e5:66:89:86:ed:e6:ee:70:c4:16:1e:a8:7b:68:f5:27:6f:
         3c:3d:73:5a:3c:fa:ea:fd:15:cf:3b:5c:06:55:5d:09:15:0a:
         62:65:77:8f:05:45:c1:2c:91:7c:a0:5d:ad:6a:41:3b:05:c4:
         be:2c:2d:cc:a6:50:6b:9c:92:6b:4e:1c:2a:83:1f:e3:4d:bc:
         1c:3a:2d:1d:3d:62:09:a9:ce:0f:4c:93:c2:46:71:9e:2b:bf:
         78:7c:24:3f:1c:5b:ee:9d:d5:98:48:a2:42:d8:5c:a2:89:8b:
         65:1b:87:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:07 2025 by rpki-client