Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9301411d-cbcf-3a73-a169-999beb3396e9.roa
File:                     9301411d-cbcf-3a73-a169-999beb3396e9.roa (raw, json)
Hash identifier:          U6z3b2RX2mtHXevanlOoFBcV5/pru2b+YYRn7DPkScA=
Subject key identifier:   D7:25:FC:57:A7:59:88:81:00:AB:63:8B:D2:5A:D7:82:9A:BC:CB:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73E15EC6C5A3A682C52400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9301411d-cbcf-3a73-a169-999beb3396e9.roa
Signing time:             Fri 29 Nov 2024 13:58:27 +0000
ROA not before:           Fri 29 Nov 2024 13:58:27 +0000
ROA not after:            Thu 27 Feb 2025 13:58:27 +0000
asID:                     397200
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:e1:5e:c6:c5:a3:a6:82:c5:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:27 2024 GMT
            Not After : Feb 27 13:58:27 2025 GMT
        Subject: CN=e5d25d62-3c87-4724-be8c-7b390c20478b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3c:13:cc:33:98:25:4b:3d:62:23:41:c7:b4:
                    f7:c6:28:b8:3a:5e:5a:59:1c:a2:43:10:3c:0a:4a:
                    dc:c2:ca:c4:d1:e6:10:02:4e:f1:f9:96:51:fc:36:
                    37:01:cf:5b:32:0d:a4:90:b2:4a:79:63:3e:59:0d:
                    f3:3d:60:3a:7c:29:ff:a8:ab:d4:b8:4f:8b:54:03:
                    a9:b2:2e:b0:82:99:17:d7:3e:0b:f6:39:18:75:f7:
                    9e:8d:fc:ce:9e:32:11:b7:c3:5f:61:36:57:f0:ec:
                    45:d3:a9:53:1c:31:93:6a:b0:cb:13:20:5a:29:ba:
                    09:b3:0f:f5:86:3e:41:4d:55:9b:c9:82:e7:08:cc:
                    b0:e4:16:68:4d:a3:1d:c1:7d:d1:2a:41:28:9c:ee:
                    8d:e9:7c:10:92:e0:7a:77:54:d0:9b:93:e2:d8:e1:
                    e9:d7:8b:8e:ac:2c:b5:16:65:38:cd:93:69:d7:5e:
                    30:b9:47:a8:9c:43:9e:15:3a:72:72:62:5c:04:26:
                    61:99:6c:32:9b:ff:17:29:19:1f:96:0f:34:d0:cc:
                    49:45:17:75:c4:27:11:3d:8d:42:90:9e:54:72:05:
                    32:ca:48:ee:c2:10:b0:3e:a5:a9:12:c0:0c:00:d3:
                    58:35:1a:ef:a7:e7:d1:54:c6:9e:48:2a:26:85:b5:
                    61:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:25:FC:57:A7:59:88:81:00:AB:63:8B:D2:5A:D7:82:9A:BC:CB:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9301411d-cbcf-3a73-a169-999beb3396e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:9e:38:1f:ae:64:b2:1e:0a:e2:b0:7a:92:f9:7b:90:85:e9:
         3f:62:3c:4b:22:45:28:be:fd:49:0e:cc:09:dd:69:8d:76:fc:
         80:5d:b9:89:d9:10:60:d1:49:ac:cd:4c:8f:2a:98:0e:09:46:
         47:b0:c1:1e:4c:52:61:1b:20:a4:68:e5:aa:9c:31:db:91:db:
         43:c9:6e:5f:5f:b6:6c:53:7b:e6:15:c4:1e:04:24:5d:17:2e:
         a9:4f:c5:4f:82:19:09:b2:ce:75:d7:41:7b:2f:12:2f:9d:a4:
         ee:2a:47:b7:31:c3:c3:96:58:38:56:df:72:13:a4:44:fe:25:
         50:85:3d:0e:8b:76:6d:b0:28:7c:27:e0:ea:24:b8:08:a0:8b:
         35:47:ce:bd:cf:b0:b9:ba:f3:4e:41:a6:ce:27:60:d5:a1:c7:
         8d:62:cc:7b:0e:e7:c6:f5:f8:27:8a:59:89:5e:fe:c2:2b:11:
         b6:0e:95:80:80:fd:cb:18:5a:c7:34:09:bb:73:38:7e:16:b2:
         b8:c0:db:1f:8a:7d:01:76:90:f8:24:ea:f7:2b:14:e6:66:16:
         62:b8:8d:ac:16:2e:b1:49:8f:92:c1:79:f5:86:81:f0:1f:75:
         9d:d9:14:59:ed:ed:b2:9c:58:4b:f9:1a:b9:0a:09:03:00:7a:
         ad:09:84:81
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgKc+FexsWjpoLFJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTgyN1oXDTI1MDIyNzEzNTgyN1owLzEtMCsGA1UEAxMk
ZTVkMjVkNjItM2M4Ny00NzI0LWJlOGMtN2IzOTBjMjA0NzhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjwTzDOYJUs9YiNBx7T3xii4Ol5aWRyiQxA8
CkrcwsrE0eYQAk7x+ZZR/DY3Ac9bMg2kkLJKeWM+WQ3zPWA6fCn/qKvUuE+LVAOp
si6wgpkX1z4L9jkYdfeejfzOnjIRt8NfYTZX8OxF06lTHDGTarDLEyBaKboJsw/1
hj5BTVWbyYLnCMyw5BZoTaMdwX3RKkEonO6N6XwQkuB6d1TQm5Pi2OHp14uOrCy1
FmU4zZNp114wuUeonEOeFTpycmJcBCZhmWwym/8XKRkflg800MxJRRd1xCcRPY1C
kJ5UcgUyykjuwhCwPqWpEsAMANNYNRrvp+fRVMaeSComhbVhWQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNcl/FenWYiBAKtji9Ja14KavMuLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTMwMTQxMWQtY2JjZi0z
YTczLWExNjktOTk5YmViMzM5NmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA0njgfrmSyHgrisHqS+XuQhek/YjxLIkUovv1JDswJ3WmNdvyAXbmJ
2RBg0UmszUyPKpgOCUZHsMEeTFJhGyCkaOWqnDHbkdtDyW5fX7ZsU3vmFcQeBCRd
Fy6pT8VPghkJss5110F7LxIvnaTuKke3McPDllg4Vt9yE6RE/iVQhT0Oi3ZtsCh8
J+DqJLgIoIs1R869z7C5uvNOQabOJ2DVoceNYsx7DufG9fgnilmJXv7CKxG2DpWA
gP3LGFrHNAm7czh+FrK4wNsfin0BdpD4JOr3KxTmZhZiuI2sFi6xSY+SwXn1hoHw
H3Wd2RRZ7e2ynFhL+Rq5CgkDAHqtCYSB
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:09:02 2025 by rpki-client