Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c13b8294-c86a-3731-ab81-1fe9e5200777.roa
File:                     c13b8294-c86a-3731-ab81-1fe9e5200777.roa (raw, json)
Hash identifier:          bHnVASH38uqFC2vIMCWwSA8S8RYqZy0Pn3pSA3JQyPc=
Subject key identifier:   4F:CB:FD:D6:DF:39:57:B8:3D:87:CC:03:B0:0D:4A:48:BE:47:F4:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73F3AC297D06AE910D1D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c13b8294-c86a-3731-ab81-1fe9e5200777.roa
Signing time:             Fri 29 Nov 2024 13:58:36 +0000
ROA not before:           Fri 29 Nov 2024 13:58:36 +0000
ROA not after:            Thu 27 Feb 2025 13:58:36 +0000
asID:                     397202
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:f3:ac:29:7d:06:ae:91:0d:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:36 2024 GMT
            Not After : Feb 27 13:58:36 2025 GMT
        Subject: CN=04b56577-709c-4ebc-99a8-025e3245c8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:17:ce:b5:00:75:e9:2a:88:82:c6:3e:70:61:
                    aa:44:0e:12:2f:d1:d8:42:6c:b6:35:dd:39:b7:cb:
                    b8:c8:8c:1d:e4:8d:d3:b0:77:f5:77:3a:d1:76:79:
                    80:9f:21:d7:a0:7c:70:2f:d5:89:4a:c3:dd:ad:c3:
                    e6:c7:b9:72:26:50:72:1a:ae:1f:96:27:ed:dc:86:
                    42:56:33:84:38:0b:cf:fb:d9:43:ca:74:f8:cf:cb:
                    95:b9:1b:61:9a:ad:16:10:35:b1:f0:46:83:f1:90:
                    b9:1d:df:7d:75:9f:48:1b:a5:45:6e:75:39:e4:73:
                    0c:bb:20:fe:10:0a:91:33:ce:27:7e:b7:0b:08:93:
                    5c:c7:7c:5e:ed:a0:32:a5:47:9f:fa:e6:d2:7c:5b:
                    fb:73:3b:c7:e0:e2:46:0e:d1:04:5d:2c:16:06:be:
                    83:8e:32:c0:4b:5e:aa:fd:58:95:17:dd:32:f3:2e:
                    45:27:26:90:26:37:33:f9:81:47:31:b9:2c:3b:29:
                    af:0f:5c:79:26:2f:cc:e3:ef:8d:15:f7:a0:dc:4f:
                    dc:52:62:b3:67:c2:6f:38:00:55:b6:fc:e4:d3:03:
                    99:66:a1:9c:cd:40:30:e7:d8:5a:15:41:2f:07:e7:
                    a0:e7:cf:ce:20:ca:19:4c:8e:15:7d:3e:04:e0:e2:
                    2d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CB:FD:D6:DF:39:57:B8:3D:87:CC:03:B0:0D:4A:48:BE:47:F4:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c13b8294-c86a-3731-ab81-1fe9e5200777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a8:5a:8a:c6:d5:63:c3:69:b6:4e:12:2d:64:b7:ff:66:18:
         88:de:f3:24:63:42:b9:bb:a3:9c:03:83:af:6a:c0:ec:75:2a:
         70:c8:75:7a:62:34:4d:c5:15:7b:15:1f:b3:a0:0d:ef:7d:d9:
         5b:21:24:00:1d:14:2e:cf:fc:42:75:41:ab:e8:10:d2:bd:40:
         52:73:3a:07:94:82:05:ab:25:d4:f9:d8:c0:93:6f:77:b2:80:
         99:b8:83:b1:ac:de:af:0e:88:af:32:b6:81:fa:8e:61:cb:77:
         ba:3a:4f:7d:b6:8e:18:29:01:0e:41:83:69:d2:69:fe:e9:26:
         84:de:f3:fa:a8:d4:8d:5c:1e:45:33:ef:da:dd:fb:04:fc:33:
         ac:2e:25:b2:5c:5d:cc:e6:ac:73:ac:b4:aa:12:60:aa:83:09:
         ba:83:d1:0a:31:87:69:17:b0:04:7d:c1:c8:bb:4f:6d:9a:d4:
         92:02:f6:16:ab:89:7f:bd:5c:84:d9:48:58:89:5e:21:ba:fa:
         d3:5e:10:4c:ec:98:17:52:2d:ed:f7:e2:81:09:aa:5b:aa:8e:
         99:c4:a1:5e:11:f5:82:55:02:e1:5c:bf:6e:5d:5a:ba:c7:7c:
         92:06:08:1b:89:16:0b:69:6d:b8:c2:46:ed:8a:ee:e3:5d:f5:
         43:09:d4:c1
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEgKc/OsKX0GrpENHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTgzNloXDTI1MDIyNzEzNTgzNlowLzEtMCsGA1UEAxMk
MDRiNTY1NzctNzA5Yy00ZWJjLTk5YTgtMDI1ZTMyNDVjOGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxfOtQB16SqIgsY+cGGqRA4SL9HYQmy2Nd05
t8u4yIwd5I3TsHf1dzrRdnmAnyHXoHxwL9WJSsPdrcPmx7lyJlByGq4flift3IZC
VjOEOAvP+9lDynT4z8uVuRthmq0WEDWx8EaD8ZC5Hd99dZ9IG6VFbnU55HMMuyD+
EAqRM84nfrcLCJNcx3xe7aAypUef+ubSfFv7czvH4OJGDtEEXSwWBr6DjjLAS16q
/ViVF90y8y5FJyaQJjcz+YFHMbksOymvD1x5Ji/M4++NFfeg3E/cUmKzZ8JvOABV
tvzk0wOZZqGczUAw59haFUEvB+eg58/OIMoZTI4VfT4E4OItIQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFE/L/dbfOVe4PYfMA7ANSki+R/TuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzEzYjgyOTQtYzg2YS0z
NzMxLWFiODEtMWZlOWU1MjAwNzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxwdHHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAXqFqKxtVjw2m2ThItZLf/ZhiI3vMkY0K5u6OcA4OvasDsdSpwyHV6
YjRNxRV7FR+zoA3vfdlbISQAHRQuz/xCdUGr6BDSvUBSczoHlIIFqyXU+djAk293
soCZuIOxrN6vDoivMraB+o5hy3e6Ok99to4YKQEOQYNp0mn+6SaE3vP6qNSNXB5F
M+/a3fsE/DOsLiWyXF3M5qxzrLSqEmCqgwm6g9EKMYdpF7AEfcHIu09tmtSSAvYW
q4l/vVyE2UhYiV4huvrTXhBM7JgXUi3t9+KBCapbqo6ZxKFeEfWCVQLhXL9uXVq6
x3ySBggbiRYLaW24wkbtiu7jXfVDCdTB
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:13:47 2025 by rpki-client