Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ead43aa8-b11a-3692-a5c9-61294489cbef.roa
File:                     ead43aa8-b11a-3692-a5c9-61294489cbef.roa (raw, json)
Hash identifier:          EveJOtX2AbY5jOL1xINUHuy0RaKeN0SKqJ6vlqpFNGQ=
Subject key identifier:   65:7F:87:3D:64:09:6C:E1:A2:A3:7C:A6:BF:5A:11:EB:87:A9:F8:92
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73F5186DD455694C6FC140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ead43aa8-b11a-3692-a5c9-61294489cbef.roa
Signing time:             Fri 29 Nov 2024 13:58:37 +0000
ROA not before:           Fri 29 Nov 2024 13:58:37 +0000
ROA not after:            Thu 27 Feb 2025 13:58:37 +0000
asID:                     36630
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:f5:18:6d:d4:55:69:4c:6f:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:37 2024 GMT
            Not After : Feb 27 13:58:37 2025 GMT
        Subject: CN=ec73a264-f78a-4efc-970b-02fd2d9964bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:38:b9:e0:f5:c9:ba:b4:67:36:09:8d:a9:
                    b2:0d:cc:6e:2b:1c:1e:ef:7c:ff:50:77:c1:0d:b9:
                    36:d8:f1:cf:be:5e:ed:14:91:26:1c:89:e3:c5:0c:
                    1a:1c:b3:6d:b9:16:ee:e5:fb:66:f7:e2:fc:33:9e:
                    02:a5:2f:45:21:6b:6b:e0:1e:94:da:5f:fb:c5:68:
                    ff:5d:79:14:97:c4:0c:3d:d5:cf:00:45:4a:25:37:
                    1d:de:dc:58:8c:86:99:59:75:22:21:bb:06:c2:8d:
                    49:13:2a:b1:ee:93:5e:2d:6f:a9:09:0b:e4:f2:b4:
                    36:ed:b0:0d:05:f7:41:7d:02:b2:48:b7:94:61:99:
                    0d:be:f0:a0:a9:4d:0d:a9:df:b1:e4:d9:29:53:28:
                    60:b5:28:62:2b:7d:b5:7f:15:56:d9:8c:49:df:61:
                    c1:8b:91:3b:b5:89:16:f4:f1:b0:20:16:f0:81:29:
                    17:66:1a:34:e0:2e:62:af:0c:9b:5b:e4:d7:d8:d0:
                    97:7d:a2:af:4d:1d:b5:25:bb:a5:6b:5f:8b:9b:11:
                    20:65:fd:b0:1c:87:5c:76:f7:3c:df:75:c6:b6:1d:
                    f0:85:9d:d3:4d:40:c1:70:3b:83:a5:73:67:2d:8b:
                    bb:ec:1a:3b:02:77:58:3d:2e:81:47:15:87:41:db:
                    ea:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7F:87:3D:64:09:6C:E1:A2:A3:7C:A6:BF:5A:11:EB:87:A9:F8:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ead43aa8-b11a-3692-a5c9-61294489cbef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:5c:95:57:1b:47:bc:69:7a:e5:aa:5a:30:c7:23:0a:8a:6b:
         76:41:09:86:27:cc:e9:45:66:36:4f:c8:b6:31:5d:c2:c4:22:
         cb:4a:d6:17:27:a0:97:10:d7:9c:47:95:53:84:94:bf:39:c5:
         3f:bd:04:39:bc:ea:60:37:af:7b:04:04:14:75:1f:7b:0d:76:
         b0:22:45:a2:2b:ac:41:f1:af:d2:c9:d8:21:99:76:a0:e7:f6:
         a7:88:cc:d4:65:80:41:b4:fd:b5:57:4f:ef:a0:46:a5:a3:6d:
         fa:ce:94:87:70:b0:0a:d0:06:28:e2:e7:a0:41:c6:19:4f:aa:
         8c:56:2a:32:3a:38:ee:14:0f:56:ae:22:5c:89:15:9f:bd:4e:
         ac:94:0d:67:29:b1:01:93:ee:ae:25:7a:85:01:a9:d3:20:a6:
         0f:aa:75:14:58:66:c3:4b:64:5a:4c:f1:19:86:9e:e1:ae:10:
         70:aa:97:00:52:23:89:53:64:36:4b:17:e0:42:3b:9f:26:5c:
         99:98:c8:1d:24:c4:40:63:fa:d9:df:ec:c2:c9:0e:99:a7:f0:
         2d:c9:fe:07:d0:bf:cf:b0:c8:82:52:44:ee:c5:29:67:df:9b:
         a8:4e:5f:60:70:99:bc:ce:f3:21:39:44:65:42:33:75:fb:a6:
         96:3f:dc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:56 2025 by rpki-client