Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f23a4ceb-2766-3276-8d81-adfdda633f63.roa
File:                     f23a4ceb-2766-3276-8d81-adfdda633f63.roa (raw, json)
Hash identifier:          yjh03fz8iwxa9Fv5DLLNrC6nmAWrRvoDKVww1VwJ39U=
Subject key identifier:   D3:D2:8E:76:41:64:26:89:93:81:03:CB:85:61:56:7C:21:B6:92:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73F7FBE4083F2F07B7BF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f23a4ceb-2766-3276-8d81-adfdda633f63.roa
Signing time:             Fri 29 Nov 2024 13:58:38 +0000
ROA not before:           Fri 29 Nov 2024 13:58:38 +0000
ROA not after:            Thu 27 Feb 2025 13:58:38 +0000
asID:                     396826
IP address blocks:        199.7.71.30/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:f7:fb:e4:08:3f:2f:07:b7:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:38 2024 GMT
            Not After : Feb 27 13:58:38 2025 GMT
        Subject: CN=f5202c28-0c06-4063-831e-dbe4d309d4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:d8:76:9e:d7:f3:42:61:1d:90:5e:3c:0c:
                    71:79:ab:ab:79:08:3f:3f:a5:68:aa:7d:65:dd:7a:
                    35:07:26:b4:b5:cb:ed:dd:58:6c:7a:33:56:58:33:
                    f9:19:97:0b:9f:ee:86:99:d8:3b:c8:7b:f9:f3:35:
                    a7:cd:07:14:98:f6:80:62:b0:dd:4d:b4:c4:2b:18:
                    d7:3c:22:e1:d4:2f:31:34:b4:cd:fc:5e:25:8b:14:
                    2e:16:52:b4:e4:05:d4:9e:03:c2:17:87:d9:9e:9b:
                    83:46:6d:55:9e:30:9e:aa:f4:8d:8e:f1:ad:38:62:
                    12:63:2e:ad:09:5c:41:d4:a6:f9:83:a3:39:b0:92:
                    64:2a:12:ef:c1:f2:54:16:d9:1c:29:c8:4b:f0:5f:
                    0e:fb:a1:3f:d0:25:5b:93:54:d8:8a:53:a6:07:d2:
                    d2:f9:ef:bd:65:54:4f:99:3d:7b:e3:a6:29:0b:ec:
                    89:80:ce:e5:7c:a9:ba:28:a8:86:c4:a3:70:4c:37:
                    17:e2:3d:54:32:f3:c9:90:21:86:2d:eb:53:16:28:
                    96:26:68:71:f1:d8:2f:b4:e0:25:ca:b7:ab:f9:8f:
                    94:7f:18:37:4a:a3:06:b5:6d:48:57:d1:b0:11:b8:
                    7e:4f:1e:99:25:d2:eb:cd:49:f6:cb:17:62:5c:63:
                    ea:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D2:8E:76:41:64:26:89:93:81:03:CB:85:61:56:7C:21:B6:92:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f23a4ceb-2766-3276-8d81-adfdda633f63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:cc:a5:f3:a3:da:fa:b5:b6:db:68:c2:1d:be:e8:ec:b4:80:
         47:5e:ad:8c:e6:55:b4:48:30:4f:38:33:1b:26:10:dd:91:4f:
         4f:67:cb:d5:fb:10:5b:14:94:15:35:ba:9b:a2:db:cb:2a:3d:
         77:2b:93:44:e7:40:76:35:5c:00:e8:ce:f4:e0:54:b3:f2:96:
         de:c3:64:b0:ba:b9:5a:21:ff:ac:10:b0:b6:0c:45:f2:89:34:
         b5:35:e3:70:4c:58:0c:bb:61:d2:30:7c:83:c7:91:a5:9c:25:
         86:67:0d:c6:e8:e0:89:ce:98:a7:8f:84:62:6b:64:26:44:05:
         33:6d:cf:13:9d:69:a4:ca:fb:1a:a5:c3:67:8e:b5:6c:a4:75:
         69:45:02:e5:33:10:5f:74:94:95:98:32:9b:ed:1f:c1:d2:cc:
         7c:89:7f:94:3f:e5:1f:65:49:33:1f:c3:81:57:ad:67:9b:32:
         5e:2f:44:c9:11:9a:29:fd:06:70:5c:f2:e6:79:f0:7a:7b:f7:
         2f:c4:83:89:ab:64:db:fb:8c:fe:66:ca:5b:63:90:fe:39:e2:
         29:9a:5f:98:17:0b:54:5c:9e:16:73:72:22:10:48:f5:d5:cf:
         d2:42:13:02:fc:d1:47:a7:7b:83:75:da:87:d2:78:4c:ab:c5:
         51:74:c7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----