Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8fd5237-a339-39ac-8d67-080c9f178eea.roa
File:                     e8fd5237-a339-39ac-8d67-080c9f178eea.roa (raw, json)
Hash identifier:          lgHknpV8t5X1q1IZMERa7Wg+sO7N8BduRA91moaNToY=
Subject key identifier:   56:DE:35:8E:11:39:4E:A7:A9:8C:0C:B9:13:2F:A4:8F:17:62:35:F3
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858463289A11EC09192C5AE9DEC40
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8fd5237-a339-39ac-8d67-080c9f178eea.roa
Signing time:             Thu 13 Jun 2024 13:00:34 +0000
ROA not before:           Thu 13 Jun 2024 13:00:34 +0000
ROA not after:            Wed 11 Sep 2024 13:00:34 +0000
asID:                     7029
IP address blocks:        71.30.72.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:32:89:a1:1e:c0:91:92:c5:ae:9d:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 13 13:00:34 2024 GMT
            Not After : Sep 11 13:00:34 2024 GMT
        Subject: CN=48a61429-6a73-4387-9249-3b3ddb375935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ae:e5:64:fa:25:b6:80:94:f3:30:56:e0:7f:
                    ee:ed:52:1e:fa:0a:f6:12:06:48:ef:37:f7:24:ea:
                    92:e9:fe:0a:13:57:1c:e7:eb:c1:d3:e8:0a:79:20:
                    51:4c:32:8a:11:2a:26:81:01:4b:a5:a4:d7:2e:83:
                    96:a3:79:e9:9f:6e:af:90:41:78:b0:0e:4f:8f:1a:
                    55:f9:88:95:52:26:d3:42:8a:cc:a9:4f:8f:0a:98:
                    9a:36:1b:56:25:d7:3b:a6:c1:38:f9:da:83:7e:d4:
                    8c:8c:ce:b6:f7:1f:2e:61:f9:ca:96:d8:c1:74:6f:
                    08:74:fb:88:8d:8a:3f:50:76:eb:e7:d7:81:a5:27:
                    f0:73:39:3b:26:95:f9:0f:03:54:7a:6a:be:c7:20:
                    9b:23:19:55:77:12:80:71:3e:93:36:b7:7e:30:08:
                    82:b1:ce:94:bc:e6:e3:b7:3c:8c:d2:58:69:60:0c:
                    a0:21:d1:35:ba:03:79:65:3a:6e:a7:60:7f:45:d0:
                    9f:b7:78:22:0b:ea:e5:17:95:db:30:6c:b6:67:b5:
                    8a:85:fe:ac:88:44:46:06:26:27:9b:fa:9a:ac:05:
                    40:40:02:3d:3d:91:b8:0b:4c:56:46:95:46:99:04:
                    7a:1f:7b:7f:f0:54:8e:14:5b:be:06:32:d5:1b:8a:
                    df:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DE:35:8E:11:39:4E:A7:A9:8C:0C:B9:13:2F:A4:8F:17:62:35:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8fd5237-a339-39ac-8d67-080c9f178eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.30.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:ae:04:b0:59:7f:4d:c1:a4:1a:97:5c:28:43:0f:da:c3:a7:
         7b:2a:f9:04:67:3d:11:72:34:22:27:f2:72:01:eb:55:3c:ff:
         dc:02:7d:f3:c1:5b:47:9a:45:fb:51:c4:5d:7d:14:10:68:e0:
         40:51:d3:3e:64:d0:ba:e3:94:07:ca:81:a8:99:63:87:a2:92:
         26:08:be:f7:9f:ed:07:12:a1:43:94:25:3d:14:c5:0f:56:53:
         df:4f:22:1e:25:67:bf:8c:59:8e:65:32:22:88:8d:ac:1c:b2:
         35:41:2e:64:67:a3:d8:a7:63:cb:81:23:e4:36:38:7a:e1:fe:
         eb:45:a1:d2:e4:f3:2b:b3:ea:cc:6f:c3:94:16:c7:86:2e:5b:
         7f:54:9f:67:c8:35:81:e4:d6:fb:4f:08:dd:03:25:df:6d:2f:
         15:2f:9d:e6:aa:eb:d5:7f:19:8c:42:c4:6d:c4:e7:48:fa:d7:
         a4:37:02:08:d5:37:bd:63:ab:c2:7f:c5:1b:9e:2d:a6:d3:6b:
         8d:10:58:43:d0:61:16:45:69:57:b2:62:e8:44:45:5f:25:30:
         d3:38:01:f8:c9:a1:ab:d3:84:6e:dd:66:80:12:f7:ab:46:c6:
         80:8b:5e:5b:4f:b4:d5:77:57:6a:83:10:a4:a1:ca:d3:f2:15:
         c4:e6:0d:d8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEYyiaEewJGSxa6d7EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MDYxMzEzMDAzNFoXDTI0MDkxMTEzMDAzNFowLzEtMCsGA1UEAxMk
NDhhNjE0MjktNmE3My00Mzg3LTkyNDktM2IzZGRiMzc1OTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq7lZPoltoCU8zBW4H/u7VIe+gr2EgZI7zf3
JOqS6f4KE1cc5+vB0+gKeSBRTDKKESomgQFLpaTXLoOWo3npn26vkEF4sA5PjxpV
+YiVUibTQorMqU+PCpiaNhtWJdc7psE4+dqDftSMjM629x8uYfnKltjBdG8IdPuI
jYo/UHbr59eBpSfwczk7JpX5DwNUemq+xyCbIxlVdxKAcT6TNrd+MAiCsc6UvObj
tzyM0lhpYAygIdE1ugN5ZTpup2B/RdCft3giC+rlF5XbMGy2Z7WKhf6siERGBiYn
m/qarAVAQAI9PZG4C0xWRpVGmQR6H3t/8FSOFFu+BjLVG4rf8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFbeNY4ROU6nqYwMuRMvpI8XYjXzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZThmZDUyMzctYTMzOS0z
OWFjLThkNjctMDgwYzlmMTc4ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx5IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKuBLBZf03BpBqXXChDD9rDp3sq+QRnPRFyNCIn8nIB61U8/9wCffPB
W0eaRftRxF19FBBo4EBR0z5k0LrjlAfKgaiZY4eikiYIvvef7QcSoUOUJT0UxQ9W
U99PIh4lZ7+MWY5lMiKIjawcsjVBLmRno9inY8uBI+Q2OHrh/utFodLk8yuz6sxv
w5QWx4YuW39Un2fINYHk1vtPCN0DJd9tLxUvneaq69V/GYxCxG3E50j616Q3AgjV
N71jq8J/xRueLabTa40QWEPQYRZFaVeyYuhERV8lMNM4AfjJoavThG7dZoAS96tG
xoCLXltPtNV3V2qDEKShytPyFcTmDdg=
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:11:36 2025 by rpki-client