Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/8ab19703-e7f5-3cab-92b3-fb5abde2c51a.roa
File:                     8ab19703-e7f5-3cab-92b3-fb5abde2c51a.roa (raw, json)
Hash identifier:          3NQ+HX2+4lqbiuzsJ4vehUEjDButlEV3F2JJ/zkkFkM=
Subject key identifier:   90:11:1A:33:F5:8D:ED:41:15:6B:E7:ED:14:33:BF:C8:03:A4:36:44
Certificate issuer:       /CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
Certificate serial:       010D0C9F432858483004109CF3408F410F89FCC0
Authority key identifier: 22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/8ab19703-e7f5-3cab-92b3-fb5abde2c51a.roa
Signing time:             Fri 13 Dec 2024 00:53:53 +0000
ROA not before:           Fri 13 Dec 2024 00:53:53 +0000
ROA not after:            Wed 12 Mar 2025 23:53:53 +0000
asID:                     8100
IP address blocks:        45.45.212.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:30:04:10:9c:f3:40:8f:41:0f:89:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
        Validity
            Not Before: Dec 13 00:53:53 2024 GMT
            Not After : Mar 12 23:53:53 2025 GMT
        Subject: CN=a484eed3-c338-45f9-93ef-4baaa718f0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cc:64:51:a8:ce:20:fc:9d:b8:be:79:07:56:
                    5e:b9:c7:47:9f:78:9f:3b:04:a5:fc:92:e1:6c:3d:
                    7d:f1:69:a1:10:55:6a:e4:a1:41:23:b1:48:6c:aa:
                    86:a2:c3:48:01:48:e2:96:56:43:f3:b2:b2:8b:e5:
                    d6:89:c0:f4:dd:68:f7:5b:77:90:1f:e3:85:2d:6e:
                    5e:5b:c7:1c:3e:59:43:90:7b:f9:ad:8b:85:ae:6e:
                    0d:db:3f:40:26:5c:d8:19:80:43:e2:81:db:2f:b7:
                    78:f5:ae:0f:6d:0b:fa:76:0a:2e:ee:a3:7a:b7:15:
                    32:22:22:24:a2:65:2a:ff:34:01:6f:b4:af:6b:69:
                    ee:79:2e:ac:64:3d:bb:b1:cc:00:66:01:e6:f6:86:
                    21:04:4c:77:b1:aa:5a:45:31:0b:00:85:4c:9e:7a:
                    4d:c9:b2:96:c1:83:49:c6:1f:3a:d7:85:c6:a8:3f:
                    71:fa:a1:af:c4:d2:c9:a9:15:53:c9:d7:47:73:79:
                    52:ed:fe:17:2d:bc:94:06:5f:c0:a5:72:5b:c1:a9:
                    df:94:9d:58:38:f1:9b:01:8f:0c:c5:a9:53:3c:da:
                    25:e8:c5:49:64:bf:3f:16:d2:44:24:eb:bc:ba:04:
                    73:18:85:92:6b:da:3e:4d:a0:cb:5f:3b:2a:27:12:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:11:1A:33:F5:8D:ED:41:15:6B:E7:ED:14:33:BF:C8:03:A4:36:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/8ab19703-e7f5-3cab-92b3-fb5abde2c51a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.crl

            X509v3 Authority Key Identifier:
                keyid:22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:6d:9f:90:c4:78:57:f9:0e:d9:fa:d1:b4:d9:04:d3:db:bc:
         7e:86:ff:ed:e7:f6:b1:ea:3b:19:04:9d:75:ba:c9:93:14:70:
         f5:4c:d8:a2:8b:5c:12:13:70:3c:b9:11:64:51:73:bb:6b:b9:
         c6:25:23:30:c5:77:e5:14:34:0c:26:ca:5f:66:e6:a6:8e:12:
         dc:32:df:d2:5b:8b:6b:3e:7f:24:af:4e:1c:35:59:0c:e9:80:
         36:cb:28:1e:c3:1e:de:1f:06:9e:a7:82:7c:8a:4c:79:e2:1b:
         24:cf:f6:e7:53:59:ce:9a:eb:62:ab:f5:70:10:02:73:7a:87:
         dd:e1:e9:31:b2:cb:f8:56:1a:3e:43:f0:db:f4:82:ee:9c:58:
         88:d4:26:ee:bc:e2:20:b5:4f:10:7c:de:61:c1:e3:1f:fd:1b:
         42:2b:6d:1e:74:1f:44:18:ca:d8:40:7a:0d:52:d9:f7:6e:bd:
         2b:e3:1c:4f:60:6d:ca:6b:91:c0:03:83:2c:90:28:07:b9:04:
         d6:61:cb:e8:0e:40:6e:61:d6:30:11:39:20:51:13:4a:fd:1b:
         38:e9:dc:33:bb:0c:3f:ec:65:4d:82:bc:28:d6:64:91:0d:90:
         51:30:cc:f8:4c:d7:63:f8:f5:df:b4:17:a2:76:cd:b3:87:e1:
         b3:b8:2a:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgwBBCc80CPQQ+J/MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY2ZDdhOTgtYjAyYS00MDc0LWFmZDItOWVlN2NjYjJi
ZGJlMB4XDTI0MTIxMzAwNTM1M1oXDTI1MDMxMjIzNTM1M1owLzEtMCsGA1UEAxMk
YTQ4NGVlZDMtYzMzOC00NWY5LTkzZWYtNGJhYWE3MThmMGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMxkUajOIPyduL55B1ZeucdHn3ifOwSl/JLh
bD198WmhEFVq5KFBI7FIbKqGosNIAUjillZD87Kyi+XWicD03Wj3W3eQH+OFLW5e
W8ccPllDkHv5rYuFrm4N2z9AJlzYGYBD4oHbL7d49a4PbQv6dgou7qN6txUyIiIk
omUq/zQBb7Sva2nueS6sZD27scwAZgHm9oYhBEx3sapaRTELAIVMnnpNybKWwYNJ
xh8614XGqD9x+qGvxNLJqRVTyddHc3lS7f4XLbyUBl/ApXJbwanflJ1YOPGbAY8M
xalTPNol6MVJZL8/FtJEJOu8ugRzGIWSa9o+TaDLXzsqJxIu1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJARGjP1je1BFWvn7RQzv8gDpDZEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lZjZk
N2E5OC1iMDJhLTQwNzQtYWZkMi05ZWU3Y2NiMmJkYmUvOGFiMTk3MDMtZTdmNS0z
Y2FiLTkyYjMtZmI1YWJkZTJjNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZWY2ZDdhOTgtYjAyYS00MDc0LWFm
ZDItOWVlN2NjYjJiZGJlL2VmNmQ3YTk4LWIwMmEtNDA3NC1hZmQyLTllZTdjY2Iy
YmRiZS5jcmwwHwYDVR0jBBgwFoAUImFPcPc5a4VdJ1sfD62rAXtVpygwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lZjZkN2E5OC1iMDJhLTQwNzQtYWZkMi05ZWU3
Y2NiMmJkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALS3UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKVtn5DEeFf5Dtn60bTZBNPbvH6G/+3n9rHqOxkEnXW6yZMUcPVM2KKL
XBITcDy5EWRRc7trucYlIzDFd+UUNAwmyl9m5qaOEtwy39Jbi2s+fySvThw1WQzp
gDbLKB7DHt4fBp6ngnyKTHniGyTP9udTWc6a62Kr9XAQAnN6h93h6TGyy/hWGj5D
8Nv0gu6cWIjUJu684iC1TxB83mHB4x/9G0IrbR50H0QYythAeg1S2fduvSvjHE9g
bcprkcADgyyQKAe5BNZhy+gOQG5h1jAROSBRE0r9Gzjp3DO7DD/sZU2CvCjWZJEN
kFEwzPhM12P49d+0F6J2zbOH4bO4Kg4=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:05:00 2025 by rpki-client