Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/83148c87-0b39-3717-b5d1-78648af95caf.roa
File:                     83148c87-0b39-3717-b5d1-78648af95caf.roa (raw, json)
Hash identifier:          tCNAHtnJkVplP5xqeXiI5e7X0wXaaQGyW5o+IFpFY64=
Subject key identifier:   B0:86:F8:80:4F:F4:B7:A7:0E:63:83:F4:37:DB:F8:7A:56:71:64:0A
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285842C3657D87C8F211FD53F0EA80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/83148c87-0b39-3717-b5d1-78648af95caf.roa
Signing time:             Thu 03 Aug 2023 15:12:23 +0000
ROA not before:           Thu 03 Aug 2023 15:12:23 +0000
ROA not after:            Wed 01 Nov 2023 15:12:23 +0000
asID:                     26324
IP address blocks:        98.100.124.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c3:65:7d:87:c8:f2:11:fd:53:f0:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  3 15:12:23 2023 GMT
            Not After : Nov  1 15:12:23 2023 GMT
        Subject: CN=73e69197-812e-4863-8ab4-c3233a6b5399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:2f:2e:0b:5b:d3:23:14:6f:b7:23:8b:11:
                    98:e5:56:ed:09:c8:f9:ef:5b:ee:b0:3f:87:a5:00:
                    26:42:6b:f6:df:97:f5:23:80:60:7b:1b:90:8b:99:
                    08:79:fa:e7:95:21:c8:e7:19:de:db:20:ed:b4:9e:
                    ce:af:47:27:c4:04:56:62:54:43:35:b9:ca:b7:92:
                    e0:01:28:f6:ae:2d:3c:5b:53:d0:22:bc:b6:71:b7:
                    f7:b6:01:41:2a:0b:c3:01:c7:95:3d:19:37:d7:fe:
                    ad:a3:3a:f9:1f:57:1a:bf:b2:af:9d:3e:f1:ee:e1:
                    53:8e:c2:f5:02:f4:72:a6:c3:06:ea:e8:9e:46:94:
                    0c:94:12:82:90:12:d5:3c:9a:50:78:62:d1:42:ff:
                    7d:1a:1c:da:db:87:68:29:7d:a3:38:dd:98:18:ab:
                    09:1e:2d:2d:63:10:a7:c2:82:82:e9:62:2b:88:64:
                    7a:9f:c2:4e:1e:72:69:46:f7:67:e9:16:3d:19:4d:
                    64:46:66:8b:a6:4b:a1:39:1d:87:9a:f2:a7:8a:02:
                    7b:40:da:d5:94:cb:bc:32:12:12:99:74:8f:65:31:
                    95:4c:68:37:44:74:49:ab:4c:34:76:7d:82:d8:73:
                    27:19:7e:cd:dd:06:2b:d9:40:7e:6a:db:1b:0b:25:
                    d3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:86:F8:80:4F:F4:B7:A7:0E:63:83:F4:37:DB:F8:7A:56:71:64:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/83148c87-0b39-3717-b5d1-78648af95caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.100.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:0a:74:88:8e:4f:21:be:0e:b0:7c:44:5d:6d:90:f5:16:82:
         e1:b8:66:fd:7d:52:bb:7b:e4:0f:04:a9:be:42:bf:9d:da:1a:
         b9:72:24:d4:bb:df:0b:e6:b3:6b:6c:84:31:60:a5:18:d6:48:
         b1:91:27:86:0d:d5:2c:59:df:d4:0b:a0:c4:1b:86:46:52:dc:
         23:9f:3c:51:22:ee:69:59:97:8e:d5:47:36:0c:7f:59:4f:0e:
         33:08:da:db:1d:08:08:09:17:f5:ff:a1:5f:d8:cf:47:d2:d1:
         65:15:1f:c4:74:23:6f:70:ab:bf:16:3b:ec:e7:b4:53:3d:8c:
         6c:5a:97:02:2d:77:70:d5:2f:a6:d4:fe:5e:a4:ff:67:a7:ff:
         7d:f7:e6:65:b8:60:5e:31:dd:74:cc:a1:fd:44:5c:83:d9:11:
         01:e0:f2:98:a2:ca:c3:eb:22:48:20:d9:c2:f9:de:0b:ed:32:
         c5:22:a7:d0:65:ee:ff:7c:eb:b0:69:f0:c9:86:66:19:68:ee:
         6b:f7:e0:8f:d5:cd:a7:03:e3:8a:16:ef:48:60:f3:3a:1d:4a:
         56:f4:b2:fd:7a:cf:ff:82:06:c9:bc:98:4a:55:0b:87:00:9a:
         eb:3c:19:57:f0:b9:3d:19:a5:b1:f2:55:bb:43:e8:84:5e:67:
         32:4a:e0:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELDZX2HyPIR/VPw6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTIzMDgwMzE1MTIyM1oXDTIzMTEwMTE1MTIyM1owLzEtMCsGA1UEAxMk
NzNlNjkxOTctODEyZS00ODYzLThhYjQtYzMyMzNhNmI1Mzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzIvLgtb0yMUb7cjixGY5VbtCcj571vusD+H
pQAmQmv235f1I4BgexuQi5kIefrnlSHI5xne2yDttJ7Or0cnxARWYlRDNbnKt5Lg
ASj2ri08W1PQIry2cbf3tgFBKgvDAceVPRk31/6tozr5H1cav7KvnT7x7uFTjsL1
AvRypsMG6uieRpQMlBKCkBLVPJpQeGLRQv99Ghza24doKX2jON2YGKsJHi0tYxCn
woKC6WIriGR6n8JOHnJpRvdn6RY9GU1kRmaLpkuhOR2HmvKnigJ7QNrVlMu8MhIS
mXSPZTGVTGg3RHRJq0w0dn2C2HMnGX7N3QYr2UB+atsbCyXT7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLCG+IBP9LenDmOD9Dfb+HpWcWQKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvODMxNDhjODctMGIzOS0z
NzE3LWI1ZDEtNzg2NDhhZjk1Y2FmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYmR8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE0KdIiOTyG+DrB8RF1tkPUWguG4Zv19Urt75A8Eqb5Cv53aGrlyJNS7
3wvms2tshDFgpRjWSLGRJ4YN1SxZ39QLoMQbhkZS3COfPFEi7mlZl47VRzYMf1lP
DjMI2tsdCAgJF/X/oV/Yz0fS0WUVH8R0I29wq78WO+zntFM9jGxalwItd3DVL6bU
/l6k/2en/3335mW4YF4x3XTMof1EXIPZEQHg8piiysPrIkgg2cL53gvtMsUip9Bl
7v9867Bp8MmGZhlo7mv34I/VzacD44oW70hg8zodSlb0sv16z/+CBsm8mEpVC4cA
mus8GVfwuT0ZpbHyVbtD6IReZzJK4Lo=
-----END CERTIFICATE-----
Generated at Fri Apr 18 08:07:13 2025 by rpki-client