Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/30b5156c-9c3e-3d71-8f80-1b9dc5d119c0.roa
File:                     30b5156c-9c3e-3d71-8f80-1b9dc5d119c0.roa (raw, json)
Hash identifier:          Q91HBPA8f/c6Mav/ciS3Eok4W4DTR0DoXwgCpBu+C3k=
Subject key identifier:   21:E1:73:C2:24:B0:0C:CD:6B:5B:BE:53:69:8B:A5:3C:0E:51:A5:14
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285844DAB71DFB0111025072A54080
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/30b5156c-9c3e-3d71-8f80-1b9dc5d119c0.roa
Signing time:             Sun 11 Feb 2024 09:14:19 +0000
ROA not before:           Sun 11 Feb 2024 09:14:19 +0000
ROA not after:            Sat 11 May 2024 08:14:19 +0000
asID:                     397630
IP address blocks:        130.254.113.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:da:b7:1d:fb:01:11:02:50:72:a5:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 11 09:14:19 2024 GMT
            Not After : May 11 08:14:19 2024 GMT
        Subject: CN=c3db88de-d0d6-4e6f-9660-3af289373177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:cb:ee:5e:e0:2d:1a:0a:2b:10:07:c2:3d:
                    ba:d4:c9:22:cb:f2:fe:b8:0d:b5:f1:b1:56:c7:d0:
                    6d:f6:fb:e3:a0:e9:39:85:1a:df:42:bb:fb:cb:43:
                    3b:f9:a6:19:61:29:10:72:54:d0:5b:89:80:f1:33:
                    45:76:81:90:b0:41:0f:40:ec:30:55:0e:75:31:f4:
                    05:42:22:69:95:10:99:3d:8d:eb:0d:37:bc:57:71:
                    6f:00:93:82:20:a8:13:db:56:67:bd:c5:ee:dd:29:
                    f4:5c:57:a2:8d:f0:7b:9a:ed:3e:0b:41:17:a0:32:
                    44:8e:37:f5:58:28:9b:a0:3a:93:79:01:69:ed:c1:
                    46:6e:90:fd:2f:de:18:38:70:96:61:8d:f3:3d:b7:
                    81:f2:b6:f9:50:df:b7:17:f2:44:e9:fd:55:a2:1d:
                    42:47:eb:66:6d:10:91:19:99:18:5b:7f:a1:a8:1e:
                    67:76:0a:1a:51:7e:86:3e:fc:55:f5:37:04:28:07:
                    f5:34:03:0d:55:b4:24:62:97:67:af:55:2b:4f:66:
                    23:6f:52:55:02:df:d9:c4:cd:d8:1d:f0:81:f4:5e:
                    d0:c6:dd:6a:66:27:e1:88:79:a6:ba:0f:a5:05:87:
                    ea:d9:53:e1:41:b7:94:4b:3e:19:fc:9f:db:d4:ab:
                    aa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E1:73:C2:24:B0:0C:CD:6B:5B:BE:53:69:8B:A5:3C:0E:51:A5:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/30b5156c-9c3e-3d71-8f80-1b9dc5d119c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:72:98:ad:18:35:39:02:2b:68:58:fc:b7:ef:86:09:8a:7d:
         44:2d:c6:53:65:4c:92:32:76:89:3e:41:33:a3:e3:dd:37:e1:
         78:e1:88:a1:5b:61:45:f6:54:9f:e4:7b:5b:c4:60:49:aa:37:
         f3:7b:10:9e:9b:25:3d:bf:a2:d2:de:66:fc:9c:dc:84:ab:e6:
         6c:9a:94:d5:7e:56:75:d1:5f:e4:1d:98:2b:d1:1b:99:d3:f4:
         e2:05:aa:de:c7:46:ea:4c:8f:e3:b7:7a:33:11:f1:2f:5d:ff:
         ec:83:42:ed:f0:d5:eb:71:6d:df:c7:0c:c5:60:a1:9c:54:1b:
         09:b2:01:77:0c:48:f7:6b:4e:8e:12:86:22:69:44:a2:26:8e:
         a7:d3:12:b5:4c:80:99:bd:e1:90:d3:a6:ba:fa:9a:7a:08:c3:
         20:93:a3:3c:5f:b5:50:b3:67:ed:4f:8b:66:07:04:51:83:35:
         03:13:18:1d:87:49:e5:b1:5f:84:11:bc:e6:26:91:c2:71:6a:
         70:52:44:b6:80:69:37:82:19:a7:a0:73:de:b9:5b:83:5a:49:
         6a:2f:55:ca:4e:eb:0d:5e:da:42:f3:6f:b1:35:8c:0c:95:eb:
         05:dd:5e:d1:c4:cb:f1:3c:7c:8b:b8:2e:dd:83:b1:e1:20:bd:
         11:87:3a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----