Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0f492e18-ffbb-38d1-b292-673521bbb103.roa
File:                     0f492e18-ffbb-38d1-b292-673521bbb103.roa (raw, json)
Hash identifier:          sW2nyllR0KrnFRwfYMofnx+z3xsiwZaxlTyb1zm6aW0=
Subject key identifier:   12:F7:EF:73:92:DC:10:15:2B:DF:2E:A1:3F:CE:D3:D5:98:27:73:F2
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858432BFB785C4F1CD8BE1ADD5A80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0f492e18-ffbb-38d1-b292-673521bbb103.roa
Signing time:             Sun 10 Sep 2023 02:18:38 +0000
ROA not before:           Sun 10 Sep 2023 02:18:38 +0000
ROA not after:            Sat 09 Dec 2023 03:18:38 +0000
asID:                     834
IP address blocks:        139.177.146.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:2b:fb:78:5c:4f:1c:d8:be:1a:dd:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 10 02:18:38 2023 GMT
            Not After : Dec  9 03:18:38 2023 GMT
        Subject: CN=e8b1a2c0-8a10-46af-a61b-a660baa9c378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ae:9f:e0:c4:97:e7:84:14:fe:9f:2e:c9:11:
                    a6:c6:3d:69:ab:ff:f4:31:d5:e5:da:21:07:8c:4e:
                    84:d8:79:ab:67:70:b5:e2:b4:1d:78:7a:13:a0:f3:
                    63:e6:a6:38:85:bb:e8:63:7b:37:1d:2d:ad:f7:19:
                    eb:c7:c4:09:2b:c2:e0:bd:26:d4:a7:0c:3c:58:e6:
                    55:46:67:d9:eb:02:11:2c:27:10:70:30:7f:a7:e5:
                    a1:13:0c:f8:4a:4f:7e:0d:4e:37:c0:e8:61:47:7a:
                    6d:ac:13:72:09:3e:8b:da:13:2b:67:a6:00:86:8a:
                    0e:19:cb:7f:84:a9:39:ca:a7:43:aa:bf:18:c3:40:
                    ac:a5:f4:4e:95:99:7a:81:f5:ed:f6:ce:3c:2b:c9:
                    28:54:f2:84:1e:a1:42:be:03:38:70:4f:30:18:6c:
                    39:89:23:ff:90:fc:c3:47:35:50:11:07:e2:a4:74:
                    c4:ae:4f:e8:85:17:e3:4c:44:c6:e9:ba:47:ec:e4:
                    3f:4f:62:cf:9e:9c:ee:f4:03:0f:70:40:e9:0d:70:
                    89:84:2d:98:44:0c:53:cd:5d:03:73:43:d4:5e:93:
                    fc:fc:4e:a8:3a:44:1b:b7:ee:3c:80:4d:cf:15:8e:
                    3a:4c:36:f1:fe:9b:a7:31:d2:ae:33:27:ac:bf:57:
                    37:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F7:EF:73:92:DC:10:15:2B:DF:2E:A1:3F:CE:D3:D5:98:27:73:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0f492e18-ffbb-38d1-b292-673521bbb103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a7:ed:3a:b6:d1:c8:c3:9a:d0:aa:83:0b:9a:34:7a:b3:72:
         ca:bc:c9:51:ee:3a:77:d7:91:88:79:73:f6:88:9e:b9:bb:f9:
         b3:8b:4b:b5:05:27:77:bd:b1:c0:e8:7b:68:d3:da:77:d0:e6:
         dd:83:39:28:e0:4a:ad:0b:41:a9:a8:15:8f:2f:b3:8c:28:c5:
         18:19:e7:eb:93:a6:4d:79:71:93:56:cc:63:7d:45:d2:b3:74:
         ae:5c:07:f6:df:b7:9e:8b:12:bd:e9:81:b5:9d:2b:03:e9:fb:
         fb:e4:09:b4:ad:61:08:e6:28:3b:96:47:98:56:c2:66:11:7c:
         2c:96:3e:d2:a7:5e:dd:4d:07:43:bc:5b:a3:b8:89:7c:0e:1f:
         37:4a:c9:47:77:d2:1a:a1:4f:16:83:1a:1b:0a:b3:4f:c9:33:
         d8:17:9c:03:06:db:40:a0:ac:20:55:9e:83:5d:a9:01:8d:8f:
         ea:dc:ba:3d:e5:d5:af:92:ba:20:8b:48:65:2a:ba:fb:62:00:
         b5:45:43:0d:b6:02:91:5b:07:b6:84:62:f6:ba:68:00:45:bb:
         75:f5:4d:ef:0d:b9:79:b9:ba:a6:66:ec:38:d1:4d:ee:92:61:
         b5:3d:6e:c7:51:9f:0f:f8:ec:09:15:62:fe:7b:a2:e7:f3:fa:
         4d:cc:94:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMr+3hcTxzYvhrdWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTIzMDkxMDAyMTgzOFoXDTIzMTIwOTAzMTgzOFowLzEtMCsGA1UEAxMk
ZThiMWEyYzAtOGExMC00NmFmLWE2MWItYTY2MGJhYTljMzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq6f4MSX54QU/p8uyRGmxj1pq//0MdXl2iEH
jE6E2HmrZ3C14rQdeHoToPNj5qY4hbvoY3s3HS2t9xnrx8QJK8LgvSbUpww8WOZV
RmfZ6wIRLCcQcDB/p+WhEwz4Sk9+DU43wOhhR3ptrBNyCT6L2hMrZ6YAhooOGct/
hKk5yqdDqr8Yw0CspfROlZl6gfXt9s48K8koVPKEHqFCvgM4cE8wGGw5iSP/kPzD
RzVQEQfipHTErk/ohRfjTETG6bpH7OQ/T2LPnpzu9AMPcEDpDXCJhC2YRAxTzV0D
c0PUXpP8/E6oOkQbt+48gE3PFY46TDbx/punMdKuMyesv1c3iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBL373OS3BAVK98uoT/O09WYJ3PyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMGY0OTJlMTgtZmZiYi0z
OGQxLWIyOTItNjczNTIxYmJiMTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOn7Tq20cjDmtCqgwuaNHqzcsq8yVHuOnfXkYh5c/aInrm7+bOLS7UF
J3e9scDoe2jT2nfQ5t2DOSjgSq0LQamoFY8vs4woxRgZ5+uTpk15cZNWzGN9RdKz
dK5cB/bft56LEr3pgbWdKwPp+/vkCbStYQjmKDuWR5hWwmYRfCyWPtKnXt1NB0O8
W6O4iXwOHzdKyUd30hqhTxaDGhsKs0/JM9gXnAMG20CgrCBVnoNdqQGNj+rcuj3l
1a+SuiCLSGUquvtiALVFQw22ApFbB7aEYva6aABFu3X1Te8NuXm5uqZm7DjRTe6S
YbU9bsdRnw/47AkVYv57oufz+k3MlKE=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:33:49 2025 by rpki-client