Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2ca6e189-19b2-3f6b-b01a-8b6418aa5949.roa
File:                     2ca6e189-19b2-3f6b-b01a-8b6418aa5949.roa (raw, json)
Hash identifier:          kUvgUS9GEs+yNaPxQDqe1eBqY9e+26sKrS39hxK3Aak=
Subject key identifier:   96:A4:0E:23:E5:B9:2D:BC:64:CD:97:3B:51:D2:C9:1E:3A:14:CF:97
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285843954B8FA195761B61919C6798
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2ca6e189-19b2-3f6b-b01a-8b6418aa5949.roa
Signing time:             Tue 17 Oct 2023 19:39:53 +0000
ROA not before:           Tue 17 Oct 2023 19:39:53 +0000
ROA not after:            Mon 15 Jan 2024 20:39:53 +0000
asID:                     47890
IP address blocks:        140.228.16.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:95:4b:8f:a1:95:76:1b:61:91:9c:67:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct 17 19:39:53 2023 GMT
            Not After : Jan 15 20:39:53 2024 GMT
        Subject: CN=951a43c5-b69e-4867-ab1f-3e978660e2ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6b:b8:9b:6e:8f:00:75:4d:c8:44:a4:7c:7b:
                    37:5e:1d:12:bf:c8:4a:82:8d:b7:f3:d1:5f:8f:b2:
                    dc:47:87:ef:2c:a8:68:ee:f8:d3:4a:2e:93:94:a5:
                    8c:a4:28:2c:6c:39:b7:97:c5:21:db:ba:f7:13:24:
                    be:cf:13:6a:54:1d:b2:e3:30:29:bc:38:dc:8a:62:
                    82:db:70:9c:57:13:46:1f:f3:1d:e5:76:74:2c:c1:
                    5e:f6:b4:46:3d:7a:92:11:b9:de:6b:a0:31:81:09:
                    57:de:02:fd:be:31:2c:88:a2:6b:6a:3a:62:d7:83:
                    ed:81:be:dd:8e:74:22:90:78:d9:f7:e0:ea:13:05:
                    7b:61:3a:5a:e8:4f:a1:4d:ff:17:5c:d5:fe:d2:a7:
                    de:d1:4b:99:fb:ef:16:e2:11:02:ec:4c:8a:bd:84:
                    f5:07:e7:b3:1f:80:1d:21:ad:79:bf:41:62:7e:01:
                    c3:ec:c9:f4:40:24:68:ec:19:56:0b:29:f0:43:c4:
                    89:4f:f6:44:9b:7d:05:1c:a5:6f:ac:ce:d2:78:f3:
                    1b:2a:00:50:e4:e9:24:3b:a2:bb:13:3d:a5:b9:a5:
                    0e:6a:0c:70:49:9f:d4:a2:4f:7c:c7:0d:0d:c4:1d:
                    cf:e0:f3:62:96:f3:49:bf:ab:aa:fb:88:0e:5c:61:
                    ad:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A4:0E:23:E5:B9:2D:BC:64:CD:97:3B:51:D2:C9:1E:3A:14:CF:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/2ca6e189-19b2-3f6b-b01a-8b6418aa5949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:77:62:32:11:cc:fd:1d:59:ee:e0:76:92:8c:ea:97:02:00:
         21:45:1c:90:ea:28:d6:19:a9:12:00:df:35:25:5a:42:b8:58:
         51:25:c8:3f:a8:de:71:6d:f0:a3:71:53:4b:04:cc:69:f0:e8:
         49:0e:4f:36:f4:d1:6c:cc:5b:d0:8a:38:5e:8a:d9:37:d5:f3:
         c3:90:dc:aa:c0:f2:ae:36:36:82:40:30:a6:24:f6:7a:59:54:
         e9:b7:b3:6e:a0:e4:ba:87:3c:7e:6f:16:ff:02:0d:d7:51:2d:
         9d:79:c7:f4:9f:6e:3a:1b:2b:8b:82:0d:ab:eb:9c:c2:62:0e:
         12:79:b3:06:f8:3b:8b:5d:6b:f7:ba:05:95:00:83:d7:b1:a7:
         f4:3d:c2:2b:04:a9:c2:e0:fb:2d:05:3a:ab:2e:d2:82:92:6e:
         42:81:10:20:e5:9e:a3:d7:02:22:2e:2e:30:62:ad:7b:cd:62:
         b5:3f:27:f9:ef:24:3a:1e:23:a4:49:2f:ff:01:bb:9b:45:4a:
         57:cf:e3:29:a4:bb:f2:e6:fd:39:25:11:54:cd:a7:fa:b3:c2:
         ea:40:0a:f6:07:ac:31:4c:1c:10:01:f3:2a:e8:64:4c:5e:ef:
         29:73:36:82:a0:e4:f1:8a:c4:90:6c:31:a1:78:cd:f6:85:6f:
         ff:30:b3:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEOVS4+hlXYbYZGcZ5gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTIzMTAxNzE5Mzk1M1oXDTI0MDExNTIwMzk1M1owLzEtMCsGA1UEAxMk
OTUxYTQzYzUtYjY5ZS00ODY3LWFiMWYtM2U5Nzg2NjBlMmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGu4m26PAHVNyESkfHs3Xh0Sv8hKgo2389Ff
j7LcR4fvLKho7vjTSi6TlKWMpCgsbDm3l8Uh27r3EyS+zxNqVB2y4zApvDjcimKC
23CcVxNGH/Md5XZ0LMFe9rRGPXqSEbnea6AxgQlX3gL9vjEsiKJrajpi14Ptgb7d
jnQikHjZ9+DqEwV7YTpa6E+hTf8XXNX+0qfe0UuZ++8W4hEC7EyKvYT1B+ezH4Ad
Ia15v0FifgHD7Mn0QCRo7BlWCynwQ8SJT/ZEm30FHKVvrM7SePMbKgBQ5OkkO6K7
Ez2luaUOagxwSZ/Uok98xw0NxB3P4PNilvNJv6uq+4gOXGGt8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJakDiPluS28ZM2XO1HSyR46FM+XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMmNhNmUxODktMTliMi0z
ZjZiLWIwMWEtOGI2NDE4YWE1OTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG53YjIRzP0dWe7gdpKM6pcCACFFHJDqKNYZqRIA3zUlWkK4WFElyD+o
3nFt8KNxU0sEzGnw6EkOTzb00WzMW9CKOF6K2TfV88OQ3KrA8q42NoJAMKYk9npZ
VOm3s26g5LqHPH5vFv8CDddRLZ15x/SfbjobK4uCDavrnMJiDhJ5swb4O4tda/e6
BZUAg9exp/Q9wisEqcLg+y0FOqsu0oKSbkKBECDlnqPXAiIuLjBirXvNYrU/J/nv
JDoeI6RJL/8Bu5tFSlfP4ymku/Lm/TklEVTNp/qzwupACvYHrDFMHBAB8yroZExe
7ylzNoKg5PGKxJBsMaF4zfaFb/8ws5A=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:29 2025 by rpki-client