Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0946aba-d08c-314d-b93c-3a678091aa25.roa
File:                     d0946aba-d08c-314d-b93c-3a678091aa25.roa (raw, json)
Hash identifier:          rzz3j3WCkx1hSE5brlrC3/jFeJOaeKqQDfd1jvBmb80=
Subject key identifier:   23:D4:7A:9F:13:92:90:68:DF:D4:A4:35:A9:68:CF:49:B6:40:B2:45
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F4328584692DA154858BF3336EA927B80
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0946aba-d08c-314d-b93c-3a678091aa25.roa
Signing time:             Thu 18 Jul 2024 01:00:24 +0000
ROA not before:           Thu 18 Jul 2024 01:00:24 +0000
ROA not after:            Wed 16 Oct 2024 01:00:24 +0000
asID:                     13213
IP address blocks:        206.130.126.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:92:da:15:48:58:bf:33:36:ea:92:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Jul 18 01:00:24 2024 GMT
            Not After : Oct 16 01:00:24 2024 GMT
        Subject: CN=004b73e7-1278-49ef-b10c-42dca84e5ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1e:ba:8e:0d:e5:a2:af:77:a9:c8:2d:62:f5:
                    ac:5b:51:38:02:3e:49:de:5e:76:da:33:49:2c:90:
                    0c:ad:e2:df:a6:08:41:00:5f:79:36:dd:b7:b7:81:
                    18:52:31:f8:86:4d:15:f0:a6:6b:4b:56:6e:6e:c3:
                    d4:25:96:a5:ea:e4:97:f8:8f:60:ee:d5:d7:43:bd:
                    f7:10:12:bf:66:44:f4:f7:a4:22:23:1d:94:ae:c0:
                    9d:04:5a:e9:b8:d5:ef:26:3e:d6:95:bf:8e:29:60:
                    e7:20:01:4e:af:b8:d6:ac:a3:41:94:10:76:e7:22:
                    d7:aa:89:fb:12:6f:ee:a3:54:c0:ce:f3:34:ba:d8:
                    9f:60:34:e4:ca:2a:03:ab:e9:c5:32:14:6a:0b:21:
                    c7:ed:96:82:b4:28:db:35:f8:23:ac:fb:99:56:99:
                    fc:c9:0e:86:67:7d:99:c5:c3:9d:35:3f:69:35:c6:
                    af:09:4a:b5:c4:38:c5:f3:c3:7d:05:f9:77:72:ac:
                    a2:a7:a7:64:a3:df:91:49:47:9b:a1:71:21:f3:44:
                    0d:ba:d0:3b:75:2e:82:30:1d:ca:95:fc:c6:d0:2c:
                    09:9c:97:b3:7e:a8:4e:71:d6:89:2d:80:9a:83:9f:
                    d5:41:76:30:45:80:88:b7:39:90:99:66:6b:46:53:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D4:7A:9F:13:92:90:68:DF:D4:A4:35:A9:68:CF:49:B6:40:B2:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/d0946aba-d08c-314d-b93c-3a678091aa25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:98:0f:b1:a1:ef:d6:52:a1:e7:88:6f:56:1e:32:f1:dd:83:
         ea:d4:ea:24:87:bb:1c:94:1e:7e:59:64:93:d7:1e:29:c0:03:
         df:fe:d7:c2:48:ee:64:9a:4b:bb:7d:48:30:90:f6:8e:f3:0b:
         39:a2:ed:47:12:e7:d9:44:2f:04:47:82:2b:62:8c:ad:24:0c:
         bb:3f:b6:cf:06:7a:01:c9:e3:c2:55:c6:c5:0c:10:c1:4e:fa:
         de:0a:ce:88:f5:c4:10:ba:19:8a:ab:6c:04:29:40:f3:20:68:
         5e:e7:bb:b5:ba:ed:d6:8b:a3:4b:82:db:88:df:54:c9:01:01:
         2a:72:ac:2c:71:fe:4c:27:dd:03:f7:89:14:b3:8b:23:e5:b8:
         7c:0e:b7:aa:32:46:1b:85:4e:a3:45:b3:98:0e:cc:f8:72:23:
         14:e8:09:e9:fe:d8:b9:24:a4:63:1a:a2:ca:49:43:d5:e6:62:
         bd:86:cb:87:8d:d0:79:5b:ea:50:85:43:26:84:79:09:b6:24:
         26:55:9c:53:6d:7c:b4:28:9a:3a:53:7f:99:5e:c3:09:ed:36:
         7a:5d:9b:2a:70:f1:3a:48:9a:2b:00:0e:51:d8:39:79:c2:c8:
         84:93:74:96:f6:e9:83:41:8e:e2:9b:c1:b1:db:62:6c:88:22:
         38:63:e6:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEaS2hVIWL8zNuqSe4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5
YWFlMB4XDTI0MDcxODAxMDAyNFoXDTI0MTAxNjAxMDAyNFowLzEtMCsGA1UEAxMk
MDA0YjczZTctMTI3OC00OWVmLWIxMGMtNDJkY2E4NGU1Y2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox66jg3loq93qcgtYvWsW1E4Aj5J3l522jNJ
LJAMreLfpghBAF95Nt23t4EYUjH4hk0V8KZrS1ZubsPUJZal6uSX+I9g7tXXQ733
EBK/ZkT096QiIx2UrsCdBFrpuNXvJj7Wlb+OKWDnIAFOr7jWrKNBlBB25yLXqon7
Em/uo1TAzvM0utifYDTkyioDq+nFMhRqCyHH7ZaCtCjbNfgjrPuZVpn8yQ6GZ32Z
xcOdNT9pNcavCUq1xDjF88N9Bfl3cqyip6dko9+RSUeboXEh80QNutA7dS6CMB3K
lfzG0CwJnJezfqhOcdaJLYCag5/VQXYwRYCItzmQmWZrRlMuGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPUep8TkpBo39SkNaloz0m2QLJFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh
OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZDA5NDZhYmEtZDA4Yy0z
MTRkLWI5M2MtM2E2NzgwOTFhYTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh
OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl
OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh
ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzoJ+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACeYD7Gh79ZSoeeIb1YeMvHdg+rU6iSHuxyUHn5ZZJPXHinAA9/+18JI
7mSaS7t9SDCQ9o7zCzmi7UcS59lELwRHgitijK0kDLs/ts8GegHJ48JVxsUMEMFO
+t4Kzoj1xBC6GYqrbAQpQPMgaF7nu7W67daLo0uC24jfVMkBASpyrCxx/kwn3QP3
iRSziyPluHwOt6oyRhuFTqNFs5gOzPhyIxToCen+2LkkpGMaospJQ9XmYr2Gy4eN
0Hlb6lCFQyaEeQm2JCZVnFNtfLQomjpTf5lewwntNnpdmypw8TpImisADlHYOXnC
yISTdJb26YNBjuKbwbHbYmyIIjhj5uQ=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:04:06 2025 by rpki-client