Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b943b150-d659-3584-8ecf-9c28540a390b.roa
File:                     b943b150-d659-3584-8ecf-9c28540a390b.roa (raw, json)
Hash identifier:          oVu4bWCEcJhUSw7UuPEFQsXZeUBuKvLyuM8QSME6anA=
Subject key identifier:   ED:D5:5B:E6:07:95:B3:DE:AA:46:7B:A1:6D:26:04:DB:CD:A3:9F:0E
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F4328584742044A66CB5FEBA13D658700
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b943b150-d659-3584-8ecf-9c28540a390b.roa
Signing time:             Wed 18 Sep 2024 18:51:57 +0000
ROA not before:           Wed 18 Sep 2024 18:51:57 +0000
ROA not after:            Tue 17 Dec 2024 19:51:57 +0000
asID:                     39600
IP address blocks:        199.255.214.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:04:4a:66:cb:5f:eb:a1:3d:65:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Sep 18 18:51:57 2024 GMT
            Not After : Dec 17 19:51:57 2024 GMT
        Subject: CN=d44212a7-791c-4cbc-a3ea-3e99543ae345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:d5:b0:10:ac:f4:ca:2f:52:5f:34:06:a8:
                    05:90:60:de:9f:9b:6c:1a:bf:7d:44:3f:7a:d6:68:
                    5e:e4:ab:a8:5a:a4:e0:1c:0a:2b:0e:98:c9:e7:8d:
                    fd:06:a8:97:4e:06:12:a9:2e:fe:d7:17:74:47:70:
                    0c:f2:f3:c9:3a:75:b1:d9:8c:c9:7d:b8:a4:d0:1a:
                    a5:0d:f8:97:c5:8e:2b:0c:35:5a:a5:c5:a0:32:0c:
                    42:4b:f5:53:ba:85:f8:9b:e9:8d:14:b4:2f:fb:b7:
                    c6:b0:35:01:0e:0d:d2:61:d0:dd:1e:80:d2:b9:0b:
                    7d:92:f5:31:3e:cb:e0:27:1b:50:6f:cc:df:f8:8d:
                    aa:35:55:d8:82:99:a8:b7:00:d8:ca:e3:8b:8b:ee:
                    11:de:e4:8c:f3:46:b9:c1:18:ed:5f:be:72:40:24:
                    20:0f:86:58:77:2a:a0:d2:e2:9d:72:b6:c4:c0:1b:
                    88:83:c1:70:f2:12:13:79:9b:81:0f:22:02:63:15:
                    af:d7:e0:3f:56:ee:32:28:fc:65:e4:cf:e8:87:d5:
                    9a:37:96:84:05:30:ae:66:f4:09:f6:1a:0c:62:2a:
                    b9:3d:b2:d9:62:c5:6d:54:fc:49:20:b4:fc:25:c7:
                    65:b1:e1:7c:ae:4d:cc:c4:79:bf:71:9b:46:da:12:
                    26:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D5:5B:E6:07:95:B3:DE:AA:46:7B:A1:6D:26:04:DB:CD:A3:9F:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b943b150-d659-3584-8ecf-9c28540a390b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:7b:75:3b:f0:ff:29:f1:78:27:1c:5e:31:fe:5f:9e:28:00:
         49:b2:a0:62:ff:29:6c:3e:ce:0f:40:7d:aa:8c:c0:6c:77:e6:
         83:e6:2b:84:72:7f:66:69:ad:30:d1:89:e3:46:8d:a6:f5:7f:
         cc:68:6f:a1:08:3b:c0:8f:d0:50:67:10:4c:45:fa:c4:c0:0e:
         a4:e0:80:30:12:34:ea:ba:0a:4b:9d:a4:61:b0:5f:d6:2d:be:
         e4:9f:ff:3a:7c:f7:c7:c9:e2:89:68:08:d8:7c:64:e9:f9:99:
         fd:47:9b:72:3c:af:bb:85:06:4a:ea:09:7b:29:8a:74:1b:88:
         03:4c:04:3d:d4:71:f8:aa:2a:ec:3d:f1:f8:ab:8b:6d:70:02:
         21:19:fe:42:0f:18:2c:b0:70:ae:3f:13:4d:da:1b:23:32:6e:
         68:84:6d:c4:fb:73:dd:e3:5c:a8:37:f4:b3:51:91:09:df:bc:
         aa:54:ac:c6:bd:31:5b:2a:17:56:b6:70:6e:c2:6a:f2:44:0e:
         7f:29:26:61:47:08:ef:8b:ff:2e:e7:e4:b9:a8:3a:ca:f7:f0:
         d8:38:1a:65:1d:52:ab:fc:ca:c6:40:b7:a1:30:f8:c0:42:04:
         37:20:b8:93:ab:02:c7:94:e4:17:ba:8e:c3:9f:83:9f:6a:fd:
         9c:ef:c4:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdCBEpmy1/roT1lhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjUxY2JmMjctMGRjZS00NjU3LWEzMTctN2M3ZDg2MjQ1
OTg2MB4XDTI0MDkxODE4NTE1N1oXDTI0MTIxNzE5NTE1N1owLzEtMCsGA1UEAxMk
ZDQ0MjEyYTctNzkxYy00Y2JjLWEzZWEtM2U5OTU0M2FlMzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziTVsBCs9MovUl80BqgFkGDen5tsGr99RD96
1mhe5KuoWqTgHAorDpjJ5439BqiXTgYSqS7+1xd0R3AM8vPJOnWx2YzJfbik0Bql
DfiXxY4rDDVapcWgMgxCS/VTuoX4m+mNFLQv+7fGsDUBDg3SYdDdHoDSuQt9kvUx
PsvgJxtQb8zf+I2qNVXYgpmotwDYyuOLi+4R3uSM80a5wRjtX75yQCQgD4ZYdyqg
0uKdcrbEwBuIg8Fw8hITeZuBDyICYxWv1+A/Vu4yKPxl5M/oh9WaN5aEBTCuZvQJ
9hoMYiq5PbLZYsVtVPxJILT8JcdlseF8rk3MxHm/cZtG2hImjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO3VW+YHlbPeqkZ7oW0mBNvNo58OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNTFj
YmYyNy0wZGNlLTQ2NTctYTMxNy03YzdkODYyNDU5ODYvYjk0M2IxNTAtZDY1OS0z
NTg0LThlY2YtOWMyODU0MGEzOTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjUxY2JmMjctMGRjZS00NjU3LWEz
MTctN2M3ZDg2MjQ1OTg2L2I1MWNiZjI3LTBkY2UtNDY1Ny1hMzE3LTdjN2Q4NjI0
NTk4Ni5jcmwwHwYDVR0jBBgwFoAUaRc4XP15VPQRWj0qU6i0ZpalNMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNTFjYmYyNy0wZGNlLTQ2NTctYTMxNy03Yzdk
ODYyNDU5ODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACB7dTvw/ynxeCccXjH+X54oAEmyoGL/KWw+zg9AfaqMwGx35oPmK4Ry
f2ZprTDRieNGjab1f8xob6EIO8CP0FBnEExF+sTADqTggDASNOq6CkudpGGwX9Yt
vuSf/zp898fJ4oloCNh8ZOn5mf1Hm3I8r7uFBkrqCXspinQbiANMBD3UcfiqKuw9
8firi21wAiEZ/kIPGCywcK4/E03aGyMybmiEbcT7c93jXKg39LNRkQnfvKpUrMa9
MVsqF1a2cG7CavJEDn8pJmFHCO+L/y7n5LmoOsr38Ng4GmUdUqv8ysZAt6Ew+MBC
BDcguJOrAseU5Be6jsOfg59q/ZzvxK4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:13 2025 by rpki-client