Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9300522d-2fce-386d-a11f-9d25b0bda37b.roa
File:                     9300522d-2fce-386d-a11f-9d25b0bda37b.roa (raw, json)
Hash identifier:          2NXxLxdJN46A4CptnX0YP49NJYazFIk5MpnFVaBodLg=
Subject key identifier:   A3:1F:8C:6B:10:BD:DC:DF:36:72:4C:84:56:C2:5B:53:56:A1:E6:F0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285846E0262F63FB3656685D15CC00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9300522d-2fce-386d-a11f-9d25b0bda37b.roa
Signing time:             Wed 14 Aug 2024 17:31:01 +0000
ROA not before:           Wed 14 Aug 2024 17:31:01 +0000
ROA not after:            Tue 12 Nov 2024 18:31:01 +0000
asID:                     54004
IP address blocks:        198.89.126.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e0:26:2f:63:fb:36:56:68:5d:15:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 14 17:31:01 2024 GMT
            Not After : Nov 12 18:31:01 2024 GMT
        Subject: CN=e1142ea9-5660-4962-bfec-e1ed895d220f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:ec:8d:75:29:47:cf:18:27:36:70:9f:c8:
                    a6:17:69:6a:8c:84:c6:30:e5:b4:c9:0f:d3:4a:ca:
                    ca:41:cc:a0:1e:60:32:8c:8e:74:ef:a7:dd:f7:d4:
                    a0:bd:26:ff:23:13:d7:02:ce:3e:cd:ea:33:c9:e7:
                    12:02:e8:30:c3:8f:bd:18:0d:ef:6b:99:ec:f9:7f:
                    83:71:45:32:15:9f:b4:93:b3:cc:1b:df:b7:39:0c:
                    5c:78:80:86:eb:b4:5d:86:be:2a:1d:a1:07:57:32:
                    72:d2:de:c8:3d:db:09:bf:8c:10:af:b8:a6:b8:98:
                    e1:d0:54:b3:0f:ab:96:82:bd:13:c7:74:e5:3f:55:
                    04:e6:07:3a:e6:33:23:f8:3f:38:c9:2a:ea:95:c5:
                    57:4a:15:73:93:e4:f9:75:da:46:f9:8c:df:58:39:
                    81:27:a6:04:ba:d6:a7:88:b2:68:cb:83:27:8f:74:
                    78:b8:10:b0:cd:46:b2:c5:4e:06:0e:06:89:2c:a6:
                    24:07:c5:ce:e4:96:fb:66:ab:d3:d4:cc:ad:98:35:
                    e1:7c:bf:e7:1d:35:5b:c2:8f:c7:85:5b:6b:9d:19:
                    dd:26:e6:79:92:14:3d:fd:4d:03:3a:96:21:e9:38:
                    37:ac:69:e4:3b:96:7f:4b:e9:cc:a3:b9:4f:77:36:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1F:8C:6B:10:BD:DC:DF:36:72:4C:84:56:C2:5B:53:56:A1:E6:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9300522d-2fce-386d-a11f-9d25b0bda37b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:67:d8:36:26:35:37:89:e5:37:03:02:86:b5:c8:87:26:9b:
         8c:b9:ab:95:6b:27:8c:c0:36:b9:8f:72:59:cf:03:36:05:20:
         3f:a7:12:f6:fb:8c:97:f7:3a:96:c7:3d:20:b4:57:18:ab:77:
         f2:02:82:07:81:cf:23:f8:b8:de:01:78:61:2e:6d:2f:75:0b:
         27:49:f5:de:0b:55:18:fd:77:bf:1d:0a:44:c9:fa:3b:e8:71:
         c2:bf:aa:95:83:11:dc:ad:11:44:87:76:4d:33:21:9e:4e:b7:
         f6:c3:a3:7b:26:4e:f3:41:5a:90:84:c6:5f:20:a0:5c:59:27:
         04:52:fe:f0:22:04:c1:c8:28:f1:44:19:16:ac:e1:f9:ae:eb:
         58:e6:57:8b:fc:61:12:32:05:09:a6:4b:d7:c6:73:7b:2f:97:
         7c:a8:84:00:3b:f8:bb:bc:27:a2:d3:17:fb:5d:30:59:cb:9c:
         82:b4:2d:58:18:0a:8c:c8:62:2e:9e:b8:a4:39:12:dd:a1:9d:
         dc:fe:73:13:4f:e2:3d:1e:9b:a2:0d:59:f2:e3:f0:93:dd:18:
         b6:55:0d:ff:d6:71:7a:fb:94:1d:c6:a9:7c:8c:07:91:55:d8:
         08:f7:f9:10:ea:27:cf:ac:17:f3:bd:cb:3d:7b:3c:38:ca:55:
         8a:52:20:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbgJi9j+zZWaF0VzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDgxNDE3MzEwMVoXDTI0MTExMjE4MzEwMVowLzEtMCsGA1UEAxMk
ZTExNDJlYTktNTY2MC00OTYyLWJmZWMtZTFlZDg5NWQyMjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcfsjXUpR88YJzZwn8imF2lqjITGMOW0yQ/T
SsrKQcygHmAyjI5076fd99SgvSb/IxPXAs4+zeozyecSAugww4+9GA3va5ns+X+D
cUUyFZ+0k7PMG9+3OQxceICG67Rdhr4qHaEHVzJy0t7IPdsJv4wQr7imuJjh0FSz
D6uWgr0Tx3TlP1UE5gc65jMj+D84ySrqlcVXShVzk+T5ddpG+YzfWDmBJ6YEutan
iLJoy4Mnj3R4uBCwzUayxU4GDgaJLKYkB8XO5Jb7ZqvT1MytmDXhfL/nHTVbwo/H
hVtrnRndJuZ5khQ9/U0DOpYh6Tg3rGnkO5Z/S+nMo7lPdza8rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMfjGsQvdzfNnJMhFbCW1NWoebwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOTMwMDUyMmQtMmZjZS0z
ODZkLWExMWYtOWQyNWIwYmRhMzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxll+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANtn2DYmNTeJ5TcDAoa1yIcmm4y5q5VrJ4zANrmPclnPAzYFID+nEvb7
jJf3OpbHPSC0Vxird/ICggeBzyP4uN4BeGEubS91CydJ9d4LVRj9d78dCkTJ+jvo
ccK/qpWDEdytEUSHdk0zIZ5Ot/bDo3smTvNBWpCExl8goFxZJwRS/vAiBMHIKPFE
GRas4fmu61jmV4v8YRIyBQmmS9fGc3svl3yohAA7+Lu8J6LTF/tdMFnLnIK0LVgY
CozIYi6euKQ5Et2hndz+cxNP4j0em6INWfLj8JPdGLZVDf/WcXr7lB3GqXyMB5FV
2Aj3+RDqJ8+sF/O9yz17PDjKVYpSIEw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:38 2025 by rpki-client