Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e94dc356-8ec3-3c40-a19b-6176372c4013.roa
File:                     e94dc356-8ec3-3c40-a19b-6176372c4013.roa (raw, json)
Hash identifier:          2JIGQR/Itza94dix91GnVDj0+PoVN4UWl2NqEUXaKBU=
Subject key identifier:   83:1F:DD:F7:56:38:2B:7B:E5:0F:98:54:92:0E:23:69:86:D7:A4:F7
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285846D8CC10F95E622C8643AFCBC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e94dc356-8ec3-3c40-a19b-6176372c4013.roa
Signing time:             Mon 12 Aug 2024 02:18:47 +0000
ROA not before:           Mon 12 Aug 2024 02:18:47 +0000
ROA not after:            Sun 10 Nov 2024 03:18:47 +0000
asID:                     834
IP address blocks:        66.78.45.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d8:cc:10:f9:5e:62:2c:86:43:af:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug 12 02:18:47 2024 GMT
            Not After : Nov 10 03:18:47 2024 GMT
        Subject: CN=4fcfb369-4335-4ad4-9fb6-85aba8d44a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:22:af:93:98:4c:39:f1:b4:df:56:9c:c0:
                    34:d8:2e:7d:f7:1e:99:1c:2e:87:8c:31:68:f2:dd:
                    2c:30:81:b7:c2:8f:33:66:e2:ed:f7:3d:9f:22:38:
                    ac:57:ed:8e:08:44:47:ca:55:50:d8:fd:5c:3d:41:
                    6a:a9:da:d1:4d:53:5b:ab:33:9f:fd:cc:c3:cf:a9:
                    e9:d5:c7:b9:8a:84:1c:44:da:ef:25:17:26:3e:0f:
                    9f:c4:e0:5d:c9:b2:40:d9:78:95:6e:7c:92:fe:5f:
                    86:f5:4d:2a:25:69:d2:42:a1:c6:75:78:2f:61:22:
                    fe:2a:34:ba:27:25:39:fd:1a:55:5f:4e:ed:c4:f7:
                    19:98:86:03:42:81:e7:94:09:7e:11:d5:82:5a:87:
                    d2:c4:73:6a:33:56:b0:af:e7:0e:b8:ab:d1:f4:fb:
                    18:4b:49:45:94:df:e7:e9:04:4c:bf:1a:d3:e9:a1:
                    75:a7:fe:37:65:57:0d:10:f4:d1:88:58:bb:d8:7b:
                    37:33:d1:51:41:f2:7f:88:84:7c:61:5f:92:88:51:
                    29:ea:1d:f9:40:1c:56:c3:7c:83:c3:40:12:0e:20:
                    2b:98:c1:d5:73:69:69:6b:ec:5e:e5:2f:81:c2:fe:
                    64:c8:eb:bc:5b:fd:79:c3:2f:66:c3:37:23:40:56:
                    2a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1F:DD:F7:56:38:2B:7B:E5:0F:98:54:92:0E:23:69:86:D7:A4:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e94dc356-8ec3-3c40-a19b-6176372c4013.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:2b:59:13:d6:87:3b:c1:ed:03:5a:a3:4f:d7:78:ba:a9:46:
         5c:f5:d9:c2:23:04:2c:91:3a:50:bd:2f:85:5e:d1:1d:07:1c:
         7a:39:6b:c5:30:36:fc:d0:46:da:a7:b7:38:f1:a5:36:4f:d7:
         6b:93:20:7a:65:9f:6a:e6:df:aa:89:84:74:f6:8e:42:a1:6e:
         4e:0e:2e:be:69:ef:04:da:a2:75:79:8f:1f:15:9a:8e:b0:48:
         d6:5b:ad:37:0f:ff:e7:61:a8:37:dc:d1:91:f0:9a:ec:9f:9f:
         8a:51:df:72:a4:eb:c1:ab:2d:28:31:12:07:48:98:1e:e7:43:
         ba:0f:e9:ed:a9:46:ec:45:3e:ee:84:9e:5c:76:0c:97:35:d8:
         6a:ef:b5:68:e4:10:62:29:2c:ea:be:54:09:e9:11:56:72:18:
         5b:8a:ec:d8:73:cb:79:51:fe:5d:ab:c7:48:e4:22:c7:4c:44:
         68:ca:92:4d:7c:f1:14:eb:24:31:db:36:a0:36:d7:f8:b2:ee:
         36:aa:70:49:9b:c1:5a:99:0c:9c:d7:51:52:50:33:e0:c9:38:
         48:0b:b4:07:01:b1:ff:e6:12:ce:5e:d5:cc:b5:a6:3e:0b:d7:
         9a:70:30:81:3c:76:7e:98:f7:32:ce:1b:83:5e:ad:fa:de:5c:
         f9:5e:9c:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbYzBD5XmIshkOvy8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDgxMjAyMTg0N1oXDTI0MTExMDAzMTg0N1owLzEtMCsGA1UEAxMk
NGZjZmIzNjktNDMzNS00YWQ0LTlmYjYtODVhYmE4ZDQ0YTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vAir5OYTDnxtN9WnMA02C599x6ZHC6HjDFo
8t0sMIG3wo8zZuLt9z2fIjisV+2OCERHylVQ2P1cPUFqqdrRTVNbqzOf/czDz6np
1ce5ioQcRNrvJRcmPg+fxOBdybJA2XiVbnyS/l+G9U0qJWnSQqHGdXgvYSL+KjS6
JyU5/RpVX07txPcZmIYDQoHnlAl+EdWCWofSxHNqM1awr+cOuKvR9PsYS0lFlN/n
6QRMvxrT6aF1p/43ZVcNEPTRiFi72Hs3M9FRQfJ/iIR8YV+SiFEp6h35QBxWw3yD
w0ASDiArmMHVc2lpa+xe5S+Bwv5kyOu8W/15wy9mwzcjQFYqdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIMf3fdWOCt75Q+YVJIOI2mG16T3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZTk0ZGMzNTYtOGVjMy0z
YzQwLWExOWItNjE3NjM3MmM0MDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQk4tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQrWRPWhzvB7QNao0/XeLqpRlz12cIjBCyROlC9L4Ve0R0HHHo5a8Uw
NvzQRtqntzjxpTZP12uTIHpln2rm36qJhHT2jkKhbk4OLr5p7wTaonV5jx8Vmo6w
SNZbrTcP/+dhqDfc0ZHwmuyfn4pR33Kk68GrLSgxEgdImB7nQ7oP6e2pRuxFPu6E
nlx2DJc12GrvtWjkEGIpLOq+VAnpEVZyGFuK7Nhzy3lR/l2rx0jkIsdMRGjKkk18
8RTrJDHbNqA21/iy7jaqcEmbwVqZDJzXUVJQM+DJOEgLtAcBsf/mEs5e1cy1pj4L
15pwMIE8dn6Y9zLOG4NerfreXPlenJI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:37 2025 by rpki-client