Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/acca0229-5c7c-320d-83e9-c28a1d1272a4.roa
File:                     acca0229-5c7c-320d-83e9-c28a1d1272a4.roa (raw, json)
Hash identifier:          9/bPpmV0p4w+e5IbOcH/0d5p3O2bpXI3itG6B4iCyNI=
Subject key identifier:   21:60:2F:FD:72:FF:8E:C9:2E:5E:70:60:3F:52:7C:F7:6C:63:A3:F3
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285847DCC3519077F68D56C7264600
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/acca0229-5c7c-320d-83e9-c28a1d1272a4.roa
Signing time:             Wed 13 Nov 2024 05:11:20 +0000
ROA not before:           Wed 13 Nov 2024 05:11:20 +0000
ROA not after:            Tue 11 Feb 2025 05:11:20 +0000
asID:                     149242
IP address blocks:        137.59.62.0/24 maxlen: 24
                          137.59.63.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:dc:c3:51:90:77:f6:8d:56:c7:26:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Nov 13 05:11:20 2024 GMT
            Not After : Feb 11 05:11:20 2025 GMT
        Subject: CN=31b69acf-c645-4794-b08a-0410b92e19a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:ff:ae:6f:2f:82:72:aa:b3:07:59:7f:51:
                    cc:6d:27:80:d0:95:98:f5:ac:0d:1c:6c:65:72:8a:
                    fd:0b:f5:90:ac:4a:d0:23:96:7b:71:cf:6c:6a:32:
                    f6:79:72:27:ac:88:45:a2:ca:9d:89:b4:55:95:f6:
                    f6:c5:50:19:e4:de:c5:24:67:04:7f:dd:29:49:32:
                    f4:1c:8f:54:6f:db:0d:a6:43:91:26:90:a0:4f:d2:
                    38:35:76:e7:fd:b6:75:49:3e:1c:c1:34:56:49:f6:
                    bb:0e:10:6f:41:0b:08:51:17:2c:b7:19:d1:7f:30:
                    97:bd:3b:52:8a:fc:b2:1b:d3:b3:8d:4b:97:a0:88:
                    f9:e7:36:84:e4:97:d1:cc:c0:99:c8:62:f6:ac:30:
                    6a:fa:e2:18:07:70:07:ac:cc:6f:c9:c9:2a:25:0e:
                    ac:d4:d8:fe:08:5b:4d:1d:e4:6d:4e:93:fd:22:06:
                    2f:db:bf:3a:d8:ac:0e:ca:83:dc:12:e2:f2:dd:15:
                    e5:47:42:78:a1:b1:0b:08:4d:30:c8:8b:80:20:63:
                    23:7d:bb:0e:d8:a9:97:ad:20:5a:b2:5a:96:bd:6f:
                    2b:66:50:12:12:47:28:d1:71:b0:c2:3c:21:ec:21:
                    5a:17:86:5a:20:9c:20:93:76:91:8d:33:32:0e:34:
                    e9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:60:2F:FD:72:FF:8E:C9:2E:5E:70:60:3F:52:7C:F7:6C:63:A3:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/acca0229-5c7c-320d-83e9-c28a1d1272a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.59.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4b:c4:67:fb:c6:80:4c:33:d8:9f:27:da:ad:54:4a:b2:0e:
         56:e2:ce:42:c2:98:3c:f7:b8:10:b9:2a:49:16:30:b7:00:d6:
         84:d1:cc:2a:bd:a2:fb:f7:59:62:95:9e:f5:cb:fe:ef:6d:f2:
         db:92:af:86:ee:d3:ae:0b:09:b6:20:30:58:c0:70:32:03:9c:
         e3:32:35:a1:3b:b4:5d:fc:27:ee:ce:96:73:53:3d:6e:3e:0f:
         2a:29:b0:1e:f3:7c:9e:e1:86:88:62:30:57:ca:26:89:cf:a2:
         9d:8f:d4:0f:6f:fa:3a:ac:7e:29:79:b2:1d:b8:de:5d:09:df:
         b5:eb:85:3a:1f:70:74:8c:03:36:0b:c5:cd:0a:43:ff:35:f1:
         be:fe:a4:af:16:37:af:c9:49:2c:48:74:48:72:90:a2:28:d4:
         ed:e1:fc:56:7c:4a:88:77:69:9f:99:4d:53:67:05:44:03:4b:
         c4:e9:ce:8a:40:fe:a9:f5:b0:e6:17:c0:cd:30:22:33:d7:b9:
         a9:fe:56:a3:db:26:c0:36:46:9a:93:c8:84:74:44:3d:bb:05:
         e7:9e:53:ca:3a:45:d5:c3:e9:40:fd:8f:46:68:6e:23:b7:48:
         30:f2:7b:94:41:0d:36:c6:64:e5:50:0b:e1:1e:da:df:db:3a:
         8d:ce:a8:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcw1GQd/aNVscmRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTljMDUwYzgtYmQxZi00ZTQxLTkzMWYtMTZlYTdiOWVj
YWZhMB4XDTI0MTExMzA1MTEyMFoXDTI1MDIxMTA1MTEyMFowLzEtMCsGA1UEAxMk
MzFiNjlhY2YtYzY0NS00Nzk0LWIwOGEtMDQxMGI5MmUxOWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp23/rm8vgnKqswdZf1HMbSeA0JWY9awNHGxl
cor9C/WQrErQI5Z7cc9sajL2eXInrIhFosqdibRVlfb2xVAZ5N7FJGcEf90pSTL0
HI9Ub9sNpkORJpCgT9I4NXbn/bZ1ST4cwTRWSfa7DhBvQQsIURcstxnRfzCXvTtS
ivyyG9OzjUuXoIj55zaE5JfRzMCZyGL2rDBq+uIYB3AHrMxvyckqJQ6s1Nj+CFtN
HeRtTpP9IgYv27862KwOyoPcEuLy3RXlR0J4obELCE0wyIuAIGMjfbsO2KmXrSBa
slqWvW8rZlASEkco0XGwwjwh7CFaF4ZaIJwgk3aRjTMyDjTpCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCFgL/1y/47JLl5wYD9SfPdsY6PzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMw
NTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVhN2I5ZWNhZmEvYWNjYTAyMjktNWM3Yy0z
MjBkLTgzZTktYzI4YTFkMTI3MmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTljMDUwYzgtYmQxZi00ZTQxLTkz
MWYtMTZlYTdiOWVjYWZhLzE5YzA1MGM4LWJkMWYtNGU0MS05MzFmLTE2ZWE3Yjll
Y2FmYS5jcmwwHwYDVR0jBBgwFoAUgMASK73s01oy3eeuG/C5I0LAtzMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMwNTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVh
N2I5ZWNhZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiTs+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtLxGf7xoBMM9ifJ9qtVEqyDlbizkLCmDz3uBC5KkkWMLcA1oTRzCq9
ovv3WWKVnvXL/u9t8tuSr4bu064LCbYgMFjAcDIDnOMyNaE7tF38J+7OlnNTPW4+
DyopsB7zfJ7hhohiMFfKJonPop2P1A9v+jqsfil5sh243l0J37XrhTofcHSMAzYL
xc0KQ/818b7+pK8WN6/JSSxIdEhykKIo1O3h/FZ8Soh3aZ+ZTVNnBUQDS8TpzopA
/qn1sOYXwM0wIjPXuan+VqPbJsA2RpqTyIR0RD27BeeeU8o6RdXD6UD9j0ZobiO3
SDDye5RBDTbGZOVQC+Ee2t/bOo3OqFs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:04 2025 by rpki-client