Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/30b4554c-b512-33ae-bfba-82acf470a536.roa
File:                     30b4554c-b512-33ae-bfba-82acf470a536.roa (raw, json)
Hash identifier:          LmWg3t6mOVtTL56UMo3SEUuDGTcAZCNQZu+nuQB2dkA=
Subject key identifier:   0D:46:6B:9B:D2:72:12:DC:CC:8D:C7:06:B8:16:A3:E6:1C:32:A0:6C
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F43285844D08CFD88077D7D2D19BA5400
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/30b4554c-b512-33ae-bfba-82acf470a536.roa
Signing time:             Wed 07 Feb 2024 17:51:21 +0000
ROA not before:           Wed 07 Feb 2024 17:51:21 +0000
ROA not after:            Tue 07 May 2024 16:51:21 +0000
asID:                     0
IP address blocks:        199.119.137.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d0:8c:fd:88:07:7d:7d:2d:19:ba:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: Feb  7 17:51:21 2024 GMT
            Not After : May  7 16:51:21 2024 GMT
        Subject: CN=22bbac8c-1229-4311-84d1-61d9da3d7bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d8:e1:af:3e:14:3a:60:da:bc:c9:2d:1f:91:
                    8c:c7:1f:93:1e:7f:a5:e1:30:90:39:10:2a:68:13:
                    70:ba:b2:aa:7c:11:5d:c2:9d:b4:b9:dc:96:67:f2:
                    85:d6:85:9e:5a:c5:79:af:72:30:d7:aa:31:0c:a6:
                    04:3e:20:50:c1:07:af:f3:87:0a:92:70:90:af:5a:
                    9c:c2:ad:c0:f0:b7:1d:4a:25:25:8a:9d:68:fa:0c:
                    ca:a0:1e:8f:a2:29:80:b0:65:dd:1c:d1:1a:3c:50:
                    76:04:13:30:7e:cb:43:d1:6b:f4:65:b0:bd:87:9b:
                    9f:e2:28:23:02:54:8f:c0:9d:cd:09:c4:f0:47:77:
                    50:80:8b:d0:12:70:dd:13:71:63:34:ae:de:ce:64:
                    b8:ad:5b:09:bf:a7:d4:47:c3:66:ef:d0:06:d5:d6:
                    33:36:15:c7:2b:16:b1:ac:7d:32:e7:45:b7:23:5c:
                    d9:96:1e:f7:36:a1:b4:5b:c3:30:29:a7:e9:1b:cf:
                    87:9b:e1:57:bc:5b:b7:0e:b3:22:e0:52:4f:8b:a5:
                    96:76:58:e0:61:39:22:76:9f:d3:5f:21:16:ce:96:
                    41:24:a8:1f:95:81:55:1d:3c:ba:45:eb:23:83:47:
                    94:05:31:87:f4:4e:aa:7e:fb:2b:0a:02:53:88:0d:
                    52:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:46:6B:9B:D2:72:12:DC:CC:8D:C7:06:B8:16:A3:E6:1C:32:A0:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/30b4554c-b512-33ae-bfba-82acf470a536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c0:2b:58:67:d8:6d:c8:6b:86:46:eb:9d:b4:5a:ef:f5:29:
         39:f0:35:0b:40:4f:fc:a8:ab:28:21:0b:29:ca:35:f6:d4:3f:
         e0:47:7d:56:b6:af:1e:11:15:d1:54:ad:30:f2:f2:0a:3a:f7:
         5b:28:87:60:0b:ec:17:10:85:af:2f:9c:e3:3d:8b:75:d1:87:
         dc:1b:bc:0e:a1:69:ea:bb:3a:a7:47:b7:ca:d5:35:ea:65:ff:
         49:d8:d1:8e:68:f3:38:87:36:8e:75:fb:14:2e:11:4b:a9:8f:
         59:8e:28:72:12:13:61:ef:e1:17:f9:c5:dd:cb:3f:d8:d6:69:
         a8:ed:79:fd:a6:ee:fc:bc:4b:82:54:4d:52:03:0d:4b:3d:de:
         1c:b9:9c:a7:b7:1a:ba:8d:3b:52:a0:8f:ce:de:11:af:59:5f:
         ca:39:2a:2d:90:89:25:84:ff:92:01:f9:f7:1b:a2:a6:f5:f2:
         7f:e5:55:2b:58:43:ee:07:5e:ae:22:63:48:5f:01:50:5a:aa:
         60:56:64:0d:a9:94:23:7a:6a:51:57:33:73:a7:26:d4:eb:1a:
         f4:f5:10:c1:d1:b1:76:6c:bc:7c:00:6f:92:a3:57:36:ec:cc:
         ea:d1:dd:be:e7:c2:71:5d:74:e0:91:21:41:cc:01:fe:a6:38:
         96:ea:15:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETQjP2IB319LRm6VAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDhmODUzNGYtNTdjZC00NWJhLWJmYTQtY2U2MDg0MjQ2
M2E0MB4XDTI0MDIwNzE3NTEyMVoXDTI0MDUwNzE2NTEyMVowLzEtMCsGA1UEAxMk
MjJiYmFjOGMtMTIyOS00MzExLTg0ZDEtNjFkOWRhM2Q3YmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNjhrz4UOmDavMktH5GMxx+THn+l4TCQORAq
aBNwurKqfBFdwp20udyWZ/KF1oWeWsV5r3Iw16oxDKYEPiBQwQev84cKknCQr1qc
wq3A8LcdSiUlip1o+gzKoB6PoimAsGXdHNEaPFB2BBMwfstD0Wv0ZbC9h5uf4igj
AlSPwJ3NCcTwR3dQgIvQEnDdE3FjNK7ezmS4rVsJv6fUR8Nm79AG1dYzNhXHKxax
rH0y50W3I1zZlh73NqG0W8MwKafpG8+Hm+FXvFu3DrMi4FJPi6WWdljgYTkidp/T
XyEWzpZBJKgflYFVHTy6Resjg0eUBTGH9E6qfvsrCgJTiA1S5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA1Ga5vSchLczI3HBrgWo+YcMqBsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4
NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYwODQyNDYzYTQvMzBiNDU1NGMtYjUxMi0z
M2FlLWJmYmEtODJhY2Y0NzBhNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDhmODUzNGYtNTdjZC00NWJhLWJm
YTQtY2U2MDg0MjQ2M2E0LzQ4Zjg1MzRmLTU3Y2QtNDViYS1iZmE0LWNlNjA4NDI0
NjNhNC5jcmwwHwYDVR0jBBgwFoAU6FPdCXJVOiBqm33uUEZSal9iZggwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80OGY4NTM0Zi01N2NkLTQ1YmEtYmZhNC1jZTYw
ODQyNDYzYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx3eJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFnAK1hn2G3Ia4ZG6520Wu/1KTnwNQtAT/yoqyghCynKNfbUP+BHfVa2
rx4RFdFUrTDy8go691soh2AL7BcQha8vnOM9i3XRh9wbvA6haeq7OqdHt8rVNepl
/0nY0Y5o8ziHNo51+xQuEUupj1mOKHISE2Hv4Rf5xd3LP9jWaajtef2m7vy8S4JU
TVIDDUs93hy5nKe3GrqNO1Kgj87eEa9ZX8o5Ki2QiSWE/5IB+fcboqb18n/lVStY
Q+4HXq4iY0hfAVBaqmBWZA2plCN6alFXM3OnJtTrGvT1EMHRsXZsvHwAb5KjVzbs
zOrR3b7nwnFddOCRIUHMAf6mOJbqFYM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:25 2024 by rpki-client on console-ams.rpki-client.org