Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/8dea2d13-85dd-379b-aded-9e4408002e7a.roa
File:                     8dea2d13-85dd-379b-aded-9e4408002e7a.roa (raw, json)
Hash identifier:          dTC5bAy27Ed1csU66elSXY2Gc4NgSPaSeYodBxqk9IU=
Subject key identifier:   13:0D:71:68:68:A2:3C:09:1E:47:E9:09:0A:52:C9:ED:03:91:F4:5B
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F43285838BB8A66393627376A0314AD80
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/8dea2d13-85dd-379b-aded-9e4408002e7a.roa
Signing time:             Mon 25 Jan 2021 05:00:00 +0000
ROA not before:           Mon 25 Jan 2021 05:00:00 +0000
ROA not after:            Sun 30 Apr 2023 04:00:00 +0000
asID:                     36445
IP address blocks:        192.131.249.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:bb:8a:66:39:36:27:37:6a:03:14:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: Jan 25 05:00:00 2021 GMT
            Not After : Apr 30 04:00:00 2023 GMT
        Subject: CN=30f18e45-f7b5-4d00-b9d5-59498c1833cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:0d:35:ba:89:7a:65:00:ab:83:57:97:8d:
                    4b:bd:03:85:cb:4c:e7:d7:55:b3:6e:e9:4b:3e:6e:
                    3a:e5:d3:3b:7c:7d:73:5e:15:aa:d5:82:c1:2e:da:
                    7d:60:d3:35:74:ba:6c:51:61:1f:a7:b8:17:58:2d:
                    d2:85:3f:67:91:fd:9e:6d:d4:e0:9b:1e:36:43:bc:
                    f5:74:0a:87:56:17:60:a3:fa:d5:05:34:96:f7:c3:
                    9d:32:45:2e:cc:77:fe:9e:da:88:c1:5f:eb:a0:c5:
                    68:6f:8e:bd:7e:87:93:9e:5f:01:54:cb:4b:24:ca:
                    4e:f8:75:ed:ce:cb:f1:55:79:10:f6:06:d8:b1:ab:
                    75:ce:d4:42:23:5c:9d:1c:c0:1a:50:51:8e:c8:c5:
                    b1:ef:33:00:8f:6c:a2:0b:a8:29:94:14:d9:74:4a:
                    dc:5c:eb:64:f1:8d:ed:1e:86:0b:80:d9:f0:c9:5b:
                    b5:bf:1b:7c:e9:6f:99:e6:19:75:96:d8:f7:0a:4f:
                    fa:02:29:15:76:6f:33:36:74:bb:b8:51:6e:ad:d0:
                    a3:4b:3d:be:ab:40:43:73:69:25:b1:72:72:4b:35:
                    24:18:63:39:82:ed:d8:bb:63:47:28:f2:19:2c:6a:
                    f7:6b:2b:fc:7e:35:2e:94:bc:3a:ab:64:dd:b4:97:
                    42:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0D:71:68:68:A2:3C:09:1E:47:E9:09:0A:52:C9:ED:03:91:F4:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/8dea2d13-85dd-379b-aded-9e4408002e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a5:22:24:9f:34:66:a7:66:30:63:78:85:74:89:3a:8c:f1:
         30:4d:67:75:40:2f:ff:c1:77:ff:78:e6:f0:bb:52:a9:b3:9c:
         6f:12:a8:5a:0d:59:aa:9c:b3:61:80:49:23:99:3c:2d:ba:dd:
         28:e2:72:9b:cb:88:5b:9a:cc:9e:e3:b9:38:c9:6a:41:3f:c6:
         83:f3:b7:d7:89:5f:bb:13:c3:57:f8:3e:d2:76:e9:2a:fd:4e:
         e3:b0:e9:09:ad:3f:f7:f2:fc:95:98:b0:bd:63:a8:61:72:c3:
         e3:1a:84:39:d5:39:b0:61:8c:77:dc:ac:45:3c:4b:f5:6e:7f:
         d8:75:ea:eb:b5:e0:8a:dd:cc:95:b6:e1:ab:71:ed:25:07:b0:
         65:83:c2:65:56:88:dd:05:c8:d8:6d:2d:65:9f:b3:ff:0f:95:
         e8:79:4f:98:26:7f:0c:75:78:b9:be:bd:34:d5:f3:b8:81:99:
         d7:23:fa:fd:77:cc:7c:4e:c5:03:e9:93:b9:0e:4b:ce:c4:07:
         f3:b7:92:37:ad:87:3a:44:18:7e:24:38:4e:f9:d5:c4:5a:8a:
         4f:be:0e:3f:b9:00:6c:52:00:a4:6b:3c:f4:a1:37:31:a9:ea:
         86:e6:16:39:ef:b9:83:07:df:36:6b:08:fb:67:e9:02:78:ce:
         bb:6d:73:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDi7imY5Nic3agMUrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0
Zjg0MB4XDTIxMDEyNTA1MDAwMFoXDTIzMDQzMDA0MDAwMFowLzEtMCsGA1UEAxMk
MzBmMThlNDUtZjdiNS00ZDAwLWI5ZDUtNTk0OThjMTgzM2NmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQQNNbqJemUAq4NXl41LvQOFy0zn11WzbulL
Pm465dM7fH1zXhWq1YLBLtp9YNM1dLpsUWEfp7gXWC3ShT9nkf2ebdTgmx42Q7z1
dAqHVhdgo/rVBTSW98OdMkUuzHf+ntqIwV/roMVob469foeTnl8BVMtLJMpO+HXt
zsvxVXkQ9gbYsat1ztRCI1ydHMAaUFGOyMWx7zMAj2yiC6gplBTZdErcXOtk8Y3t
HoYLgNnwyVu1vxt86W+Z5hl1ltj3Ck/6AikVdm8zNnS7uFFurdCjSz2+q0BDc2kl
sXJySzUkGGM5gu3Yu2NHKPIZLGr3ayv8fjUulLw6q2TdtJdCjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMNcWhoojwJHkfpCQpSye0DkfRbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz
ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvOGRlYTJkMTMtODVkZC0z
NzliLWFkZWQtOWU0NDA4MDAyZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx
MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj
NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0
ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIP5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACylIiSfNGanZjBjeIV0iTqM8TBNZ3VAL//Bd/945vC7UqmznG8SqFoN
Waqcs2GASSOZPC263SjicpvLiFuazJ7juTjJakE/xoPzt9eJX7sTw1f4PtJ26Sr9
TuOw6QmtP/fy/JWYsL1jqGFyw+MahDnVObBhjHfcrEU8S/Vuf9h16uu14IrdzJW2
4atx7SUHsGWDwmVWiN0FyNhtLWWfs/8Pleh5T5gmfwx1eLm+vTTV87iBmdcj+v13
zHxOxQPpk7kOS87EB/O3kjethzpEGH4kOE751cRaik++Dj+5AGxSAKRrPPShNzGp
6obmFjnvuYMH3zZrCPtn6QJ4zrttc7g=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:43 2025 by rpki-client