Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9e88e884-50cd-34ed-b710-4839f0d2e0e8.roa
File:                     9e88e884-50cd-34ed-b710-4839f0d2e0e8.roa (raw, json)
Hash identifier:          lOIyX/PfjPv5eqB2JRYgmxjUUWIHll7gEHdZgFg/I6A=
Subject key identifier:   C3:1A:EF:AC:B9:1A:C1:F5:1A:81:F0:48:F7:1F:C1:13:FB:5D:7E:75
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F43285848151FDA0E67B071D480ADEC80
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9e88e884-50cd-34ed-b710-4839f0d2e0e8.roa
Signing time:             Tue 03 Dec 2024 09:43:02 +0000
ROA not before:           Tue 03 Dec 2024 09:43:02 +0000
ROA not after:            Mon 03 Mar 2025 09:43:02 +0000
asID:                     27385
IP address blocks:        69.67.183.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:1f:da:0e:67:b0:71:d4:80:ad:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Dec  3 09:43:02 2024 GMT
            Not After : Mar  3 09:43:02 2025 GMT
        Subject: CN=83143d57-4d21-4eda-9b3d-04cd3561efe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b9:50:87:ea:2a:6c:bb:d4:ed:ef:93:30:4b:
                    b6:63:0e:ff:bb:71:f2:ad:95:73:14:8c:4e:e3:ad:
                    e4:77:51:b5:bd:26:8d:98:dd:c0:34:ec:af:25:31:
                    a8:89:c0:3f:8a:c1:42:32:c8:ca:8a:e1:e9:e0:56:
                    c4:1e:ba:8b:2a:14:b8:38:6a:49:65:33:5c:10:83:
                    1d:14:7d:f3:37:95:77:b6:86:1f:61:3d:51:5e:b0:
                    10:d2:ae:21:72:31:b6:41:4f:d6:aa:6b:02:8b:b9:
                    1f:46:6d:b8:07:54:d4:a2:71:c4:d0:75:fd:e3:12:
                    f7:a1:bf:2b:b8:a1:1a:8d:4c:fb:6f:78:47:6c:65:
                    42:23:78:f3:49:a2:b7:fe:cc:dc:62:16:ec:8e:e0:
                    92:7c:75:6b:cc:34:07:2d:19:50:35:2b:0b:0b:7e:
                    ac:6a:18:7c:31:49:82:6c:6d:f3:f2:98:ce:9f:d1:
                    25:b4:33:ed:5a:12:20:2c:a3:dd:8b:32:8c:45:44:
                    b1:cd:a2:36:f4:e9:bf:23:4a:1e:54:a9:a9:a0:af:
                    bc:a8:f7:00:82:56:ce:da:e6:6a:bd:c0:19:eb:1e:
                    c1:4f:d2:2c:9c:49:bf:40:8a:f5:dc:71:29:1e:90:
                    e7:4f:a8:ef:f0:86:b4:58:c6:77:b5:9d:46:7b:6f:
                    93:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1A:EF:AC:B9:1A:C1:F5:1A:81:F0:48:F7:1F:C1:13:FB:5D:7E:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9e88e884-50cd-34ed-b710-4839f0d2e0e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.67.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:60:50:d8:e1:5a:09:b9:8f:85:ae:c9:94:72:b1:6c:5c:77:
         62:69:6b:3c:5e:a3:bb:67:a9:be:7e:85:cb:00:b9:75:c5:bb:
         0a:69:39:47:15:07:14:c6:f8:56:82:f0:c7:62:d1:e2:f6:aa:
         85:a6:22:34:d0:44:c5:40:aa:6d:70:26:2a:5c:bf:f3:fc:57:
         59:a2:7b:7b:c3:89:2a:b9:3f:ac:ab:74:21:ec:1a:ce:dc:6b:
         a3:af:f3:fd:fe:61:97:30:5f:a1:1f:a9:fb:d7:2a:7e:8c:ac:
         cc:dc:39:80:49:82:ac:11:31:32:42:cb:33:f4:16:21:3d:09:
         42:ca:60:8b:1a:06:4c:73:5e:46:c5:e3:bc:bd:ca:a3:d8:0a:
         e6:d0:ff:e6:7a:52:50:6e:25:39:3e:a9:dc:34:9e:21:97:74:
         25:94:be:5d:cf:47:a9:01:ba:ea:52:5e:67:80:3d:00:15:eb:
         fc:e0:db:a9:c1:26:8a:0e:99:a3:46:17:1b:5d:cd:78:a4:9f:
         b8:95:53:9b:05:ae:a4:02:7f:21:92:eb:7a:1b:9b:61:c3:49:
         10:6e:76:f2:33:6b:49:35:2d:dc:4d:f4:e5:21:ec:c2:ed:1f:
         ea:ee:d1:17:12:b4:ef:93:43:20:7c:74:56:e6:33:47:ac:5b:
         d4:c9:27:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVH9oOZ7Bx1ICt7IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWQwNmVkNjYtOWZkZC00MDQ4LTg2NDUtZTMzZThjZWMx
ZDQxMB4XDTI0MTIwMzA5NDMwMloXDTI1MDMwMzA5NDMwMlowLzEtMCsGA1UEAxMk
ODMxNDNkNTctNGQyMS00ZWRhLTliM2QtMDRjZDM1NjFlZmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLlQh+oqbLvU7e+TMEu2Yw7/u3HyrZVzFIxO
463kd1G1vSaNmN3ANOyvJTGoicA/isFCMsjKiuHp4FbEHrqLKhS4OGpJZTNcEIMd
FH3zN5V3toYfYT1RXrAQ0q4hcjG2QU/WqmsCi7kfRm24B1TUonHE0HX94xL3ob8r
uKEajUz7b3hHbGVCI3jzSaK3/szcYhbsjuCSfHVrzDQHLRlQNSsLC36sahh8MUmC
bG3z8pjOn9EltDPtWhIgLKPdizKMRUSxzaI29Om/I0oeVKmpoK+8qPcAglbO2uZq
vcAZ6x7BT9IsnEm/QIr13HEpHpDnT6jv8Ia0WMZ3tZ1Ge2+TowIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMMa76y5GsH1GoHwSPcfwRP7XX51MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2
ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNlOGNlYzFkNDEvOWU4OGU4ODQtNTBjZC0z
NGVkLWI3MTAtNDgzOWYwZDJlMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWQwNmVkNjYtOWZkZC00MDQ4LTg2
NDUtZTMzZThjZWMxZDQxLzlkMDZlZDY2LTlmZGQtNDA0OC04NjQ1LWUzM2U4Y2Vj
MWQ0MS5jcmwwHwYDVR0jBBgwFoAUAkRNXm0Knu393PU01zFjuct6wgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85ZDA2ZWQ2Ni05ZmRkLTQwNDgtODY0NS1lMzNl
OGNlYzFkNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUO3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEVgUNjhWgm5j4WuyZRysWxcd2Jpazxeo7tnqb5+hcsAuXXFuwppOUcV
BxTG+FaC8Mdi0eL2qoWmIjTQRMVAqm1wJipcv/P8V1mie3vDiSq5P6yrdCHsGs7c
a6Ov8/3+YZcwX6EfqfvXKn6MrMzcOYBJgqwRMTJCyzP0FiE9CULKYIsaBkxzXkbF
47y9yqPYCubQ/+Z6UlBuJTk+qdw0niGXdCWUvl3PR6kBuupSXmeAPQAV6/zg26nB
JooOmaNGFxtdzXikn7iVU5sFrqQCfyGS63obm2HDSRBudvIza0k1LdxN9OUh7MLt
H+ru0RcStO+TQyB8dFbmM0esW9TJJ/0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:47:19 2025 by rpki-client