Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/749cb0ce-9629-3a0d-a7ae-61f930d903c5.roa
File:                     749cb0ce-9629-3a0d-a7ae-61f930d903c5.roa (raw, json)
Hash identifier:          nZQgykRUe8WDYMBKXfLDhrd2sIQLA3iz7Y8RJreKSZs=
Subject key identifier:   F7:3F:85:E9:13:E3:72:B3:52:97:BE:A0:CD:AC:92:04:56:B0:E4:69
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F43285843D004D85F881C5524DCB41E80
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/749cb0ce-9629-3a0d-a7ae-61f930d903c5.roa
Signing time:             Tue 07 Nov 2023 20:30:06 +0000
ROA not before:           Tue 07 Nov 2023 20:30:06 +0000
ROA not after:            Mon 05 Feb 2024 20:30:06 +0000
asID:                     11260
IP address blocks:        24.129.229.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d0:04:d8:5f:88:1c:55:24:dc:b4:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: Nov  7 20:30:06 2023 GMT
            Not After : Feb  5 20:30:06 2024 GMT
        Subject: CN=281dc222-90d3-47cd-87ba-45d07951a111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9f:94:e8:ff:91:0c:7b:1d:c1:d8:56:9d:a0:
                    40:ec:34:e8:36:86:08:eb:d6:3e:1f:a2:b2:23:a8:
                    a3:0a:a9:1b:f6:ff:a0:af:24:f3:aa:b9:39:11:99:
                    ea:07:2a:f2:e5:09:a6:52:76:cb:34:0c:13:cf:2b:
                    05:a8:ff:49:8b:d0:a3:5c:02:bc:fa:01:94:ca:13:
                    0e:46:bb:db:f2:8c:d2:bf:1d:25:13:aa:a9:16:a3:
                    36:5f:71:07:e6:0c:de:4c:88:cc:a5:04:18:a1:bb:
                    c6:1d:f1:1b:54:12:da:a3:24:3d:84:c2:69:12:a5:
                    93:63:b8:24:01:84:21:e5:56:1c:54:da:5e:f6:72:
                    c8:41:be:bf:cc:6a:be:cc:17:f8:cf:a6:6e:26:b0:
                    3e:88:40:43:3f:bb:90:0d:dc:f7:86:28:2d:95:c0:
                    54:d7:5c:5d:79:57:87:60:7b:2a:49:c9:a4:c3:1a:
                    86:c2:e6:f9:a8:4c:eb:e4:87:b5:25:0a:74:9a:8e:
                    20:ce:d0:57:31:81:70:a7:96:e8:4d:46:94:26:df:
                    b0:db:38:0f:19:87:dc:b8:b3:39:8f:73:81:51:f0:
                    43:3d:2a:ba:8e:a7:3f:10:34:26:39:71:2a:41:ba:
                    98:a8:e2:6b:8a:74:80:a7:ca:bd:d1:ab:af:23:26:
                    cb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3F:85:E9:13:E3:72:B3:52:97:BE:A0:CD:AC:92:04:56:B0:E4:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/749cb0ce-9629-3a0d-a7ae-61f930d903c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.129.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:30:03:61:83:ee:c3:a7:29:57:7d:50:e0:58:de:d0:e2:b0:
         41:e2:1b:f2:70:27:87:e9:aa:30:39:39:cc:42:69:24:30:10:
         6e:1f:19:d0:7b:6f:cd:c4:99:ad:c6:58:36:03:be:3d:69:e5:
         74:47:9b:a7:5b:c5:d6:7b:9f:93:d9:f6:ab:df:27:9b:46:97:
         5d:f6:18:ac:78:f6:98:5b:34:48:83:52:0f:e3:45:27:7c:73:
         50:a7:8d:c7:2b:d2:8d:2b:b9:0d:b3:24:c4:37:04:3b:23:6b:
         7e:40:9b:7f:c3:4c:32:21:be:5a:38:f7:e1:59:50:2b:44:6e:
         b2:e6:eb:26:2d:72:ab:83:0b:6e:9e:98:ff:5c:75:36:35:92:
         d1:a2:35:b1:53:4a:1d:70:88:84:48:84:b1:d6:b9:75:8a:76:
         af:b8:59:59:0e:9f:0b:53:07:3d:bb:6e:3c:97:b2:00:a6:dd:
         50:a7:0e:9f:8d:ad:e5:52:69:65:7c:97:79:3a:d2:e9:c1:d2:
         d9:19:8f:8c:02:84:cb:16:82:d9:0a:c9:0e:fd:4e:2b:b3:9c:
         9c:c7:81:23:9e:7e:0a:a0:5d:bd:83:17:d6:d9:1c:b6:74:cb:
         a6:77:d0:93:7e:01:c7:5c:3f:8a:d0:e4:0d:05:2b:e0:f0:13:
         88:8b:9d:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEPQBNhfiBxVJNy0HoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj
MDU0MB4XDTIzMTEwNzIwMzAwNloXDTI0MDIwNTIwMzAwNlowLzEtMCsGA1UEAxMk
MjgxZGMyMjItOTBkMy00N2NkLTg3YmEtNDVkMDc5NTFhMTExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p+U6P+RDHsdwdhWnaBA7DToNoYI69Y+H6Ky
I6ijCqkb9v+gryTzqrk5EZnqByry5QmmUnbLNAwTzysFqP9Ji9CjXAK8+gGUyhMO
Rrvb8ozSvx0lE6qpFqM2X3EH5gzeTIjMpQQYobvGHfEbVBLaoyQ9hMJpEqWTY7gk
AYQh5VYcVNpe9nLIQb6/zGq+zBf4z6ZuJrA+iEBDP7uQDdz3higtlcBU11xdeVeH
YHsqScmkwxqGwub5qEzr5Ie1JQp0mo4gztBXMYFwp5boTUaUJt+w2zgPGYfcuLM5
j3OBUfBDPSq6jqc/EDQmOXEqQbqYqOJrinSAp8q90auvIybLqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPc/hekT43KzUpe+oM2skgRWsORpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4
ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvNzQ5Y2IwY2UtOTYyOS0z
YTBkLWE3YWUtNjFmOTMwZDkwM2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw
NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz
YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3
YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGIHlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYwA2GD7sOnKVd9UOBY3tDisEHiG/JwJ4fpqjA5OcxCaSQwEG4fGdB7
b83Ema3GWDYDvj1p5XRHm6dbxdZ7n5PZ9qvfJ5tGl132GKx49phbNEiDUg/jRSd8
c1Cnjccr0o0ruQ2zJMQ3BDsja35Am3/DTDIhvlo49+FZUCtEbrLm6yYtcquDC26e
mP9cdTY1ktGiNbFTSh1wiIRIhLHWuXWKdq+4WVkOnwtTBz27bjyXsgCm3VCnDp+N
reVSaWV8l3k60unB0tkZj4wChMsWgtkKyQ79TiuznJzHgSOefgqgXb2DF9bZHLZ0
y6Z30JN+AcdcP4rQ5A0FK+DwE4iLnVY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:10 2024 by rpki-client on console-fra.rpki-client.org