Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/8f51a04d-6cbf-35d4-9037-cbec259d3f36.roa
File:                     8f51a04d-6cbf-35d4-9037-cbec259d3f36.roa (raw, json)
Hash identifier:          u6lLB+6kWd1jOmsAeSyWQP3aAijJj24qXl08W7GCOr0=
Subject key identifier:   19:16:DE:18:EA:0E:0B:BA:E7:18:71:5C:13:00:F2:22:07:24:B4:BD
Certificate issuer:       /CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Certificate serial:       010D0C9F432858427C037A7484D81F9A8F678BE0
Authority key identifier: FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/8f51a04d-6cbf-35d4-9037-cbec259d3f36.roa
Signing time:             Sun 09 Jul 2023 01:32:30 +0000
ROA not before:           Sun 09 Jul 2023 01:32:30 +0000
ROA not after:            Sat 07 Oct 2023 01:32:30 +0000
asID:                     29802
IP address blocks:        64.72.204.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:7c:03:7a:74:84:d8:1f:9a:8f:67:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731a926c-9fe5-4269-8549-a15eec9d00d2
        Validity
            Not Before: Jul  9 01:32:30 2023 GMT
            Not After : Oct  7 01:32:30 2023 GMT
        Subject: CN=71219191-58fd-4ffd-abb7-19bf4fd799af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:87:a1:84:57:26:28:cd:4d:b8:5c:fc:ed:
                    ae:23:eb:f0:e0:d0:4b:5a:28:51:46:a0:91:54:12:
                    0f:b1:0b:dd:f2:83:64:48:24:a3:bd:bd:14:5d:23:
                    e9:29:ce:85:20:db:7b:12:82:7a:cb:92:a9:8d:f1:
                    aa:b0:f5:96:85:9e:c8:17:55:03:45:37:fa:59:50:
                    4c:f4:69:5e:37:3e:69:69:e1:03:df:22:29:28:09:
                    6d:59:0c:e8:12:27:bc:c8:5c:22:83:29:f1:85:ec:
                    d3:bf:97:51:ce:c7:a8:63:d8:1d:7c:3f:21:c3:c9:
                    dd:99:79:6f:97:4b:d6:c0:f2:59:6a:7f:c6:b3:95:
                    26:08:76:a0:cf:99:61:94:89:7b:b8:56:45:b5:42:
                    78:18:49:af:09:41:0d:2a:71:38:7d:0c:98:ae:34:
                    d4:90:4a:3d:f0:b4:fc:4c:98:41:ca:65:48:86:5b:
                    3d:94:0a:50:47:b5:d9:b9:22:d6:cf:91:28:a8:f1:
                    0a:70:6f:61:92:fa:cd:1e:7d:35:82:3b:72:d6:3d:
                    5f:fb:12:f6:25:b2:a6:45:0c:fc:4f:39:af:a9:fc:
                    8d:62:63:83:1e:5f:62:e4:06:d3:fb:75:ac:83:ef:
                    15:a3:30:9d:7f:35:ad:67:12:f4:ab:36:4a:a8:37:
                    35:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:16:DE:18:EA:0E:0B:BA:E7:18:71:5C:13:00:F2:22:07:24:B4:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/8f51a04d-6cbf-35d4-9037-cbec259d3f36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:40:91:f8:46:df:e8:db:8a:2e:44:df:1c:d8:6c:a4:1f:3b:
         43:f6:cd:8b:53:b3:ce:0a:f8:7d:34:40:bc:8c:fd:1c:5e:9e:
         5d:23:e0:b0:f8:b3:0d:7f:8d:9f:1f:c0:a4:56:a3:b7:47:91:
         25:a1:f9:23:e8:a1:90:72:2b:fc:5e:01:22:1f:1f:a1:ac:0f:
         b5:e7:fc:f8:5b:ea:6d:0c:e5:f3:91:99:e0:c5:9d:f7:bc:97:
         f7:1f:37:2f:0d:38:15:1e:a8:33:60:2b:2f:b9:44:4d:61:82:
         6d:58:b9:c8:b2:05:fd:8b:ed:5e:9d:74:ba:d8:5c:f7:09:11:
         19:57:de:9f:75:73:70:83:7a:c4:a5:28:09:62:f2:fa:94:40:
         24:98:50:45:a2:47:16:20:85:df:95:ac:93:a4:95:b8:ab:a3:
         54:60:01:d6:06:c9:12:18:61:b8:ba:da:4a:49:4a:6f:85:b9:
         d9:27:97:90:04:f3:c2:81:9f:6a:31:76:00:b0:8d:a4:da:14:
         a4:cf:7a:44:9b:0c:c2:38:6a:19:91:0d:1d:05:96:e3:5a:e7:
         ab:2a:81:f1:06:15:3a:91:64:13:f0:1c:c8:7d:1f:fa:8c:0d:
         c6:42:a1:92:31:19:13:89:3f:aa:f1:0d:79:1d:96:e1:54:6f:
         c9:e1:da:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJ8A3p0hNgfmo9ni+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMxYTkyNmMtOWZlNS00MjY5LTg1NDktYTE1ZWVjOWQw
MGQyMB4XDTIzMDcwOTAxMzIzMFoXDTIzMTAwNzAxMzIzMFowLzEtMCsGA1UEAxMk
NzEyMTkxOTEtNThmZC00ZmZkLWFiYjctMTliZjRmZDc5OWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCyHoYRXJijNTbhc/O2uI+vw4NBLWihRRqCR
VBIPsQvd8oNkSCSjvb0UXSPpKc6FINt7EoJ6y5KpjfGqsPWWhZ7IF1UDRTf6WVBM
9GleNz5paeED3yIpKAltWQzoEie8yFwigynxhezTv5dRzseoY9gdfD8hw8ndmXlv
l0vWwPJZan/Gs5UmCHagz5lhlIl7uFZFtUJ4GEmvCUENKnE4fQyYrjTUkEo98LT8
TJhBymVIhls9lApQR7XZuSLWz5EoqPEKcG9hkvrNHn01gjty1j1f+xL2JbKmRQz8
TzmvqfyNYmODHl9i5AbT+3Wsg+8VozCdfzWtZxL0qzZKqDc1NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBkW3hjqDgu65xhxXBMA8iIHJLS9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MzFh
OTI2Yy05ZmU1LTQyNjktODU0OS1hMTVlZWM5ZDAwZDIvOGY1MWEwNGQtNmNiZi0z
NWQ0LTkwMzctY2JlYzI1OWQzZjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzMxYTkyNmMtOWZlNS00MjY5LTg1
NDktYTE1ZWVjOWQwMGQyLzczMWE5MjZjLTlmZTUtNDI2OS04NTQ5LWExNWVlYzlk
MDBkMi5jcmwwHwYDVR0jBBgwFoAU/joYbJVWQwBw8KR+SNQjRFuezRIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83MzFhOTI2Yy05ZmU1LTQyNjktODU0OS1hMTVl
ZWM5ZDAwZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQEjMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtAkfhG3+jbii5E3xzYbKQfO0P2zYtTs84K+H00QLyM/Rxenl0j4LD4
sw1/jZ8fwKRWo7dHkSWh+SPooZByK/xeASIfH6GsD7Xn/Phb6m0M5fORmeDFnfe8
l/cfNy8NOBUeqDNgKy+5RE1hgm1YuciyBf2L7V6ddLrYXPcJERlX3p91c3CDesSl
KAli8vqUQCSYUEWiRxYghd+VrJOklbiro1RgAdYGyRIYYbi62kpJSm+Fudknl5AE
88KBn2oxdgCwjaTaFKTPekSbDMI4ahmRDR0FluNa56sqgfEGFTqRZBPwHMh9H/qM
DcZCoZIxGROJP6rxDXkdluFUb8nh2tw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:40 2024 by rpki-client on console-ams.rpki-client.org