Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/b46246d8-f873-3978-9724-f1b14f0fb129.roa
File:                     b46246d8-f873-3978-9724-f1b14f0fb129.roa (raw, json)
Hash identifier:          hasiQdc+BuRwIJbMWnC52YmrzOlZsfZi8dDSpncMY+4=
Subject key identifier:   78:17:E4:41:BB:DF:6C:D3:3D:CD:8C:A5:D3:C3:3A:11:68:D4:EE:E0
Certificate issuer:       /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial:       010D0C9F432858481B5AAC34B69A8F4548E74D00
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/b46246d8-f873-3978-9724-f1b14f0fb129.roa
Signing time:             Thu 05 Dec 2024 15:16:24 +0000
ROA not before:           Thu 05 Dec 2024 15:16:24 +0000
ROA not after:            Wed 05 Mar 2025 15:16:24 +0000
asID:                     376
IP address blocks:        132.213.19.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:5a:ac:34:b6:9a:8f:45:48:e7:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
        Validity
            Not Before: Dec  5 15:16:24 2024 GMT
            Not After : Mar  5 15:16:24 2025 GMT
        Subject: CN=a325e119-88ed-40f2-aac5-ccb4384a1d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a9:c6:d6:c6:1a:50:b0:3c:3f:22:aa:cc:cc:
                    07:b2:8f:1e:49:be:82:b2:a7:81:48:96:d1:6a:82:
                    db:ec:b1:f8:bd:d7:5d:1f:27:62:b5:e4:38:5d:b6:
                    6f:30:93:bc:d1:0b:6c:92:c1:24:4f:f4:68:85:f0:
                    3d:98:03:be:96:ff:97:44:88:29:8f:92:27:e2:78:
                    f3:34:c7:da:d4:7b:55:cb:e4:c9:b6:70:fa:3e:3c:
                    37:8e:95:9f:76:dc:49:92:f8:ca:fa:a5:8c:b0:b4:
                    ca:b3:57:d6:52:5e:c0:1d:ba:4d:c3:f8:44:4d:7a:
                    07:34:8c:17:78:6e:bb:f6:fc:6a:79:8b:8d:b3:86:
                    43:b1:a8:1c:27:cb:21:4e:3a:d1:1b:b0:82:c6:d1:
                    7c:d7:3d:53:c1:c7:58:33:d8:3d:c0:42:a4:14:7b:
                    35:07:8b:29:99:8d:26:69:d3:e1:99:fe:14:a2:62:
                    6a:82:f3:95:98:8a:30:1b:24:c4:d5:6a:9e:b2:a3:
                    3f:e7:35:db:9f:9d:ab:bc:71:0a:e0:ab:4b:8e:7f:
                    f4:17:db:59:35:c9:fa:a6:5d:cd:71:a5:f2:93:e7:
                    eb:b8:76:39:68:0e:88:e7:e6:4b:96:fb:a5:04:17:
                    af:76:ea:db:2a:3e:1b:f6:84:35:68:b1:2f:5c:29:
                    53:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:17:E4:41:BB:DF:6C:D3:3D:CD:8C:A5:D3:C3:3A:11:68:D4:EE:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/b46246d8-f873-3978-9724-f1b14f0fb129.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl

            X509v3 Authority Key Identifier:
                keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.213.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:88:7e:04:24:c2:05:b6:8c:3c:1f:0f:8b:dd:66:d5:55:b8:
         29:c6:73:1c:dc:fe:6c:1c:c6:50:00:6a:94:0c:6e:9c:99:b3:
         1d:96:cd:9e:df:52:1b:da:51:96:44:6d:64:29:21:1f:ff:28:
         07:10:42:5c:9a:cb:e9:a2:40:d1:55:16:65:53:6b:31:07:ae:
         64:e3:88:28:94:08:07:4b:2e:8f:37:83:97:26:bb:9e:86:8f:
         8b:54:83:da:12:81:bf:1e:e9:fe:ad:2f:97:83:70:63:99:24:
         3a:d0:b4:93:97:cc:45:6b:c7:8d:4f:3f:03:cc:18:08:bc:a6:
         b7:78:35:91:45:fc:66:a6:16:15:f3:77:71:81:52:a5:6a:32:
         58:cc:25:66:37:84:ef:ed:54:29:e2:c6:86:a3:45:5f:93:a8:
         82:32:01:c1:11:e8:ef:78:b9:b6:35:88:b5:5e:cf:d9:92:3b:
         ef:b4:52:68:75:20:63:51:07:72:0d:aa:07:f3:19:dc:9a:94:
         a0:9e:5b:c6:77:9a:ae:c0:7d:ff:71:fd:52:c4:1d:72:26:bc:
         2f:07:89:09:4f:83:46:01:cc:ca:03:20:d9:87:a7:48:ec:04:
         95:75:71:a2:91:bf:b1:e9:9f:62:4a:d1:5a:d9:98:23:b6:7a:
         c7:ec:c2:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgbWqw0tpqPRUjnTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjdlYzQ0N2EtOTE3MC00ZTExLWJhODAtMWFhY2E3NmZj
ZDQyMB4XDTI0MTIwNTE1MTYyNFoXDTI1MDMwNTE1MTYyNFowLzEtMCsGA1UEAxMk
YTMyNWUxMTktODhlZC00MGYyLWFhYzUtY2NiNDM4NGExZDhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqnG1sYaULA8PyKqzMwHso8eSb6CsqeBSJbR
aoLb7LH4vdddHyditeQ4XbZvMJO80QtsksEkT/RohfA9mAO+lv+XRIgpj5In4njz
NMfa1HtVy+TJtnD6Pjw3jpWfdtxJkvjK+qWMsLTKs1fWUl7AHbpNw/hETXoHNIwX
eG679vxqeYuNs4ZDsagcJ8shTjrRG7CCxtF81z1TwcdYM9g9wEKkFHs1B4spmY0m
adPhmf4UomJqgvOVmIowGyTE1WqesqM/5zXbn52rvHEK4KtLjn/0F9tZNcn6pl3N
caXyk+fruHY5aA6I5+ZLlvulBBevdurbKj4b9oQ1aLEvXClTQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHgX5EG732zTPc2MpdPDOhFo1O7gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82N2Vj
NDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFjYTc2ZmNkNDIvYjQ2MjQ2ZDgtZjg3My0z
OTc4LTk3MjQtZjFiMTRmMGZiMTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjdlYzQ0N2EtOTE3MC00ZTExLWJh
ODAtMWFhY2E3NmZjZDQyLzY3ZWM0NDdhLTkxNzAtNGUxMS1iYTgwLTFhYWNhNzZm
Y2Q0Mi5jcmwwHwYDVR0jBBgwFoAU1/68eoDiDVphTAxi6PSMkDn+TL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82N2VjNDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFj
YTc2ZmNkNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhNUTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGuIfgQkwgW2jDwfD4vdZtVVuCnGcxzc/mwcxlAAapQMbpyZsx2WzZ7f
UhvaUZZEbWQpIR//KAcQQlyay+miQNFVFmVTazEHrmTjiCiUCAdLLo83g5cmu56G
j4tUg9oSgb8e6f6tL5eDcGOZJDrQtJOXzEVrx41PPwPMGAi8prd4NZFF/GamFhXz
d3GBUqVqMljMJWY3hO/tVCnixoajRV+TqIIyAcER6O94ubY1iLVez9mSO++0Umh1
IGNRB3INqgfzGdyalKCeW8Z3mq7Aff9x/VLEHXImvC8HiQlPg0YBzMoDINmHp0js
BJV1caKRv7Hpn2JK0VrZmCO2esfswp0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:02 2025 by rpki-client