Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/9148c4f0-4d02-3b7b-be46-3000b842c178.roa
File:                     9148c4f0-4d02-3b7b-be46-3000b842c178.roa (raw, json)
Hash identifier:          c/SmXi/4rDZswVIZlVsokwV6ALDytXDh1+xnKKIBZt8=
Subject key identifier:   03:E7:53:B0:FB:81:4C:8E:47:22:5F:50:6A:21:21:86:87:03:67:39
Certificate issuer:       /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial:       010D0C9F4328583A2CE60349B4EE7F8B317CFDB0
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/9148c4f0-4d02-3b7b-be46-3000b842c178.roa
Signing time:             Fri 28 May 2021 04:00:00 +0000
ROA not before:           Fri 28 May 2021 04:00:00 +0000
ROA not after:            Sat 09 Sep 2023 04:00:00 +0000
asID:                     64249
IP address blocks:        204.9.39.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:2c:e6:03:49:b4:ee:7f:8b:31:7c:fd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
        Validity
            Not Before: May 28 04:00:00 2021 GMT
            Not After : Sep  9 04:00:00 2023 GMT
        Subject: CN=0c05dc13-39cc-424d-9625-29ab534dcb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:e3:fd:5b:ac:45:b0:0d:a5:b8:50:c1:24:
                    74:ff:2d:aa:6d:32:4b:de:c4:1e:8c:c1:ef:98:92:
                    15:01:52:26:ba:ad:6c:89:8c:83:08:65:76:2c:3c:
                    a9:f6:52:74:53:4b:4e:81:56:15:75:08:32:03:d1:
                    d3:f5:28:87:0b:8b:16:df:5a:47:9d:e3:f9:f5:44:
                    50:0a:ca:eb:31:9f:01:4f:86:7e:04:21:d1:6c:e2:
                    db:13:ac:23:d7:d6:be:11:65:f2:f1:b1:3d:b5:bb:
                    ee:67:85:c6:18:31:af:36:f1:92:1f:99:17:41:65:
                    2b:92:6e:f8:ef:43:bb:ea:b2:e1:98:81:be:68:bf:
                    76:52:ce:d6:7b:c0:4e:e9:6d:d2:a0:b5:29:8c:c2:
                    0b:6f:65:55:ab:21:bc:40:58:c3:32:01:7b:7c:03:
                    df:77:3a:cc:41:0d:2b:7f:9c:73:fe:dc:14:24:86:
                    6a:4f:a1:30:8a:5f:9f:3f:c5:32:d7:b1:cb:bb:18:
                    dd:0e:5b:7f:c6:43:b8:ff:55:ff:a7:d4:10:23:df:
                    0f:26:0a:f6:5a:87:a8:e1:b1:73:f1:a3:4b:ee:9b:
                    ac:53:4e:96:1a:35:f7:ba:b1:8d:cb:82:88:2e:bf:
                    3e:42:b8:33:61:15:7d:2a:ec:97:8a:70:43:6b:25:
                    c1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E7:53:B0:FB:81:4C:8E:47:22:5F:50:6A:21:21:86:87:03:67:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/9148c4f0-4d02-3b7b-be46-3000b842c178.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl

            X509v3 Authority Key Identifier:
                keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.9.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1a:98:7c:c2:ee:44:79:94:44:d4:bd:75:80:ea:59:e0:20:
         92:d4:69:85:87:24:59:d4:10:af:3d:cb:e9:28:d5:5e:62:15:
         f9:6d:d1:4e:1e:86:dd:7b:94:9b:44:b9:a7:3b:04:c6:6f:95:
         a2:09:60:da:30:ef:7b:d5:2a:55:3a:3a:41:4c:01:1b:73:4c:
         bc:7e:b9:35:b7:43:69:cd:a9:02:8a:fc:2a:98:fc:bb:70:26:
         65:52:89:0d:12:5a:55:f4:c1:32:27:23:8c:75:61:6a:15:1f:
         36:eb:51:c3:62:e0:6d:c8:a6:e2:32:32:27:c7:65:60:c1:f3:
         75:70:61:33:a3:04:e0:dd:04:50:3d:c1:8f:9d:46:e1:2a:1a:
         ae:d8:62:f5:1c:23:5c:74:8d:c3:9a:c7:33:c9:84:ef:1c:ce:
         89:38:cb:a2:36:33:0b:20:a8:1e:ed:7c:34:bf:b7:16:ef:cb:
         71:50:d7:fa:fc:cd:9f:8c:4d:1e:51:c2:4a:f4:a6:c4:49:8c:
         17:c2:a7:47:50:1a:b1:7b:89:64:d0:51:62:80:78:6c:29:99:
         bc:d4:8d:d1:c5:c7:7e:bf:8f:38:12:52:b8:2d:4e:dc:7a:a2:
         21:54:c0:d2:4d:20:38:a5:4d:21:66:5c:3c:f4:39:2a:14:53:
         0b:49:c4:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDos5gNJtO5/izF8/bAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1
NmRiMB4XDTIxMDUyODA0MDAwMFoXDTIzMDkwOTA0MDAwMFowLzEtMCsGA1UEAxMk
MGMwNWRjMTMtMzljYy00MjRkLTk2MjUtMjlhYjUzNGRjYjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Abj/VusRbANpbhQwSR0/y2qbTJL3sQejMHv
mJIVAVImuq1siYyDCGV2LDyp9lJ0U0tOgVYVdQgyA9HT9SiHC4sW31pHneP59URQ
CsrrMZ8BT4Z+BCHRbOLbE6wj19a+EWXy8bE9tbvuZ4XGGDGvNvGSH5kXQWUrkm74
70O76rLhmIG+aL92Us7We8BO6W3SoLUpjMILb2VVqyG8QFjDMgF7fAPfdzrMQQ0r
f5xz/twUJIZqT6Ewil+fP8Uy17HLuxjdDlt/xkO4/1X/p9QQI98PJgr2Woeo4bFz
8aNL7pusU06WGjX3urGNy4KILr8+QrgzYRV9KuyXinBDayXBjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAPnU7D7gUyORyJfUGohIYaHA2c5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4
NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvOTE0OGM0ZjAtNGQwMi0z
YjdiLWJlNDYtMzAwMGI4NDJjMTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi
NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy
NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj
NzZmMjU2ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAknMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYamHzC7kR5lETUvXWA6lngIJLUaYWHJFnUEK89y+ko1V5iFflt0U4e
ht17lJtEuac7BMZvlaIJYNow73vVKlU6OkFMARtzTLx+uTW3Q2nNqQKK/CqY/Ltw
JmVSiQ0SWlX0wTInI4x1YWoVHzbrUcNi4G3IpuIyMifHZWDB83VwYTOjBODdBFA9
wY+dRuEqGq7YYvUcI1x0jcOaxzPJhO8czok4y6I2MwsgqB7tfDS/txbvy3FQ1/r8
zZ+MTR5Rwkr0psRJjBfCp0dQGrF7iWTQUWKAeGwpmbzUjdHFx36/jzgSUrgtTtx6
oiFUwNJNIDilTSFmXDz0OSoUUwtJxGk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:38 2025 by rpki-client