Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/4c25c840-96f5-3f99-a544-a21e86b55b0d.roa
File:                     4c25c840-96f5-3f99-a544-a21e86b55b0d.roa (raw, json)
Hash identifier:          xG7pvF0m3BNa5yzsCgYu9b9HFXo5Q6Q1WeXnIRfCYTk=
Subject key identifier:   30:80:B2:83:18:00:AD:A5:72:C9:60:FC:F3:10:F3:FE:18:C5:C8:96
Certificate issuer:       /CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d
Certificate serial:       010D0C9F43285845F7E93AB49C8F3D65AFB74A80
Authority key identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/4c25c840-96f5-3f99-a544-a21e86b55b0d.roa
Signing time:             Thu 23 May 2024 13:00:34 +0000
ROA not before:           Thu 23 May 2024 13:00:34 +0000
ROA not after:            Wed 21 Aug 2024 13:00:34 +0000
asID:                     557
IP address blocks:        64.45.64.0/18 maxlen: 18
                          141.114.0.0/16 maxlen: 16
                          65.18.64.0/19 maxlen: 19
                          65.18.0.0/18 maxlen: 18
                          204.197.0.0/17 maxlen: 17
                          65.18.96.0/20 maxlen: 20
                          207.166.224.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f7:e9:3a:b4:9c:8f:3d:65:af:b7:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d
        Validity
            Not Before: May 23 13:00:34 2024 GMT
            Not After : Aug 21 13:00:34 2024 GMT
        Subject: CN=541c1fb2-816f-4f93-9997-ef8e7c98edd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c8:9c:f0:54:ac:aa:7a:1d:49:76:d3:7b:55:
                    b6:51:b8:9f:0e:89:4e:28:d2:8c:18:a5:b8:b3:ac:
                    01:ac:80:07:d8:23:d7:ca:f1:4f:93:c8:43:40:85:
                    19:68:2a:03:68:42:a8:7f:5d:c3:9b:00:92:07:30:
                    3a:fb:d6:f3:b9:0d:c4:8e:1d:eb:b7:a6:ba:ff:dd:
                    40:7f:52:78:f8:50:81:30:dc:8c:37:76:be:2b:ca:
                    be:f6:cb:36:f2:aa:67:39:83:45:61:44:52:f1:40:
                    da:27:28:46:17:be:cb:f0:72:b4:65:5d:91:e1:67:
                    3f:07:bf:e3:ae:50:5c:64:e2:bd:57:03:fd:6d:9a:
                    05:84:6d:cf:b4:a7:65:16:25:5e:58:ed:64:5e:65:
                    59:53:7e:0a:f3:fe:30:41:88:7f:be:69:6f:9f:b0:
                    79:5e:88:68:4e:c5:87:bf:67:15:f0:57:14:d7:82:
                    2c:63:95:94:0d:af:41:ff:ec:07:b8:70:4a:29:10:
                    d6:39:76:57:06:08:0a:f1:4d:50:b6:cb:54:4c:c9:
                    f0:56:d1:08:12:7e:b7:1c:72:76:70:49:1c:93:e9:
                    29:ce:a6:6b:a9:76:f5:d8:77:bf:1c:ae:06:cc:ae:
                    3a:62:f5:6c:a2:2c:d9:dd:a7:5d:5f:bc:ab:bb:d9:
                    02:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:80:B2:83:18:00:AD:A5:72:C9:60:FC:F3:10:F3:FE:18:C5:C8:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/4c25c840-96f5-3f99-a544-a21e86b55b0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl

            X509v3 Authority Key Identifier:
                keyid:B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.45.64.0/18
                  65.18.0.0-65.18.111.255
                  141.114.0.0/16
                  204.197.0.0/17
                  207.166.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:c5:94:4b:2b:c8:02:ef:0c:9b:53:18:13:92:5a:c7:7b:ae:
         46:e0:d0:2b:36:1c:be:60:96:f9:ad:01:e0:c3:0a:de:1a:29:
         ee:88:22:80:4f:c4:90:03:10:e2:b1:40:c4:dd:00:2f:d8:45:
         53:e5:2b:77:49:fb:7c:75:96:01:43:7b:cb:17:6e:04:d2:6e:
         5e:cb:32:e0:d5:56:16:1b:9d:57:67:b8:f7:45:47:74:10:aa:
         51:85:31:b0:8c:a3:f8:73:17:22:ed:da:d4:fe:51:e3:7e:06:
         98:cb:05:ac:fe:c1:96:11:de:2c:00:92:b4:fe:3f:93:11:77:
         75:ae:22:88:22:f4:0d:2c:e3:94:12:ba:f4:89:d9:0b:d1:57:
         68:a4:c5:e5:cf:3f:00:5b:5d:ee:e5:3d:bf:b0:0d:5f:69:9c:
         3b:bd:ea:23:47:ea:be:1a:9c:32:da:d1:80:af:56:98:9a:61:
         e6:91:91:83:47:4a:64:b0:c8:b1:8d:5a:21:05:09:8b:d0:3f:
         f4:0e:e0:78:d5:a1:63:aa:e3:96:7c:2e:41:23:93:22:04:83:
         e6:01:b3:68:fd:02:44:1c:a9:e0:d5:6a:7b:8a:1b:14:58:79:
         51:78:24:0c:f9:f9:b8:75:e6:bf:8a:54:04:49:7c:fa:28:f0:
         cb:1c:f1:69
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEX36Tq0nI89Za+3SoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE3Y2UyMmItNjFhMC00YWU5LTljYzAtZjUwZjNiYjc1
MzBkMB4XDTI0MDUyMzEzMDAzNFoXDTI0MDgyMTEzMDAzNFowLzEtMCsGA1UEAxMk
NTQxYzFmYjItODE2Zi00ZjkzLTk5OTctZWY4ZTdjOThlZGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncic8FSsqnodSXbTe1W2UbifDolOKNKMGKW4
s6wBrIAH2CPXyvFPk8hDQIUZaCoDaEKof13DmwCSBzA6+9bzuQ3Ejh3rt6a6/91A
f1J4+FCBMNyMN3a+K8q+9ss28qpnOYNFYURS8UDaJyhGF77L8HK0ZV2R4Wc/B7/j
rlBcZOK9VwP9bZoFhG3PtKdlFiVeWO1kXmVZU34K8/4wQYh/vmlvn7B5XohoTsWH
v2cV8FcU14IsY5WUDa9B/+wHuHBKKRDWOXZXBggK8U1QtstUTMnwVtEIEn63HHJ2
cEkck+kpzqZrqXb12He/HK4GzK46YvVsoizZ3addX7yru9kCiwIDAQABo4IDczCC
A28wHQYDVR0OBBYEFDCAsoMYAK2lcslg/PMQ8/4YxciWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMTdj
ZTIyYi02MWEwLTRhZTktOWNjMC1mNTBmM2JiNzUzMGQvNGMyNWM4NDAtOTZmNS0z
Zjk5LWE1NDQtYTIxZTg2YjU1YjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjE3Y2UyMmItNjFhMC00YWU5LTlj
YzAtZjUwZjNiYjc1MzBkL2IxN2NlMjJiLTYxYTAtNGFlOS05Y2MwLWY1MGYzYmI3
NTMwZC5jcmwwHwYDVR0jBBgwFoAUt2tfGIphWyOCw/KpdRRVpSGxh+EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMTdjZTIyYi02MWEwLTRhZTktOWNjMC1mNTBm
M2JiNzUzMGQuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQGQC1AMAsD
AwFBEgMEBEESYAMDAI1yAwQHzMUAAwQFz6bgMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALLFlEsryALvDJtT
GBOSWsd7rkbg0Cs2HL5glvmtAeDDCt4aKe6IIoBPxJADEOKxQMTdAC/YRVPlK3dJ
+3x1lgFDe8sXbgTSbl7LMuDVVhYbnVdnuPdFR3QQqlGFMbCMo/hzFyLt2tT+UeN+
BpjLBaz+wZYR3iwAkrT+P5MRd3WuIogi9A0s45QSuvSJ2QvRV2ikxeXPPwBbXe7l
Pb+wDV9pnDu96iNH6r4anDLa0YCvVpiaYeaRkYNHSmSwyLGNWiEFCYvQP/QO4HjV
oWOq45Z8LkEjkyIEg+YBs2j9AkQcqeDVanuKGxRYeVF4JAz5+bh15r+KVARJfPoo
8Msc8Wk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:51 2025 by rpki-client