Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fc830cad-b426-3b0d-ab6e-9d9a10a24ac4.roa
File:                     fc830cad-b426-3b0d-ab6e-9d9a10a24ac4.roa (raw, json)
Hash identifier:          H8pv8gAUbNsbIEngnQjtLxFkpCcZAXMJQ1YgrMkfrdo=
Subject key identifier:   C7:5E:B7:FF:4A:50:E8:91:D0:32:7E:49:B8:B7:0C:58:EE:0A:D6:4C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A5161951B944A180FCA2180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fc830cad-b426-3b0d-ab6e-9d9a10a24ac4.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     46278
IP address blocks:        65.49.11.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:61:95:1b:94:4a:18:0f:ca:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=e3e75fff-b75d-43f6-bbf6-d69b40a1ee26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:e2:0c:14:e6:82:39:96:c6:30:11:83:7c:1e:
                    63:03:d5:b7:6d:e7:ad:9b:d1:dd:27:b5:24:4c:2f:
                    02:6c:13:f2:90:fd:d0:35:f7:86:b1:0d:e3:d3:2e:
                    e1:54:b0:67:cb:79:aa:8b:64:cc:5a:23:eb:11:1b:
                    e3:72:9c:2f:26:d0:35:17:4b:3d:d3:05:89:fb:29:
                    e4:5c:94:ca:9b:c5:b4:a5:f9:04:d2:20:3f:34:48:
                    87:ed:c8:27:c0:2e:7c:2d:ae:38:ae:80:e2:1f:86:
                    6b:eb:94:af:90:eb:7d:00:29:aa:10:b3:b1:8d:21:
                    5e:6a:65:27:12:d0:83:92:9d:74:0d:db:1a:64:73:
                    55:fd:f7:8b:5b:e2:a8:fb:5e:d2:35:ac:15:f9:b0:
                    2b:53:df:c1:92:64:b8:76:b5:51:91:15:c9:61:2b:
                    99:5a:d0:ad:fc:bc:9e:d9:79:21:86:aa:c4:4b:3b:
                    d0:2a:1c:50:f6:ab:e7:39:2f:64:90:60:92:00:9e:
                    14:90:a0:e4:bd:c2:15:bb:23:12:a3:47:44:bb:28:
                    a6:9c:53:15:f9:ad:08:40:f8:fb:d4:f5:bc:e8:d8:
                    76:da:22:b1:e8:72:42:f9:c5:ed:62:4b:9f:22:71:
                    6c:5f:b3:a5:6c:a5:a2:b3:8e:ba:58:f4:98:14:05:
                    c4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5E:B7:FF:4A:50:E8:91:D0:32:7E:49:B8:B7:0C:58:EE:0A:D6:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fc830cad-b426-3b0d-ab6e-9d9a10a24ac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:74:00:83:9a:c2:e5:61:c3:42:d4:8e:ec:2f:f0:4e:31:93:
         3f:46:bb:56:3e:bd:d1:02:74:47:14:85:ec:3a:cd:5a:cd:06:
         2b:d5:be:a3:49:9e:21:24:6d:b8:fb:9f:76:5c:da:72:a1:d6:
         e2:f7:7e:f4:f7:fd:ce:d1:e4:36:5a:7b:fb:da:f9:ef:72:d7:
         1e:cc:6e:b6:6d:97:01:fd:d6:90:16:8f:0d:c3:89:5f:7c:90:
         f6:25:87:a9:e7:0d:60:1e:e6:29:fa:29:cd:7a:0b:2c:91:01:
         c6:5e:2b:6d:e8:13:ed:09:a4:15:a1:ad:b4:a8:ec:66:8e:ac:
         1f:66:38:ea:a2:43:cf:1c:5d:e4:21:11:0a:e0:fd:5d:0b:53:
         b6:7c:45:2b:dd:fa:6a:a9:ea:6a:f7:34:82:5f:81:11:ab:34:
         94:13:e6:46:d8:cf:84:86:79:08:95:c5:d6:61:10:7a:00:79:
         1f:5c:94:67:9b:b6:5c:3a:d5:43:d3:d5:bb:b2:b2:be:e7:8b:
         31:13:b3:b7:a6:3a:73:8e:9e:d3:28:54:55:f3:73:20:aa:22:
         de:43:4e:d2:56:a0:c1:91:d8:32:ba:98:2f:a3:a9:23:cf:15:
         e6:94:e9:d0:f6:97:b1:87:3c:39:fe:8f:16:c5:fb:64:22:e8:
         27:75:a5:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEFKUWGVG5RKGA/KIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTIzMDMyMDEyMDAwMFoXDTIzMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTNlNzVmZmYtYjc1ZC00M2Y2LWJiZjYtZDY5YjQwYTFlZTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/OIMFOaCOZbGMBGDfB5jA9W3beetm9HdJ7Uk
TC8CbBPykP3QNfeGsQ3j0y7hVLBny3mqi2TMWiPrERvjcpwvJtA1F0s90wWJ+ynk
XJTKm8W0pfkE0iA/NEiH7cgnwC58La44roDiH4Zr65SvkOt9ACmqELOxjSFeamUn
EtCDkp10DdsaZHNV/feLW+Ko+17SNawV+bArU9/BkmS4drVRkRXJYSuZWtCt/Lye
2XkhhqrESzvQKhxQ9qvnOS9kkGCSAJ4UkKDkvcIVuyMSo0dEuyimnFMV+a0IQPj7
1PW86Nh22iKx6HJC+cXtYkufInFsX7OlbKWis466WPSYFAXEqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMdet/9KUOiR0DJ+Sbi3DFjuCtZMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmM4MzBjYWQtYjQyNi0z
YjBkLWFiNmUtOWQ5YTEwYTI0YWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTELMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACN0AIOawuVhw0LUjuwv8E4xkz9Gu1Y+vdECdEcUhew6zVrNBivVvqNJ
niEkbbj7n3Zc2nKh1uL3fvT3/c7R5DZae/va+e9y1x7MbrZtlwH91pAWjw3DiV98
kPYlh6nnDWAe5in6Kc16CyyRAcZeK23oE+0JpBWhrbSo7GaOrB9mOOqiQ88cXeQh
EQrg/V0LU7Z8RSvd+mqp6mr3NIJfgRGrNJQT5kbYz4SGeQiVxdZhEHoAeR9clGeb
tlw61UPT1buysr7nizETs7emOnOOntMoVFXzcyCqIt5DTtJWoMGR2DK6mC+jqSPP
FeaU6dD2l7GHPDn+jxbF+2Qi6Cd1pUc=
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:18:38 2025 by rpki-client