Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0523513-0dc8-35f7-ae78-c8db552b0eee.roa
File:                     a0523513-0dc8-35f7-ae78-c8db552b0eee.roa (raw, json)
Hash identifier:          5n5BADGsWNImLRAe8Y7P45+KVefkpBjpbXfDoMT6afQ=
Subject key identifier:   0E:20:C7:01:85:56:ED:4D:A8:31:AC:68:4C:77:94:5F:CE:C7:1E:98
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A24F4DAB82DF6C9DDC84100
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0523513-0dc8-35f7-ae78-c8db552b0eee.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        199.223.238.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:24:f4:da:b8:2d:f6:c9:dd:c8:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=dc4625e3-e7ef-4a4a-8746-90aa63302e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:40:49:d1:77:a6:f5:32:9a:fa:3d:bd:43:
                    d6:91:41:a5:82:57:cb:3d:32:3b:56:b1:03:98:55:
                    a6:f1:31:0b:a2:c1:d8:04:e5:bd:fe:42:22:43:9a:
                    75:3a:20:cb:ff:12:f8:61:4f:d4:7d:e1:f4:db:4f:
                    53:23:72:cd:13:7e:37:d3:f4:02:79:0d:48:b5:54:
                    9d:26:ae:0a:70:c9:95:f1:85:8c:00:c8:6a:03:d9:
                    e1:e7:ea:9f:46:fd:43:b6:db:d7:d9:a2:12:40:2b:
                    21:c2:4d:d2:81:26:fb:78:d3:21:4b:3a:db:be:36:
                    ad:b4:4d:5c:c7:24:2f:86:96:19:21:48:31:33:09:
                    ae:27:e9:be:94:2c:3f:d3:52:bc:db:e5:17:69:fe:
                    dc:14:aa:09:5b:bd:97:4b:c1:48:9c:12:91:03:99:
                    32:3d:9d:0a:35:8f:26:35:27:bc:01:db:88:01:5f:
                    d6:7e:ca:b1:8a:e6:3e:3c:d8:05:84:d8:b8:35:16:
                    7d:1a:17:73:78:b9:dd:dd:16:05:13:6b:c3:48:52:
                    17:58:a6:0e:b4:37:85:37:50:18:48:fa:ba:df:d5:
                    bf:47:a3:d0:74:a6:18:2a:9f:e4:cc:66:46:c3:ad:
                    bf:21:e1:01:7e:61:0a:12:00:09:cd:f6:78:cc:61:
                    74:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:20:C7:01:85:56:ED:4D:A8:31:AC:68:4C:77:94:5F:CE:C7:1E:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a0523513-0dc8-35f7-ae78-c8db552b0eee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.223.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:7e:e8:c0:ff:dd:42:7c:06:90:aa:f1:32:34:9b:7f:14:a6:
         42:a7:cd:23:02:4f:f5:bf:d3:4f:bd:71:26:b8:0d:ed:18:79:
         fb:6e:4f:1b:58:cb:c1:d7:10:1c:6f:38:a1:6d:39:2f:07:ed:
         0a:54:4e:62:d3:7a:c9:35:0a:50:63:8c:a9:cd:f0:5d:1f:72:
         14:e5:2e:30:f9:3b:28:09:3f:43:2e:e8:ae:9e:14:66:c7:16:
         20:6f:f8:10:99:c7:cf:b1:36:93:0b:36:68:fa:e1:be:18:2d:
         79:59:f8:9d:e5:30:12:d6:58:98:1b:c8:05:4c:0d:77:93:d9:
         fd:24:6f:70:ab:00:3e:c4:85:44:47:6f:5d:bc:9d:27:39:a4:
         0c:e7:f3:dd:21:9a:ba:76:48:7b:4a:3a:1f:dd:2b:5e:6f:f3:
         eb:cf:0e:5a:85:d7:81:25:8e:ab:79:f5:bf:a0:30:2f:50:8a:
         6a:cf:b2:6f:a6:19:bf:f6:d2:82:29:13:a1:63:28:2d:bd:59:
         f1:79:44:d8:51:e5:78:6d:9e:d6:13:e1:cf:45:64:a8:bf:32:
         9a:ce:d0:ed:a9:b6:e1:03:ca:03:f7:28:f6:24:23:77:32:44:
         9a:26:fd:9e:6f:58:3f:d2:76:0f:36:96:62:28:17:5e:ee:da:
         3e:ad:cc:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMKJPTauC32yd3IQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTIzMDgyNzEyMDAwMFoXDTI0MTAzMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGM0NjI1ZTMtZTdlZi00YTRhLTg3NDYtOTBhYTYzMzAyZTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseJASdF3pvUymvo9vUPWkUGlglfLPTI7VrED
mFWm8TELosHYBOW9/kIiQ5p1OiDL/xL4YU/UfeH0209TI3LNE3430/QCeQ1ItVSd
Jq4KcMmV8YWMAMhqA9nh5+qfRv1DttvX2aISQCshwk3SgSb7eNMhSzrbvjattE1c
xyQvhpYZIUgxMwmuJ+m+lCw/01K82+UXaf7cFKoJW72XS8FInBKRA5kyPZ0KNY8m
NSe8AduIAV/WfsqxiuY+PNgFhNi4NRZ9GhdzeLnd3RYFE2vDSFIXWKYOtDeFN1AY
SPq639W/R6PQdKYYKp/kzGZGw62/IeEBfmEKEgAJzfZ4zGF0SQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA4gxwGFVu1NqDGsaEx3lF/Oxx6YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTA1MjM1MTMtMGRjOC0z
NWY3LWFlNzgtYzhkYjU1MmIwZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9/uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFd+6MD/3UJ8BpCq8TI0m38UpkKnzSMCT/W/00+9cSa4De0YeftuTxtY
y8HXEBxvOKFtOS8H7QpUTmLTesk1ClBjjKnN8F0fchTlLjD5OygJP0Mu6K6eFGbH
FiBv+BCZx8+xNpMLNmj64b4YLXlZ+J3lMBLWWJgbyAVMDXeT2f0kb3CrAD7EhURH
b128nSc5pAzn890hmrp2SHtKOh/dK15v8+vPDlqF14Eljqt59b+gMC9QimrPsm+m
Gb/20oIpE6FjKC29WfF5RNhR5XhtntYT4c9FZKi/MprO0O2ptuEDygP3KPYkI3cy
RJom/Z5vWD/Sdg82lmIoF17u2j6tzH0=
-----END CERTIFICATE-----
Generated at Sat May 10 14:38:02 2025 by rpki-client