Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/3317f479-4bf2-3c5c-a642-b704f09d608f.roa
File:                     3317f479-4bf2-3c5c-a642-b704f09d608f.roa (raw, json)
Hash identifier:          JHuCqXcY/oaaa+jYHP3B7Wj36cqrnxQXDBUERRvEhn0=
Subject key identifier:   21:77:20:84:51:D4:F9:F9:6C:FA:B8:46:27:FE:CE:96:DF:56:33:A4
Certificate issuer:       /CN=d9f752bf-5611-40d8-90f2-7c7c59c005f9
Certificate serial:       010D0C9F432858483A8806472793C2CAF123F9C0
Authority key identifier: E4:F6:44:14:85:F4:F3:BF:C9:05:75:AF:CA:C3:D0:7D:40:67:EF:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/3317f479-4bf2-3c5c-a642-b704f09d608f.roa
Signing time:             Mon 16 Dec 2024 19:17:51 +0000
ROA not before:           Mon 16 Dec 2024 19:17:51 +0000
ROA not after:            Sun 16 Mar 2025 18:17:51 +0000
asID:                     53271
IP address blocks:        107.181.0.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3a:88:06:47:27:93:c2:ca:f1:23:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f752bf-5611-40d8-90f2-7c7c59c005f9
        Validity
            Not Before: Dec 16 19:17:51 2024 GMT
            Not After : Mar 16 18:17:51 2025 GMT
        Subject: CN=feb48678-fe47-47ee-ba1c-9be2d0effb2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8f:c5:3c:07:78:14:cf:51:61:98:3e:24:fb:
                    79:61:2a:89:8d:d2:e6:79:d8:40:70:ac:4a:61:5c:
                    27:2d:de:a3:a3:d0:58:9a:05:44:2c:c2:94:4c:e2:
                    be:84:46:fb:9d:c5:59:f0:18:87:3d:d6:0a:e4:dd:
                    c0:59:d8:ad:cf:8a:1c:99:d5:74:43:5b:00:24:e5:
                    c1:92:0a:f1:bc:2b:b9:1c:bb:ef:de:de:4e:75:29:
                    9f:ff:b5:78:81:f3:22:f5:e7:d7:a1:5a:80:d0:55:
                    0d:84:8f:6e:fb:0d:a0:5e:7d:05:1b:ca:2c:39:a7:
                    fa:51:bd:5c:34:3d:9f:f1:99:27:f0:fe:d4:4b:29:
                    a9:a7:c9:36:1a:22:bb:72:0a:2b:2f:4d:f4:c2:3b:
                    5b:7b:68:7e:7a:c9:ca:41:90:0e:18:00:e4:cc:f9:
                    e9:87:1e:94:90:45:e9:29:09:b2:59:35:a6:3e:4e:
                    1d:b1:76:48:07:27:3d:7c:49:f6:89:88:ee:0d:4e:
                    1f:13:9d:76:71:9e:39:16:f1:ff:7b:fe:43:e4:fd:
                    dc:5b:15:2c:53:2b:0b:10:b9:29:2b:e5:0a:dd:c7:
                    25:99:7d:f5:82:70:0e:d7:a7:bd:e5:db:5b:63:f4:
                    f0:29:73:c8:09:4b:96:90:64:6d:e3:f2:db:1b:c7:
                    5a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:77:20:84:51:D4:F9:F9:6C:FA:B8:46:27:FE:CE:96:DF:56:33:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/3317f479-4bf2-3c5c-a642-b704f09d608f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9/d9f752bf-5611-40d8-90f2-7c7c59c005f9.crl

            X509v3 Authority Key Identifier:
                keyid:E4:F6:44:14:85:F4:F3:BF:C9:05:75:AF:CA:C3:D0:7D:40:67:EF:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9f752bf-5611-40d8-90f2-7c7c59c005f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.181.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:fd:2c:b9:ba:3f:a9:12:42:cd:f7:ee:0f:cd:95:e9:b3:03:
         7a:61:19:ff:9d:f0:76:b5:a6:46:e4:85:0d:10:47:eb:cd:51:
         ab:ed:69:c9:3f:61:85:00:ac:49:cf:1c:43:63:b6:c9:ec:12:
         04:a0:63:69:db:98:01:cd:42:20:f4:a8:f7:e7:40:12:c8:5c:
         a0:d4:48:c0:c8:85:5f:40:71:8e:b6:e0:7d:16:3c:a7:49:5e:
         08:5b:5e:59:cf:ef:7d:1f:f8:88:99:eb:45:2b:b3:08:4e:d8:
         73:8c:ac:d6:f8:01:f7:14:69:93:51:e3:c2:4a:b9:fd:bd:bc:
         f9:46:9d:19:fd:fb:e6:9b:7c:d3:78:bf:42:db:c4:ff:fc:8b:
         35:12:4f:3b:04:39:a5:15:79:68:59:a7:06:49:fe:db:d8:a6:
         3d:a4:e3:b0:3c:3b:f8:36:ea:3b:68:38:aa:e6:fc:bc:d7:99:
         70:54:a4:73:ca:88:e9:eb:e2:44:01:e0:92:ba:d2:c7:1d:28:
         b4:78:1c:72:b8:78:7d:e7:67:d3:63:a5:be:5f:fd:ab:b6:2e:
         c7:37:c1:60:02:8a:ae:95:46:7c:9e:62:93:da:74:58:5e:41:
         5d:e5:0f:88:6b:b6:01:68:2f:cf:ae:19:83:22:08:7c:43:0a:
         2d:78:56:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg6iAZHJ5PCyvEj+cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmNzUyYmYtNTYxMS00MGQ4LTkwZjItN2M3YzU5YzAw
NWY5MB4XDTI0MTIxNjE5MTc1MVoXDTI1MDMxNjE4MTc1MVowLzEtMCsGA1UEAxMk
ZmViNDg2NzgtZmU0Ny00N2VlLWJhMWMtOWJlMmQwZWZmYjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4/FPAd4FM9RYZg+JPt5YSqJjdLmedhAcKxK
YVwnLd6jo9BYmgVELMKUTOK+hEb7ncVZ8BiHPdYK5N3AWditz4ocmdV0Q1sAJOXB
kgrxvCu5HLvv3t5OdSmf/7V4gfMi9efXoVqA0FUNhI9u+w2gXn0FG8osOaf6Ub1c
ND2f8Zkn8P7USympp8k2GiK7cgorL030wjtbe2h+esnKQZAOGADkzPnphx6UkEXp
KQmyWTWmPk4dsXZIByc9fEn2iYjuDU4fE512cZ45FvH/e/5D5P3cWxUsUysLELkp
K+UK3cclmX31gnAO16e95dtbY/TwKXPICUuWkGRt4/LbG8daGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCF3IIRR1Pn5bPq4Rif+zpbfVjOkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWY3
NTJiZi01NjExLTQwZDgtOTBmMi03YzdjNTljMDA1ZjkvMzMxN2Y0NzktNGJmMi0z
YzVjLWE2NDItYjcwNGYwOWQ2MDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDlmNzUyYmYtNTYxMS00MGQ4LTkw
ZjItN2M3YzU5YzAwNWY5L2Q5Zjc1MmJmLTU2MTEtNDBkOC05MGYyLTdjN2M1OWMw
MDVmOS5jcmwwHwYDVR0jBBgwFoAU5PZEFIX087/JBXWvysPQfUBn77UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kOWY3NTJiZi01NjExLTQwZDgtOTBmMi03Yzdj
NTljMDA1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa7UAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJD9LLm6P6kSQs337g/NlemzA3phGf+d8Ha1pkbkhQ0QR+vNUavtack/
YYUArEnPHENjtsnsEgSgY2nbmAHNQiD0qPfnQBLIXKDUSMDIhV9AcY624H0WPKdJ
XghbXlnP730f+IiZ60UrswhO2HOMrNb4AfcUaZNR48JKuf29vPlGnRn9++abfNN4
v0LbxP/8izUSTzsEOaUVeWhZpwZJ/tvYpj2k47A8O/g26jtoOKrm/LzXmXBUpHPK
iOnr4kQB4JK60scdKLR4HHK4eH3nZ9Njpb5f/au2Lsc3wWACiq6VRnyeYpPadFhe
QV3lD4hrtgFoL8+uGYMiCHxDCi14ViA=
-----END CERTIFICATE-----
Generated at Thu May 8 16:20:24 2025 by rpki-client