Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/8a36cb5c-5384-39fd-b998-9b132a82d142.roa
File:                     8a36cb5c-5384-39fd-b998-9b132a82d142.roa (raw, json)
Hash identifier:          YIQL9vt5RiGCPmrzsfZ+hbxAyfQMLsc1SiV5ZvJqsnI=
Subject key identifier:   89:E3:5B:DD:E6:05:E4:A7:7C:E7:F0:49:2A:94:10:2E:4A:68:D7:B5
Certificate issuer:       /CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
Certificate serial:       010D0C9F43285848D6DA2B8DD4DE0EF60CEF7080
Authority key identifier: B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/8a36cb5c-5384-39fd-b998-9b132a82d142.roa
Signing time:             Mon 10 Feb 2025 19:09:28 +0000
ROA not before:           Mon 10 Feb 2025 19:09:28 +0000
ROA not after:            Sun 11 May 2025 18:09:28 +0000
asID:                     7311
IP address blocks:        2607:f530::/32 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:da:2b:8d:d4:de:0e:f6:0c:ef:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=900bcb5d-9e07-44a3-af61-25e7f0242ad0
        Validity
            Not Before: Feb 10 19:09:28 2025 GMT
            Not After : May 11 18:09:28 2025 GMT
        Subject: CN=aa627531-06fe-426b-99f6-b9f6cfb3b148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:02:5e:46:4d:58:ed:66:7b:fb:d7:ee:71:0e:
                    dc:8a:5a:37:d5:7d:47:35:e2:44:61:c7:d7:98:ff:
                    c8:4d:8f:8f:8e:2c:69:86:a0:eb:0f:68:a6:1e:ef:
                    e1:49:8e:2b:e7:80:2f:0d:b1:99:8f:1e:df:a4:88:
                    82:85:74:99:e0:b8:df:59:4a:e4:5a:3c:67:1d:a8:
                    c6:85:1b:88:d4:5f:5c:52:bc:9b:0f:a8:c8:a5:86:
                    94:89:77:c5:53:49:0c:2f:3a:4e:3a:3a:f5:f2:70:
                    0b:0b:8d:37:01:a3:0a:c9:d7:04:e6:69:ac:85:ee:
                    6a:b1:7c:57:e4:4f:47:9c:bb:c4:46:18:5a:dc:7e:
                    24:46:7d:48:ab:5c:d0:1f:fa:66:6b:20:bb:03:4a:
                    63:eb:a9:fc:1b:13:4e:17:56:83:d9:7a:bb:b2:a2:
                    07:a4:6b:de:0f:fd:f5:7b:97:80:6b:56:28:37:a8:
                    e3:d0:d9:cd:46:da:79:8d:a8:92:71:e3:ed:94:3b:
                    22:0a:86:2d:b7:45:e9:5f:fb:bc:82:a6:fd:bc:55:
                    d5:fb:4a:aa:33:93:a1:41:f5:49:29:d7:07:be:d0:
                    94:a4:9d:ec:65:9d:a3:ac:9b:5a:a4:f2:a9:81:1d:
                    f7:04:5d:ea:60:3a:94:b5:19:18:4b:1c:30:52:3d:
                    82:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E3:5B:DD:E6:05:E4:A7:7C:E7:F0:49:2A:94:10:2E:4A:68:D7:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/8a36cb5c-5384-39fd-b998-9b132a82d142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0/900bcb5d-9e07-44a3-af61-25e7f0242ad0.crl

            X509v3 Authority Key Identifier:
                keyid:B1:61:1F:B0:4C:35:34:A2:7A:92:D2:A1:D6:75:A6:00:B6:C0:43:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/900bcb5d-9e07-44a3-af61-25e7f0242ad0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f530::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:6b:ce:c6:0d:0c:48:36:d3:9d:1b:fb:da:77:08:35:46:b5:
         2e:b8:e6:48:c2:b2:38:03:3d:eb:c3:47:cf:75:fc:31:b7:1b:
         e0:6c:66:af:a7:71:b0:2b:56:8a:1e:8e:72:88:56:2e:a1:be:
         4a:c3:c9:17:93:74:27:dc:8d:9b:1d:2c:3d:1d:6b:aa:14:5b:
         66:11:10:2a:d5:6b:c6:c0:be:6e:a1:f6:3f:18:1c:be:ee:0b:
         c0:1b:4b:29:bd:8f:96:30:68:ef:59:8a:9d:22:d9:40:21:cc:
         6c:09:fb:e9:8b:a1:7f:30:6b:3a:4e:d1:2b:70:1d:8e:e8:f5:
         75:d8:e4:6b:7b:f6:32:f6:45:d4:46:33:5f:24:33:e7:e6:84:
         49:2b:b0:6e:9e:9b:73:e5:ab:5f:a4:54:00:13:41:3f:41:3d:
         d6:9b:ee:6f:a5:44:c0:22:f4:b4:8f:d3:75:3f:b0:df:33:02:
         d6:71:37:0e:23:3f:4f:43:ff:34:fb:28:ef:25:59:d1:ce:4d:
         83:19:bb:bb:74:59:f2:3a:f4:d0:5b:f2:b1:d7:c1:0a:be:a9:
         d3:c5:ff:17:4c:a6:4f:cc:53:3b:fe:4a:2b:20:09:fe:0d:c7:
         b2:92:46:9d:5d:63:85:fe:fd:ee:a6:d4:e7:37:38:98:fd:23:
         36:17:5a:4b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjW2iuN1N4O9gzvcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTAwYmNiNWQtOWUwNy00NGEzLWFmNjEtMjVlN2YwMjQy
YWQwMB4XDTI1MDIxMDE5MDkyOFoXDTI1MDUxMTE4MDkyOFowLzEtMCsGA1UEAxMk
YWE2Mjc1MzEtMDZmZS00MjZiLTk5ZjYtYjlmNmNmYjNiMTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAJeRk1Y7WZ7+9fucQ7cilo31X1HNeJEYcfX
mP/ITY+PjixphqDrD2imHu/hSY4r54AvDbGZjx7fpIiChXSZ4LjfWUrkWjxnHajG
hRuI1F9cUrybD6jIpYaUiXfFU0kMLzpOOjr18nALC403AaMKydcE5mmshe5qsXxX
5E9HnLvERhha3H4kRn1Iq1zQH/pmayC7A0pj66n8GxNOF1aD2Xq7sqIHpGveD/31
e5eAa1YoN6jj0NnNRtp5jaiScePtlDsiCoYtt0XpX/u8gqb9vFXV+0qqM5OhQfVJ
KdcHvtCUpJ3sZZ2jrJtapPKpgR33BF3qYDqUtRkYSxwwUj2CzQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFInjW93mBeSnfOfwSSqUEC5KaNe1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MDBi
Y2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3ZjAyNDJhZDAvOGEzNmNiNWMtNTM4NC0z
OWZkLWI5OTgtOWIxMzJhODJkMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTAwYmNiNWQtOWUwNy00NGEzLWFm
NjEtMjVlN2YwMjQyYWQwLzkwMGJjYjVkLTllMDctNDRhMy1hZjYxLTI1ZTdmMDI0
MmFkMC5jcmwwHwYDVR0jBBgwFoAUsWEfsEw1NKJ6ktKh1nWmALbAQ3wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MDBiY2I1ZC05ZTA3LTQ0YTMtYWY2MS0yNWU3
ZjAyNDJhZDAuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf1MDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA5a87GDQxINtOdG/vadwg1RrUuuOZIwrI4Az3rw0fPdfwxtxvgbGav
p3GwK1aKHo5yiFYuob5Kw8kXk3Qn3I2bHSw9HWuqFFtmERAq1WvGwL5uofY/GBy+
7gvAG0spvY+WMGjvWYqdItlAIcxsCfvpi6F/MGs6TtErcB2O6PV12ORre/Yy9kXU
RjNfJDPn5oRJK7Bunptz5atfpFQAE0E/QT3Wm+5vpUTAIvS0j9N1P7DfMwLWcTcO
Iz9PQ/80+yjvJVnRzk2DGbu7dFnyOvTQW/Kx18EKvqnTxf8XTKZPzFM7/korIAn+
DceykkadXWOF/v3uptTnNziY/SM2F1pL
-----END CERTIFICATE-----