Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/06dc2a34-89ff-3e45-8f9b-5e4cc4fc4c93.roa
File:                     06dc2a34-89ff-3e45-8f9b-5e4cc4fc4c93.roa (raw, json)
Hash identifier:          BGMv/yy5QKFI7HIdMdA+2fzMBtybnDOucmRDEQo4IbA=
Subject key identifier:   CD:CF:D0:85:DE:0B:85:76:E5:32:61:F0:DE:60:C8:28:DB:74:C2:50
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F432858475DD50630840A4C2B2E6FCEC0
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/06dc2a34-89ff-3e45-8f9b-5e4cc4fc4c93.roa
Signing time:             Sat 28 Sep 2024 17:59:21 +0000
ROA not before:           Sat 28 Sep 2024 17:59:21 +0000
ROA not after:            Fri 27 Dec 2024 18:59:21 +0000
asID:                     19107
IP address blocks:        216.234.76.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5d:d5:06:30:84:0a:4c:2b:2e:6f:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Sep 28 17:59:21 2024 GMT
            Not After : Dec 27 18:59:21 2024 GMT
        Subject: CN=19d4e6bb-85e5-45d3-9cb6-b79d5729d8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:23:6d:3b:1c:8a:66:e1:e6:cb:cf:3f:03:d7:
                    69:73:5c:a8:72:1f:ba:ff:fa:a9:61:bf:68:90:78:
                    1d:78:f6:00:d3:41:a4:d5:92:6d:99:56:41:ae:4d:
                    17:87:7e:6d:aa:e1:08:c3:16:97:b4:90:e5:46:59:
                    7b:2b:e9:6d:ad:b3:ee:73:f4:fb:cb:23:09:72:4b:
                    36:42:9d:69:e7:6e:c8:23:bb:cf:64:34:d5:e0:a7:
                    2d:27:61:34:5e:ce:ba:5e:35:1a:55:37:c4:a9:42:
                    6e:62:fd:5f:39:00:a0:fb:9b:4f:c2:f4:f7:ab:44:
                    97:f7:09:e7:50:f1:6b:17:4a:9c:95:eb:74:bb:f1:
                    2a:d6:2c:72:f8:97:9f:75:0b:8c:a0:6c:94:c7:39:
                    1d:f5:f0:fd:7d:21:5a:47:b5:f4:cc:3b:0e:e6:79:
                    58:ec:0a:71:7a:72:05:86:e2:be:70:42:94:ee:66:
                    2f:3b:27:e3:2b:40:80:d6:ba:f0:99:e9:df:a7:4a:
                    4d:56:10:1b:4a:80:07:ea:a1:f6:8c:56:2b:c2:4e:
                    85:28:a1:cb:cc:f7:aa:de:24:c1:0f:35:f6:19:8a:
                    89:d6:b8:9f:7b:c5:e0:9f:85:92:ab:39:78:c1:81:
                    88:72:5a:3d:3e:6c:c3:c7:fe:50:46:58:2f:46:a9:
                    a4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CF:D0:85:DE:0B:85:76:E5:32:61:F0:DE:60:C8:28:DB:74:C2:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/06dc2a34-89ff-3e45-8f9b-5e4cc4fc4c93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:0c:f6:3f:57:b9:42:22:eb:61:45:cf:c3:f6:8a:28:24:af:
         bf:d0:3e:25:d6:dc:cb:ab:af:d2:c4:e0:65:03:58:7b:44:70:
         07:f6:4b:47:84:24:9e:cb:c1:d7:18:ec:38:e3:91:4c:20:28:
         a0:1e:96:f6:fc:0b:3c:23:ed:0d:c1:ac:ae:36:c9:4d:73:23:
         84:cd:1b:13:d1:cc:ce:ef:be:f0:e9:69:f5:63:cf:e8:d4:d8:
         07:7f:32:61:55:e6:4d:28:10:7f:f5:4e:d8:f5:6d:52:25:c1:
         56:2c:8a:14:6a:c2:2d:40:2f:6e:f7:9d:c0:08:7e:5f:5d:3e:
         60:e1:a7:6d:30:fa:81:42:fa:8e:51:82:9c:5c:8b:03:b8:2a:
         ce:14:27:ff:8e:72:e2:31:b1:23:f8:6d:c3:8a:f2:15:c8:17:
         f0:77:f5:54:f7:f5:36:a5:2c:0a:47:d0:26:4d:53:21:e2:5a:
         a6:54:98:d1:f1:ee:78:b5:15:e4:05:13:9e:a0:8e:9d:2c:a0:
         31:26:f3:a2:87:5c:31:75:cd:2f:e7:89:2a:22:df:bb:bc:e9:
         53:30:2f:c4:11:d1:de:b9:8c:e7:37:0f:45:6d:81:8c:2c:9a:
         6d:c3:4d:64:7c:a9:b2:d3:f0:de:c7:90:b6:23:38:ca:8d:44:
         c0:23:2e:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdd1QYwhApMKy5vzsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2
ODZiMB4XDTI0MDkyODE3NTkyMVoXDTI0MTIyNzE4NTkyMVowLzEtMCsGA1UEAxMk
MTlkNGU2YmItODVlNS00NWQzLTljYjYtYjc5ZDU3MjlkOGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyNtOxyKZuHmy88/A9dpc1yoch+6//qpYb9o
kHgdePYA00Gk1ZJtmVZBrk0Xh35tquEIwxaXtJDlRll7K+ltrbPuc/T7yyMJcks2
Qp1p527II7vPZDTV4KctJ2E0Xs66XjUaVTfEqUJuYv1fOQCg+5tPwvT3q0SX9wnn
UPFrF0qclet0u/Eq1ixy+JefdQuMoGyUxzkd9fD9fSFaR7X0zDsO5nlY7ApxenIF
huK+cEKU7mYvOyfjK0CA1rrwmenfp0pNVhAbSoAH6qH2jFYrwk6FKKHLzPeq3iTB
DzX2GYqJ1rife8Xgn4WSqzl4wYGIclo9PmzDx/5QRlgvRqmkhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM3P0IXeC4V25TJh8N5gyCjbdMJQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz
YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvMDZkYzJhMzQtODlmZi0z
ZTQ1LThmOWItNWU0Y2M0ZmM0YzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3
M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh
Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2
NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OpMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABQM9j9XuUIi62FFz8P2iigkr7/QPiXW3Murr9LE4GUDWHtEcAf2S0eE
JJ7LwdcY7DjjkUwgKKAelvb8Czwj7Q3BrK42yU1zI4TNGxPRzM7vvvDpafVjz+jU
2Ad/MmFV5k0oEH/1Ttj1bVIlwVYsihRqwi1AL273ncAIfl9dPmDhp20w+oFC+o5R
gpxciwO4Ks4UJ/+OcuIxsSP4bcOK8hXIF/B39VT39TalLApH0CZNUyHiWqZUmNHx
7ni1FeQFE56gjp0soDEm86KHXDF1zS/niSoi37u86VMwL8QR0d65jOc3D0VtgYws
mm3DTWR8qbLT8N7HkLYjOMqNRMAjLgo=
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:55:01 2025 by rpki-client