Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/862d6631-22d4-49ab-adba-10640009b573/81f98c21-deff-374b-b693-bb59b319dea5.roa
File:                     81f98c21-deff-374b-b693-bb59b319dea5.roa (raw, json)
Hash identifier:          YMpa/keH2JurFVHX3UDH4qq2DPOaxQ5MxnihLQbYYL8=
Subject key identifier:   0F:9B:FF:4A:33:AC:DA:82:29:31:89:FB:3A:7F:4B:16:B0:CD:90:95
Certificate issuer:       /CN=862d6631-22d4-49ab-adba-10640009b573
Certificate serial:       010D0C9F432858489EDD418867799D9A6919B6C0
Authority key identifier: 5A:4B:49:5B:40:B0:CD:B2:80:47:04:69:84:C8:0E:DE:38:CC:17:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/862d6631-22d4-49ab-adba-10640009b573.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/862d6631-22d4-49ab-adba-10640009b573/81f98c21-deff-374b-b693-bb59b319dea5.roa
Signing time:             Tue 21 Jan 2025 17:50:25 +0000
ROA not before:           Tue 21 Jan 2025 17:50:25 +0000
ROA not after:            Mon 21 Apr 2025 16:50:25 +0000
asID:                     400175
IP address blocks:        74.118.135.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:dd:41:88:67:79:9d:9a:69:19:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862d6631-22d4-49ab-adba-10640009b573
        Validity
            Not Before: Jan 21 17:50:25 2025 GMT
            Not After : Apr 21 16:50:25 2025 GMT
        Subject: CN=afbf9fee-577b-4402-bc19-344433193bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dc:f5:04:cf:19:33:f8:38:64:6e:84:36:6f:
                    86:5a:8b:69:04:a1:f7:57:1c:32:d9:01:26:58:26:
                    9c:75:93:d0:84:75:5c:d9:79:29:aa:31:0e:24:e9:
                    0f:6d:40:a5:73:c3:b6:46:ad:02:2c:ec:5f:70:cc:
                    e5:02:84:b0:3a:94:06:11:a6:92:46:b6:a2:84:0b:
                    d9:4d:94:48:41:b3:6b:7c:e4:fe:d7:bf:8c:f8:b7:
                    0a:fa:ee:2e:8b:eb:22:71:a9:3b:f8:50:87:1d:6a:
                    8d:de:39:5b:f8:42:42:6a:f6:e5:c3:3f:6b:1d:38:
                    88:aa:f9:fb:12:94:b9:c6:3a:57:4c:55:eb:d1:ba:
                    8d:90:06:91:71:75:73:6d:36:9f:29:69:3c:d9:14:
                    0f:fb:18:aa:3c:4d:8a:83:1a:4e:a0:9c:0a:f5:22:
                    0e:d4:38:0a:77:9d:89:39:ba:5e:34:47:9f:d5:24:
                    31:c6:e3:65:e0:85:51:56:be:d3:96:1d:21:db:8e:
                    e1:12:1e:d7:39:87:11:6a:e7:1c:e0:2e:d7:2c:44:
                    02:d1:b4:a4:ff:45:49:9e:0d:cd:db:92:55:0d:c6:
                    38:c7:bc:a3:c6:fe:ba:4d:e8:c0:3a:66:bf:80:c5:
                    62:c0:fd:b9:e8:01:e1:17:d1:89:5f:83:08:42:02:
                    3e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9B:FF:4A:33:AC:DA:82:29:31:89:FB:3A:7F:4B:16:B0:CD:90:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/862d6631-22d4-49ab-adba-10640009b573/81f98c21-deff-374b-b693-bb59b319dea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/862d6631-22d4-49ab-adba-10640009b573/862d6631-22d4-49ab-adba-10640009b573.crl

            X509v3 Authority Key Identifier:
                keyid:5A:4B:49:5B:40:B0:CD:B2:80:47:04:69:84:C8:0E:DE:38:CC:17:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/862d6631-22d4-49ab-adba-10640009b573.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.118.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e3:3b:17:8a:dd:f8:dc:e3:fe:d0:7d:61:41:dc:68:02:03:
         75:fc:a2:6b:fa:18:e3:25:f9:3c:5d:ff:dd:1f:1c:e5:fc:f0:
         6b:48:13:39:0a:ae:5e:f4:c0:20:c2:4a:f3:b7:fb:63:f4:04:
         54:c8:45:83:a8:52:12:43:e8:b6:77:28:62:4b:ac:63:3d:19:
         a9:3c:37:72:70:ce:ce:0a:42:cf:c7:f6:71:17:8c:cb:9f:b3:
         91:cf:af:b1:a9:b7:7a:d7:5b:9f:be:b8:4d:42:09:8b:d0:38:
         88:52:16:7c:75:b8:99:45:ad:f6:cc:de:ae:62:e3:72:78:e8:
         84:d3:9b:17:c7:cd:f0:e1:f8:7e:ce:44:c4:b6:1a:3e:71:dd:
         f9:c5:aa:28:66:60:b0:91:bb:43:25:e3:33:22:9f:a4:f5:c4:
         39:c4:8a:b9:f7:01:89:d3:24:43:df:cb:d6:e6:01:7a:63:50:
         63:f7:4d:4e:f9:40:01:4e:77:6c:e1:54:56:5c:07:84:bb:eb:
         2b:07:36:bb:fa:46:5e:a3:e5:c1:76:46:28:03:49:7e:f7:31:
         1a:18:dc:c5:38:ee:6f:c4:0b:46:dd:d6:05:11:05:f4:78:1d:
         c8:09:f5:2c:89:f8:58:7f:82:0c:01:4c:f8:3f:37:56:63:44:
         41:b5:8a:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEie3UGIZ3mdmmkZtsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODYyZDY2MzEtMjJkNC00OWFiLWFkYmEtMTA2NDAwMDli
NTczMB4XDTI1MDEyMTE3NTAyNVoXDTI1MDQyMTE2NTAyNVowLzEtMCsGA1UEAxMk
YWZiZjlmZWUtNTc3Yi00NDAyLWJjMTktMzQ0NDMzMTkzYmJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtz1BM8ZM/g4ZG6ENm+GWotpBKH3Vxwy2QEm
WCacdZPQhHVc2XkpqjEOJOkPbUClc8O2Rq0CLOxfcMzlAoSwOpQGEaaSRraihAvZ
TZRIQbNrfOT+17+M+LcK+u4ui+sicak7+FCHHWqN3jlb+EJCavblwz9rHTiIqvn7
EpS5xjpXTFXr0bqNkAaRcXVzbTafKWk82RQP+xiqPE2KgxpOoJwK9SIO1DgKd52J
ObpeNEef1SQxxuNl4IVRVr7Tlh0h247hEh7XOYcRaucc4C7XLEQC0bSk/0VJng3N
25JVDcY4x7yjxv66TejAOma/gMViwP256AHhF9GJX4MIQgI+qQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA+b/0ozrNqCKTGJ+zp/SxawzZCVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84NjJk
NjYzMS0yMmQ0LTQ5YWItYWRiYS0xMDY0MDAwOWI1NzMvODFmOThjMjEtZGVmZi0z
NzRiLWI2OTMtYmI1OWIzMTlkZWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODYyZDY2MzEtMjJkNC00OWFiLWFk
YmEtMTA2NDAwMDliNTczLzg2MmQ2NjMxLTIyZDQtNDlhYi1hZGJhLTEwNjQwMDA5
YjU3My5jcmwwHwYDVR0jBBgwFoAUWktJW0CwzbKARwRphMgO3jjMF4YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84NjJkNjYzMS0yMmQ0LTQ5YWItYWRiYS0xMDY0
MDAwOWI1NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASnaHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDjOxeK3fjc4/7QfWFB3GgCA3X8omv6GOMl+Txd/90fHOX88GtIEzkK
rl70wCDCSvO3+2P0BFTIRYOoUhJD6LZ3KGJLrGM9Gak8N3Jwzs4KQs/H9nEXjMuf
s5HPr7Gpt3rXW5++uE1CCYvQOIhSFnx1uJlFrfbM3q5i43J46ITTmxfHzfDh+H7O
RMS2Gj5x3fnFqihmYLCRu0Ml4zMin6T1xDnEirn3AYnTJEPfy9bmAXpjUGP3TU75
QAFOd2zhVFZcB4S76ysHNrv6Rl6j5cF2RigDSX73MRoY3MU47m/EC0bd1gURBfR4
HcgJ9SyJ+Fh/ggwBTPg/N1ZjREG1ip0=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:59:36 2025 by rpki-client