Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/05382c97-b86f-3f19-9246-bbb2a505f7c9.roa
File:                     05382c97-b86f-3f19-9246-bbb2a505f7c9.roa (raw, json)
Hash identifier:          T+Le2nZqGU+99mOLCHyv87UpLGixgApesqVGCjuq+fQ=
Subject key identifier:   4B:12:FB:BA:37:D4:DF:FF:95:8B:72:09:A1:28:4A:E9:86:BE:ED:85
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B6A7245FA46FE6B66FBA80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/05382c97-b86f-3f19-9246-bbb2a505f7c9.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     36522
IP address blocks:        206.47.169.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b6:a7:24:5f:a4:6f:e6:b6:6f:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=5a85f0dd-b44a-42c6-9133-6575da7fef5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:f6:a8:7a:f9:5b:1a:c9:a0:5d:7a:e1:f8:
                    ef:bd:bc:88:97:27:3c:b3:e9:1c:b5:d6:3b:01:61:
                    45:74:8c:f2:ce:f7:34:45:0c:cf:03:72:92:4c:a6:
                    ba:2a:b1:a0:dc:0e:bd:91:d4:f7:2a:2d:8f:d0:7a:
                    24:74:d2:db:2a:2d:46:c7:b4:6d:d6:99:7a:19:e1:
                    9c:84:80:9b:8d:ff:80:0e:5c:2e:74:c2:73:e5:9c:
                    22:64:dd:02:f6:3e:23:a5:41:bb:72:9d:e4:44:b1:
                    39:d6:cc:49:29:3a:77:c0:23:4d:ad:9c:15:f6:21:
                    2a:e5:46:be:50:0b:80:71:5b:48:3f:66:65:9d:6f:
                    c5:12:15:9f:dc:76:ea:70:7e:14:e6:fb:d1:e2:6d:
                    bf:df:af:97:e0:dc:01:03:32:ef:ad:77:16:44:c0:
                    b9:bf:e4:b3:46:91:ed:a4:29:54:67:0c:89:c5:28:
                    b1:d6:27:f3:45:7c:3a:c4:60:2b:ae:6f:08:24:17:
                    5c:c4:c2:c2:4b:df:a6:93:b6:97:cc:d5:8c:96:97:
                    0f:f7:ba:4b:96:c3:fb:77:d6:8a:44:e7:95:92:ca:
                    72:6e:16:60:d5:76:a1:4c:27:65:d2:b5:42:f8:0b:
                    f8:c7:24:3f:15:49:8e:8f:87:55:c5:eb:97:d1:a6:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:12:FB:BA:37:D4:DF:FF:95:8B:72:09:A1:28:4A:E9:86:BE:ED:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/05382c97-b86f-3f19-9246-bbb2a505f7c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:08:3e:a1:05:de:46:4c:67:65:3f:5b:3f:5a:01:f0:04:3e:
         c3:17:4a:6d:fd:71:0f:14:a0:1e:b8:26:53:09:25:37:7d:42:
         4b:b9:59:27:f2:fe:45:8e:20:cc:c5:a7:9b:cc:29:e3:96:0a:
         b3:f2:5e:0c:bd:d7:60:d8:79:47:1b:1c:66:b8:b5:ae:1a:52:
         aa:4b:0e:94:7a:f1:d7:b2:54:72:34:30:2d:d0:c2:b2:6c:75:
         94:eb:83:d5:49:d1:6f:c5:41:49:ca:3b:8c:5d:32:57:f2:ee:
         78:b0:ff:95:6c:e4:52:d6:e0:c3:2a:01:55:15:32:97:f8:c8:
         38:7b:9b:5e:95:f5:9f:0d:42:8c:55:3d:31:2c:53:60:8b:9f:
         33:2c:54:14:91:ac:ed:ed:c4:2b:07:7f:f1:1f:d6:e9:b5:16:
         b1:cf:bb:c3:87:b0:b7:f1:df:91:18:ae:04:50:87:f5:d8:fd:
         e7:9b:78:35:4a:75:29:df:42:ad:92:c0:e2:01:38:89:0d:e9:
         43:b0:c1:9e:6f:c7:a6:be:fb:27:a2:9b:31:0f:97:19:0b:51:
         30:2e:e1:31:bb:ea:62:65:28:36:09:27:da:e0:32:81:ad:9c:
         f2:a5:bf:72:50:43:0a:18:b0:99:58:59:05:cf:df:d6:18:04:
         90:cb:a6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:30:56 2025 by rpki-client