Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/14bddb58-a710-398e-b7ca-5f1949cc2d30.roa
File:                     14bddb58-a710-398e-b7ca-5f1949cc2d30.roa (raw, json)
Hash identifier:          zAYVJHcrMFDA4bz/iIVaGZ+E2sMbG8csyxiQ7qHIg1I=
Subject key identifier:   36:27:EE:15:2F:BB:D3:E3:31:AF:A2:92:F4:C9:E5:54:2D:F4:F0:31
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B57D49786E36FB65AFDD70
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/14bddb58-a710-398e-b7ca-5f1949cc2d30.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     577
IP address blocks:        142.134.57.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b5:7d:49:78:6e:36:fb:65:af:dd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=82971bee-d0f1-4cd5-a330-51f828315f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:01:92:4a:cb:8c:15:77:47:3f:99:39:ac:17:
                    ba:be:f8:84:cc:a0:c6:9e:3c:d0:fd:48:fc:3c:24:
                    b1:e9:5f:3f:f7:1e:86:c7:5c:c5:64:0d:5b:cc:4e:
                    83:5d:e3:ca:46:2f:df:33:61:c7:c3:57:9b:da:c4:
                    79:25:97:8c:ea:f8:5f:3a:b7:8f:96:e6:76:96:0a:
                    c9:ec:63:24:52:b0:c1:b6:d9:49:a5:a0:4e:bf:a2:
                    53:76:40:bf:d5:9c:d6:24:0c:14:b9:54:6d:a8:54:
                    89:7e:f2:04:19:c4:ab:45:77:e0:1a:87:a0:84:64:
                    f7:e0:19:34:07:09:10:05:75:af:16:7e:0b:4e:39:
                    1c:53:78:20:3e:49:bb:35:12:44:1d:8f:19:d1:72:
                    f6:7c:fb:e4:b9:2d:f0:dd:7e:90:0a:90:b7:51:4a:
                    9c:93:29:5f:1e:12:3c:02:8a:60:92:63:11:32:b3:
                    52:32:f1:c8:83:b0:69:3e:65:7a:fa:21:3a:c4:bc:
                    e9:d4:93:aa:c9:9f:e8:7f:6c:34:7b:c0:ab:f2:20:
                    e5:ae:d6:3e:9d:f4:3c:d3:bc:1e:fd:89:d1:a0:2f:
                    89:31:fa:83:89:49:38:6e:3d:b5:8a:f6:0a:98:32:
                    d7:eb:01:48:66:ef:67:e0:b7:2c:a3:43:d2:7a:e4:
                    c7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:27:EE:15:2F:BB:D3:E3:31:AF:A2:92:F4:C9:E5:54:2D:F4:F0:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/14bddb58-a710-398e-b7ca-5f1949cc2d30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:8b:17:c7:9e:bc:0a:75:8f:2f:f2:f2:b7:7a:5b:e5:06:f0:
         5f:36:42:ba:3a:68:bd:b4:1b:1b:10:c1:7e:14:19:74:bf:a0:
         ea:c8:e8:05:3e:55:58:f5:f0:9e:54:16:2b:32:e1:30:29:27:
         14:10:74:2f:a0:cd:0f:04:75:30:f7:9b:b7:fd:a1:d1:58:b5:
         3d:d9:db:f0:63:95:c4:fa:c2:71:9c:50:93:d9:40:3a:c0:b0:
         d7:c9:22:dd:bd:fa:96:69:0b:a0:35:7b:86:50:3d:6e:ab:88:
         30:23:8c:48:92:01:86:e5:34:c3:e1:e4:dd:df:61:08:ac:6e:
         a7:d3:bc:fb:fc:40:e8:a3:3d:af:9e:c6:53:ab:2f:c7:ce:8c:
         3b:3d:27:71:8f:d6:9c:d4:91:fb:ed:62:68:ae:8c:98:04:6b:
         40:2f:49:30:71:d7:79:e8:40:a5:18:a2:7b:1d:38:a8:44:8c:
         fc:12:99:a1:1b:db:68:af:c7:16:9e:13:1a:92:4b:79:6c:54:
         4b:2c:37:9f:55:b9:4c:2c:24:0a:92:ac:ab:83:db:c1:57:7b:
         04:e5:42:6b:e8:72:d4:70:b4:c6:1e:65:de:3e:27:fe:20:78:
         f3:b3:c2:ea:cd:fb:cd:76:65:32:72:0a:f9:bf:70:f0:e6:8b:
         96:13:8c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:39 2025 by rpki-client