Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/264ccb6d-1f3e-32bf-b9fb-e564d95f7d94.roa
File:                     264ccb6d-1f3e-32bf-b9fb-e564d95f7d94.roa (raw, json)
Hash identifier:          3o4ekPfcL8R2EzsK9COXSRbw/fe80/IwaUhDTn3XawI=
Subject key identifier:   55:CC:29:C0:FF:5A:38:FB:E0:26:BC:6E:54:06:1E:29:7E:0C:AD:11
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B79278908B1926CE1C7B60
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/264ccb6d-1f3e-32bf-b9fb-e564d95f7d94.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     15321
IP address blocks:        209.226.7.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b7:92:78:90:8b:19:26:ce:1c:7b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=0fd46c99-a6b1-4e85-9417-63468b45d5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3e:02:fe:be:ea:29:22:b1:54:ae:5c:29:f6:
                    db:89:a1:89:63:a2:e9:10:5f:1c:8c:5b:99:7d:78:
                    79:66:39:0b:bb:ae:2d:c4:65:26:27:08:a0:0b:d1:
                    29:bc:1e:39:36:96:a1:1e:45:ae:81:50:1e:fe:15:
                    db:13:dd:26:8f:cd:b1:3a:56:9d:05:87:66:60:24:
                    35:fd:e3:16:43:c7:f0:41:b7:09:6e:2f:9a:0f:dd:
                    2c:b3:cc:63:dc:66:37:9a:c1:dc:34:a7:04:28:69:
                    19:52:9f:2a:f2:14:10:a1:26:26:9b:bb:5a:98:6b:
                    d6:60:65:b2:67:68:37:6e:b3:c5:38:72:ca:f2:36:
                    b4:0c:25:83:f7:82:c1:b2:64:31:1a:8f:ac:74:d4:
                    8d:39:d9:18:98:2f:2e:6a:c3:ae:db:b7:9c:9c:94:
                    95:5d:ae:d2:ec:87:7a:e7:bf:93:4a:ec:7e:eb:4b:
                    71:ac:ec:41:49:63:aa:7c:88:c1:cd:df:e1:11:48:
                    79:ad:2d:4b:51:14:d8:6c:07:b8:3a:73:a3:18:5a:
                    09:c0:3a:55:be:ef:a1:aa:45:31:d0:ef:06:b7:1c:
                    05:1f:e2:dc:e2:9c:d7:bd:51:26:ee:9f:e3:36:50:
                    2e:6b:90:78:ef:54:a7:a9:41:bb:26:80:6b:6d:ba:
                    e2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CC:29:C0:FF:5A:38:FB:E0:26:BC:6E:54:06:1E:29:7E:0C:AD:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/264ccb6d-1f3e-32bf-b9fb-e564d95f7d94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:8a:d9:43:bc:07:c9:de:70:9a:04:bb:69:d9:30:44:d5:ff:
         60:e4:0d:ee:f4:7d:e5:0c:20:4d:46:9a:5b:55:f0:02:8c:b4:
         78:75:9e:49:9b:98:80:c1:5a:ad:a4:93:3b:74:c4:09:b1:36:
         94:f3:ec:74:c2:1c:84:21:28:ed:c0:8d:5e:75:05:69:46:49:
         79:43:44:e1:e4:36:1f:d3:8d:88:e5:f5:9f:6a:41:73:b0:c0:
         ac:8f:70:b9:09:a4:da:4f:d0:bc:22:bc:48:de:0a:a7:78:29:
         b0:7d:34:21:c7:51:7f:89:be:e2:cf:cb:43:17:ac:81:2c:fb:
         37:da:ea:6f:80:7d:19:02:51:b2:d7:a8:3d:37:33:b0:8a:a1:
         cf:f6:57:8f:39:be:91:95:89:2d:fd:dd:dc:98:77:95:2f:12:
         a7:13:78:50:ab:26:2e:f5:87:15:9b:7e:8d:fc:cc:e9:54:40:
         ce:ce:66:92:1e:4d:e4:53:1e:d6:d6:ba:26:89:b6:1e:05:a4:
         87:22:97:98:ab:e2:57:15:47:ac:0c:15:fa:1a:f3:4d:03:20:
         68:9b:03:f9:e3:96:ff:21:0c:82:ce:fc:c4:f5:2c:fc:d0:60:
         18:00:a3:74:c6:73:97:0c:ae:16:56:48:da:41:a1:af:19:b5:
         82:0b:b0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:35:02 2025 by rpki-client