Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/50b0f92e-692b-3af2-b11e-84d753392d9b.roa
File:                     50b0f92e-692b-3af2-b11e-84d753392d9b.roa (raw, json)
Hash identifier:          cNafWsSC0dx/PBVVexS3vAERjtZEA+heyiemLakKNcs=
Subject key identifier:   16:5F:6E:A9:20:00:F0:42:6C:AD:C6:06:99:C1:51:4C:E3:CA:31:2E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2926FCF0BB82B5B449D340
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/50b0f92e-692b-3af2-b11e-84d753392d9b.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     398006
IP address blocks:        142.163.56.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:29:26:fc:f0:bb:82:b5:b4:49:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=5225d095-c76b-4d54-b0a8-23d910141f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cf:46:c5:3c:f7:68:db:89:8b:a5:a6:29:af:
                    b2:f2:ea:54:58:59:41:02:8b:ea:7a:73:02:53:b8:
                    13:ac:a9:4e:1a:2b:27:84:ff:ea:ce:b4:d6:a0:ef:
                    be:f9:39:ad:fe:cd:60:5a:dd:b5:7f:56:15:b2:cd:
                    0a:2e:50:49:3d:e7:c7:68:70:40:b9:c4:13:7b:e1:
                    f2:e3:cf:d4:41:31:06:41:bb:69:d5:2f:8b:1f:df:
                    ba:d8:39:cb:9a:db:b7:49:ab:68:54:ca:b4:76:74:
                    03:53:0a:00:a8:c0:8d:67:b9:f2:aa:ea:98:e4:f7:
                    a4:0c:83:f9:c9:8b:68:8e:97:c8:d0:58:7f:6e:9c:
                    5b:17:c8:ff:69:20:46:1b:b3:4d:c6:04:12:36:a7:
                    49:9d:60:44:bd:3d:8d:f8:4e:38:7d:fe:27:16:5c:
                    2d:51:61:f6:38:f3:50:ea:1a:2b:e1:28:7c:b0:ef:
                    7a:16:e3:10:c7:f0:8c:50:cc:8f:f5:87:90:c6:af:
                    52:cc:5e:84:13:69:08:4a:f2:3c:00:06:49:f4:ad:
                    70:26:28:ee:33:1d:bf:62:db:49:c9:42:9d:93:5b:
                    ad:a5:bb:e4:da:29:69:72:da:71:3f:99:20:91:75:
                    a4:2e:b3:3f:91:71:52:c8:1f:43:d6:d1:dd:e0:43:
                    8c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5F:6E:A9:20:00:F0:42:6C:AD:C6:06:99:C1:51:4C:E3:CA:31:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/50b0f92e-692b-3af2-b11e-84d753392d9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.163.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:3d:0f:cf:fb:7a:86:c5:97:fc:17:4c:02:d8:7e:a6:57:23:
         f7:59:95:3a:d1:44:8b:a0:3d:75:fa:a8:72:96:e6:81:18:9b:
         a5:2e:f3:ae:20:d6:56:5c:33:fd:df:77:3b:8a:83:83:f8:d0:
         fc:59:0f:58:71:8d:fc:06:6d:ca:7e:a5:c7:42:8f:6f:68:d9:
         e4:fe:aa:56:31:b1:82:d3:a2:c7:0d:bd:63:00:d6:aa:e4:79:
         15:0c:db:d5:d5:61:22:36:06:43:4c:c6:75:06:ab:a8:f7:98:
         61:34:66:6a:7f:b0:b3:a6:63:f2:04:2b:f1:04:e7:47:91:11:
         ee:f7:d7:93:cc:c8:bd:03:00:2d:ea:27:c9:10:fd:ce:82:28:
         ac:f0:3d:30:77:57:3e:fa:af:bf:65:92:da:ea:8d:9f:bd:df:
         25:5c:83:61:78:11:22:8f:f3:34:ad:23:38:33:78:18:1c:55:
         d3:f1:14:62:53:58:b8:58:f3:60:17:83:f2:bd:8e:e9:ea:71:
         4b:4b:15:57:af:54:59:ee:b7:08:2f:b3:5d:5d:9b:df:94:7f:
         46:6f:d9:c8:fa:a3:56:12:a5:37:34:d7:94:1b:86:37:42:cb:
         1f:2d:1c:5a:31:de:40:a6:64:c3:ef:c4:c0:e3:ab:45:5b:4f:
         e0:6a:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:36 2025 by rpki-client