Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/609ae15d-6fd2-3143-8916-ab92b905edc7.roa
File:                     609ae15d-6fd2-3143-8916-ab92b905edc7.roa (raw, json)
Hash identifier:          Si0UAecra2s5eKuewVNaer+Bg3ice2JmJI35avFg7ac=
Subject key identifier:   63:DE:6E:41:BF:93:3A:B7:04:33:94:F8:A4:04:33:3D:68:A7:1A:3C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B745A6C867EB4E62DC5480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/609ae15d-6fd2-3143-8916-ab92b905edc7.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     36522
IP address blocks:        207.231.231.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b7:45:a6:c8:67:eb:4e:62:dc:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=539edf36-52fa-4d72-8dac-085cf0c93c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7e:9e:52:cd:22:77:c6:d0:fb:3b:4b:38:59:
                    70:71:0c:70:5b:55:a1:ec:1b:05:cc:d1:78:ac:24:
                    3c:01:7f:df:f0:a6:03:e6:8c:b0:8e:5f:51:48:96:
                    88:e0:b1:7f:78:ce:2f:26:e8:02:79:8f:6f:e4:25:
                    d9:41:7a:cd:25:04:11:b5:cd:33:49:0d:fc:b8:25:
                    60:f6:62:5d:d8:e3:b7:82:89:4f:5a:89:af:af:4b:
                    a5:0d:0e:8c:85:fb:15:46:da:55:63:21:03:65:e3:
                    bb:f0:2b:b1:05:81:45:42:02:e4:3f:5a:1f:bb:ce:
                    03:3f:a4:f0:7d:69:d1:47:48:3d:2d:e3:2f:be:5d:
                    6c:c2:7f:5c:7a:c8:98:7d:55:d5:49:75:0d:de:16:
                    25:9f:75:6f:02:ac:b9:a9:8a:bd:d6:e5:c4:8c:ec:
                    15:41:15:31:a2:71:8c:c6:73:cd:5d:9d:da:47:6e:
                    0c:96:27:a6:c5:87:3f:f5:41:12:27:e8:13:05:d7:
                    8d:99:18:1f:a4:ce:64:bb:ec:0e:1b:9b:ee:2e:fe:
                    60:9f:22:39:f9:8f:24:67:ec:ec:db:df:8c:8c:73:
                    62:55:3d:9e:3b:09:b8:05:4c:8f:ec:5f:a4:54:cd:
                    82:e8:00:05:8c:0f:77:ad:b2:9e:ba:89:a0:50:90:
                    5a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DE:6E:41:BF:93:3A:B7:04:33:94:F8:A4:04:33:3D:68:A7:1A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/609ae15d-6fd2-3143-8916-ab92b905edc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.231.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:24:ac:bf:5c:ac:cf:65:0a:95:3a:19:cb:f5:32:3e:64:84:
         84:8d:68:51:ab:a7:49:ef:b1:61:c6:9e:60:0e:64:34:a7:96:
         48:f0:84:9b:fa:3d:0c:70:ac:fd:f1:e8:b9:62:5d:3b:69:56:
         49:02:64:1c:11:7b:6d:cc:ba:3e:dc:98:10:e2:e4:a6:51:9b:
         69:1d:3f:ac:71:53:4a:0e:11:83:d5:6d:2c:76:a5:f9:40:df:
         0e:70:86:72:e5:a2:ed:da:96:b4:f3:80:e4:62:2a:e3:e5:97:
         7d:46:e5:45:d3:83:e3:ee:6c:a6:0e:27:85:8e:fc:72:23:09:
         3a:8c:0e:93:d3:1f:5a:4d:dd:7c:5b:34:14:fd:10:21:88:ed:
         4b:30:ac:ad:a1:ac:76:a4:46:24:a4:db:a6:5d:c0:e8:5b:a7:
         4b:89:de:7b:95:45:12:6c:fb:35:83:e2:18:0e:8f:84:fb:b6:
         cb:be:0d:21:4b:2a:b4:75:0c:07:20:9d:a6:c8:55:35:8a:04:
         8a:c2:4b:46:d2:74:5f:2a:8f:82:6b:b4:c2:8a:c4:65:b8:90:
         50:b0:af:6e:53:bc:c0:4f:6e:78:73:2e:eb:9b:7b:ef:7e:da:
         dd:bb:37:84:ae:6e:15:b9:89:b4:95:24:f6:57:4e:fb:7f:a0:
         3f:06:58:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:53 2025 by rpki-client