Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6e8f1c0e-d1f7-3424-ab0e-2ed0a6f9967c.roa
File:                     6e8f1c0e-d1f7-3424-ab0e-2ed0a6f9967c.roa (raw, json)
Hash identifier:          3l4QGMFfc/RbJVqglwe3Lfi/eyN6Z4qsrW0XLMyzvuk=
Subject key identifier:   E2:E3:C6:C1:62:97:17:11:82:67:A7:5B:FC:C5:E7:11:EE:B4:4E:45
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B5BD2CAFD12297B863DF80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6e8f1c0e-d1f7-3424-ab0e-2ed0a6f9967c.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     36522
IP address blocks:        184.150.68.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b5:bd:2c:af:d1:22:97:b8:63:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=42baeb2f-56d4-467e-8dae-7b515b5827f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1d:97:19:c5:a2:67:bc:a3:b4:d2:8b:5f:0e:
                    cd:02:75:47:d4:30:de:11:69:37:1a:70:74:49:49:
                    73:d2:ea:fc:42:9b:0c:62:4b:21:1f:13:3e:79:a9:
                    67:f2:2e:45:a1:48:c7:b5:16:a2:8f:91:b8:5b:d0:
                    02:c5:a0:22:c0:b2:60:f2:fd:d5:03:7f:eb:cf:05:
                    04:03:ed:61:56:75:de:e2:8b:e8:b7:d9:cf:a6:a7:
                    7d:b5:c4:71:a8:4c:87:49:5e:31:68:1e:cf:8e:49:
                    b4:a3:76:60:8d:bd:b1:e0:6c:f4:52:e9:ee:5f:bb:
                    4d:00:22:05:e6:96:3d:98:73:81:ca:35:d4:ec:b6:
                    f2:dc:23:78:d9:b3:0f:28:31:b4:0d:16:d3:30:6a:
                    ca:0e:ed:5b:72:f9:83:f1:92:5f:27:90:b1:73:b4:
                    9a:e9:cd:7d:62:19:c6:56:d8:12:0b:17:c8:88:01:
                    e7:eb:b2:e8:d9:3e:0e:20:cb:5b:13:16:a5:4f:36:
                    f4:48:d6:ef:3d:14:3d:a6:97:21:df:21:7d:ac:6b:
                    f7:1b:39:07:bb:da:4c:b1:96:48:57:c8:ac:11:01:
                    a4:7e:d3:91:da:65:9e:cd:77:27:f7:2e:af:91:53:
                    17:30:74:a1:b6:0d:5d:dc:21:1c:89:43:4b:ec:7a:
                    e7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E3:C6:C1:62:97:17:11:82:67:A7:5B:FC:C5:E7:11:EE:B4:4E:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/6e8f1c0e-d1f7-3424-ab0e-2ed0a6f9967c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.150.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:59:01:72:4a:f8:aa:6c:1b:26:33:00:df:75:9a:9b:63:f9:
         42:80:23:90:04:2d:56:71:8d:25:a1:a3:5c:bf:a0:ad:22:46:
         50:ce:a0:ae:c5:1b:63:ca:23:6a:73:d7:2b:97:2a:a2:eb:14:
         d7:e0:d8:91:bf:09:52:4f:69:f0:df:26:30:49:58:2a:af:7f:
         61:75:9b:db:d2:b7:d6:e8:a5:d7:29:65:a1:e4:14:42:fe:ab:
         ae:66:3c:f7:f3:87:8a:31:63:ae:7d:74:22:d8:53:ee:21:e8:
         13:ba:d8:1a:55:74:9f:09:e0:0a:79:61:1b:b6:b2:8a:9a:d3:
         9c:67:0d:6e:e1:7d:4f:3c:7c:20:37:14:c9:54:43:27:5f:2a:
         a4:1c:cd:ff:77:4f:fe:d2:0b:17:59:c4:36:75:a9:b5:7a:2e:
         91:aa:a3:20:0e:96:dc:31:60:c4:06:fb:84:7d:c1:d8:43:2b:
         6d:f6:61:a5:75:f5:0c:f2:7b:ff:a8:4b:1f:35:43:cb:0f:1b:
         3b:a4:f4:c5:69:84:4d:d4:d8:e7:89:0d:b9:a6:96:9e:ea:53:
         af:f4:3c:d7:6e:af:71:d9:55:92:89:40:40:4d:f8:ae:22:93:
         45:9f:1f:0d:03:dd:7e:ca:68:65:83:eb:e3:f0:fe:21:90:1c:
         59:f1:d3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:48 2025 by rpki-client