Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/787aac68-91a5-3e3f-8933-966c2935af0e.roa
File:                     787aac68-91a5-3e3f-8933-966c2935af0e.roa (raw, json)
Hash identifier:          EykfNh1rax5n6AyPKbjJDwxI5hWRn8IgoUCQpoYiC6M=
Subject key identifier:   58:6C:07:5B:10:64:9B:CD:FC:4F:C5:46:BD:FA:0C:37:79:2A:10:6D
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B6F7D3FFD7A85F4EC3E4A8
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/787aac68-91a5-3e3f-8933-966c2935af0e.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     25946
IP address blocks:        207.61.236.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b6:f7:d3:ff:d7:a8:5f:4e:c3:e4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=97382c24-1a72-4399-9578-726d83d73066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:00:96:12:c1:9b:ca:70:47:05:49:fb:14:a7:
                    55:0e:63:f6:2f:51:7a:6c:46:53:7c:cd:0f:7e:5a:
                    a1:f3:d7:a0:b1:4e:24:24:10:fd:4d:77:02:bd:3b:
                    c9:5c:3a:c6:73:fa:63:48:8e:34:29:91:a8:f4:48:
                    ca:e3:bf:19:fe:9c:47:f9:a9:56:f8:e7:9f:4f:a9:
                    0a:55:05:10:bd:52:7d:18:5c:a1:e9:26:3a:e9:0d:
                    6f:64:84:03:53:d4:c1:f7:07:f4:4f:ab:08:ec:b5:
                    0d:44:ec:20:41:58:64:30:db:f0:d6:d5:7f:02:64:
                    c8:ca:f0:53:1b:2c:c4:51:ac:0f:84:d1:b7:8f:87:
                    98:3f:5e:52:cf:da:e3:af:68:c9:15:ef:9b:36:ef:
                    bc:dc:47:13:2d:35:1c:7d:71:e4:af:b0:cd:6a:6a:
                    77:b5:50:42:b9:1e:9f:f2:23:dc:d2:0c:f5:75:74:
                    9f:a0:a7:98:02:2b:95:76:de:44:e0:c0:be:6d:cb:
                    a0:1b:ad:ae:14:d4:47:6d:21:a2:be:2c:4f:f5:1d:
                    0b:2e:68:40:c9:63:f2:17:5b:97:9a:78:19:0d:80:
                    f3:aa:1d:5a:cb:48:d1:5c:26:52:d9:f9:90:cf:d3:
                    b6:84:13:28:97:e4:11:55:fa:19:9f:e6:a0:5e:b4:
                    18:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6C:07:5B:10:64:9B:CD:FC:4F:C5:46:BD:FA:0C:37:79:2A:10:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/787aac68-91a5-3e3f-8933-966c2935af0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.61.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:1a:6d:98:0b:a2:67:84:46:5e:d2:14:ad:f3:4e:80:b6:5c:
         18:1f:83:55:02:e8:7b:f8:b5:3a:1e:7a:34:e9:bd:3d:a9:c4:
         a2:5a:b2:59:51:6d:29:7e:77:69:6f:47:24:dc:ae:53:61:6e:
         ea:41:91:97:19:f5:69:e3:68:b7:e6:82:0a:01:50:77:7d:bb:
         00:18:07:bd:2e:2e:32:ef:bc:60:67:24:33:17:43:bf:3d:c1:
         8e:ee:30:2a:32:84:f2:7c:5b:78:6f:37:f0:03:94:48:9b:54:
         af:71:50:fa:a8:be:aa:19:b8:b9:19:ea:6d:a2:93:a1:a5:f1:
         7e:54:69:99:4b:6e:f5:7a:c3:7e:f1:f7:66:e1:9e:97:86:a7:
         ee:82:a7:a1:1a:6b:b1:1f:cf:6f:89:e5:3b:c4:dc:28:bf:fd:
         62:bb:e1:bc:36:ca:75:9e:cd:b8:f9:c5:c0:d7:ec:42:58:41:
         89:4c:80:33:a2:f9:9a:2f:a4:27:93:35:2c:e6:70:cf:6d:53:
         1f:b3:f0:42:a9:0b:bd:62:cd:c7:dd:d6:9d:41:f9:df:bb:c4:
         38:20:de:17:d0:7b:5d:dd:05:2d:d1:93:01:30:03:77:67:fa:
         0e:a0:bb:3b:91:4e:f7:86:35:f3:74:fb:85:8d:68:fe:86:d9:
         c6:df:a9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:23 2025 by rpki-client