Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8474ae82-d682-34a6-bd00-d90b357000a6.roa
File:                     8474ae82-d682-34a6-bd00-d90b357000a6.roa (raw, json)
Hash identifier:          kvKiSA573KQveDmGk7fmApWxrLHatSoj9z8OPVjeQOQ=
Subject key identifier:   22:25:2E:8D:C6:F8:6D:F3:04:4A:0C:FD:CD:8E:30:2D:6C:ED:89:CF
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B526D15BE72608AE4B4980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8474ae82-d682-34a6-bd00-d90b357000a6.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     36522
IP address blocks:        69.158.240.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b5:26:d1:5b:e7:26:08:ae:4b:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=d8608c23-1717-4d4f-b246-02f84fe217a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:b5:8d:2d:73:21:d9:8b:0b:ae:19:16:8c:
                    a8:b8:a3:68:03:25:14:31:11:79:ce:ae:2a:66:30:
                    3e:3a:b0:8d:05:65:71:a8:cb:94:cd:cc:95:d2:3d:
                    13:c9:d8:e6:9d:f1:04:dc:4b:1a:dc:d0:dc:57:12:
                    f6:fd:13:c4:f4:00:12:5f:3b:d3:76:48:c9:81:90:
                    1f:86:e1:7c:fd:2e:8a:c9:78:b5:7b:01:9a:50:cf:
                    c9:10:31:9d:e7:a4:d6:9e:b4:67:78:7a:bd:8b:69:
                    35:be:3e:7f:bf:23:71:be:67:61:15:af:80:41:6f:
                    41:09:de:3f:2f:11:e8:bf:36:a8:ce:9d:a4:be:23:
                    72:1d:ec:41:19:ea:0b:21:11:45:11:da:a1:5d:cf:
                    a4:a0:34:87:07:7d:de:06:5a:c8:98:b1:08:25:d1:
                    32:20:1c:ae:43:85:d1:22:5b:20:41:8e:81:fb:b9:
                    b6:ec:92:ca:5c:59:c4:a2:b1:45:77:92:d6:d3:1c:
                    e8:7c:71:69:c4:c2:09:6e:62:ff:11:d3:18:70:1c:
                    2b:09:b8:2f:f9:e7:a0:b4:0f:fe:9a:53:6b:40:a0:
                    d5:10:be:38:e6:51:47:9c:fa:56:f2:ba:06:b2:65:
                    94:9a:a8:15:c1:9b:25:fa:ea:22:38:2f:5d:62:2a:
                    ee:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:25:2E:8D:C6:F8:6D:F3:04:4A:0C:FD:CD:8E:30:2D:6C:ED:89:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8474ae82-d682-34a6-bd00-d90b357000a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.158.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ce:dc:f3:9f:44:d6:ea:be:9d:ff:05:9f:3f:78:9c:f2:47:
         34:bf:40:fd:71:82:39:08:d8:dd:92:71:a1:b8:45:8a:aa:f8:
         4f:b5:bb:02:9e:38:4f:6d:d5:44:6a:a8:b7:01:1e:83:ce:9e:
         56:d1:0c:79:dc:87:f4:77:ae:ec:03:c2:f3:7a:42:6e:e2:f5:
         99:4a:23:a6:61:62:32:08:b9:77:93:c3:01:41:7a:86:98:fe:
         98:60:cd:a9:02:17:1e:e1:8f:f9:8a:73:b9:67:05:a5:d7:63:
         28:f9:4d:c8:33:8c:a6:bb:24:65:37:57:06:c1:f9:79:2e:d5:
         3a:c3:be:62:16:27:41:15:35:98:e4:54:24:f0:26:5e:25:28:
         84:eb:ef:d2:b5:75:37:13:e0:20:68:6b:fb:6e:2f:12:2c:ec:
         ca:61:ab:0d:90:42:dc:ee:e9:1a:1f:67:7b:18:c6:d6:55:37:
         1b:6d:38:6d:ae:f3:a3:b5:03:f4:c2:93:5f:7f:f0:87:b1:6a:
         e4:00:75:54:75:60:a6:7d:31:56:ef:71:21:75:65:a0:ad:9f:
         ce:95:de:33:9f:10:e9:d9:fe:5d:97:4c:ca:7c:c9:9d:b2:64:
         af:16:e4:b6:aa:07:a1:71:4a:84:c1:da:03:48:cf:de:4b:6a:
         f7:5b:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:27:42 2025 by rpki-client