Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8c6aabe0-f1c3-3041-b424-2297db2bfff2.roa
File:                     8c6aabe0-f1c3-3041-b424-2297db2bfff2.roa (raw, json)
Hash identifier:          xE08Din6qb53Kfa4v2nn8/j7vqARpIZ2giy9j2aS6Qw=
Subject key identifier:   B2:86:D3:62:3F:FE:F4:07:C5:F7:BE:E6:F6:48:00:AA:3F:71:42:35
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B60F1EEB8F47362610C380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8c6aabe0-f1c3-3041-b424-2297db2bfff2.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     577
IP address blocks:        204.101.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b6:0f:1e:eb:8f:47:36:26:10:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=19d3d7ee-26c1-4751-9c6c-ad17437fe37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:aa:17:0e:69:9c:bf:2d:f7:57:d1:e8:9c:
                    16:77:81:aa:00:39:22:2c:cf:c7:d6:d0:27:b7:6c:
                    88:b2:9a:41:e5:3d:d3:f4:d8:e6:2a:6a:b2:0d:68:
                    14:21:9e:73:85:b5:e3:bb:c8:ad:e5:10:2c:5d:72:
                    0b:f5:b1:3e:7b:e4:b0:fe:1c:53:64:81:f3:30:64:
                    17:18:80:a1:e4:aa:30:a7:de:4f:5d:b3:f1:d8:29:
                    f5:ae:d0:9e:28:e0:a3:d2:7a:39:f1:d7:23:ab:ec:
                    b6:38:8e:6a:d8:d6:90:24:5e:25:2c:82:79:03:bc:
                    17:f9:d6:a5:2a:02:bd:1f:53:93:31:96:ac:21:8d:
                    82:36:7f:b5:69:4e:33:20:b1:ce:52:0f:a3:8e:30:
                    fc:cd:14:8c:a5:7f:09:6d:37:7b:ba:b3:72:ac:36:
                    c4:f8:7a:a9:f8:cd:2d:40:af:f8:cf:44:14:fe:6b:
                    e6:4f:6d:05:be:df:12:1e:e2:4e:95:e6:79:be:14:
                    14:47:9e:dc:5d:ef:0f:9c:53:44:06:53:8a:22:32:
                    a2:f6:67:6b:3a:4e:5a:ed:4e:95:28:8b:61:94:a1:
                    90:4a:30:ac:74:c7:ac:57:a6:8a:ab:c0:aa:c1:6e:
                    a6:c1:eb:13:83:87:70:ad:a6:cd:c2:e0:7a:7c:8e:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:86:D3:62:3F:FE:F4:07:C5:F7:BE:E6:F6:48:00:AA:3F:71:42:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8c6aabe0-f1c3-3041-b424-2297db2bfff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:96:b6:84:22:d8:a0:80:5f:23:13:be:d3:aa:36:89:9d:71:
         85:63:62:6a:53:b8:7e:9f:5e:ca:8e:fc:85:fd:76:80:b4:e0:
         2f:f0:72:57:fb:c9:09:b2:bc:a4:85:18:14:a2:fc:60:aa:bc:
         77:c5:e9:d7:dd:d8:f3:c3:6c:67:2d:04:93:46:7d:6c:0f:43:
         74:bd:7b:79:af:6b:50:50:68:e3:89:ff:32:0a:f5:19:60:37:
         94:36:4b:f9:e4:4c:85:ae:fe:e6:31:7f:d1:34:c1:1a:59:b0:
         8c:f9:9d:5e:e5:6b:cc:15:83:e2:90:c3:3d:86:0f:88:99:52:
         56:91:07:d2:b4:70:54:b4:29:ed:f5:2d:30:43:59:85:2e:dc:
         66:5d:70:b3:36:ee:4b:b2:73:81:05:20:58:8c:e1:e0:35:ad:
         4d:b8:75:d1:2e:23:5f:19:73:da:24:74:1b:9c:30:50:7b:07:
         4a:12:6c:a2:8c:db:8e:5f:6f:db:80:86:d4:a1:ae:56:07:28:
         fd:93:20:78:4f:e0:92:76:64:65:7b:57:54:77:3b:f9:f1:9f:
         28:04:f3:24:2c:ef:e3:c2:54:0a:4b:64:a7:34:eb:ce:7d:dd:
         6c:1f:ad:84:05:5f:56:91:2c:c2:59:64:c5:ac:80:77:6b:eb:
         e6:71:b4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:52:07 2025 by rpki-client