Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d1436432-4fee-3d3f-9ba6-dde3f9d293c3.roa
File:                     d1436432-4fee-3d3f-9ba6-dde3f9d293c3.roa (raw, json)
Hash identifier:          E8ComCkepPJ3pnJYvN2JTWjWJMlRSrDOoEGFKtHmwHE=
Subject key identifier:   7A:F2:3A:E1:F3:85:D6:5E:01:76:57:50:4F:CB:3F:B0:8E:FA:D4:EC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B7914B2CCEACB66C43C980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d1436432-4fee-3d3f-9ba6-dde3f9d293c3.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     15321
IP address blocks:        209.226.6.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b7:91:4b:2c:ce:ac:b6:6c:43:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=5fbb7170-5c65-4bf9-8547-4994169bde7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:21:86:bb:30:eb:9a:e3:db:e2:ea:f0:aa:93:
                    84:67:44:3e:b9:11:78:18:6c:07:33:48:84:8e:fc:
                    72:72:c9:43:63:d6:a9:be:c6:ba:64:df:e3:7e:50:
                    50:47:49:2a:c5:af:81:27:87:cf:38:3b:4f:2e:8c:
                    bd:56:11:53:0c:c8:90:83:a3:8b:21:c2:ff:fd:af:
                    68:57:85:e5:bd:75:5f:61:88:b7:41:6c:f3:91:28:
                    fb:d2:be:53:af:33:ea:39:10:31:6e:be:21:8d:96:
                    af:31:55:39:1e:5e:1a:3a:c6:e7:11:75:bd:75:1a:
                    f4:8d:00:04:af:1a:76:af:09:b9:03:92:10:52:58:
                    a7:2d:4a:a7:d1:91:5f:1d:a3:a7:62:a9:d5:0f:3e:
                    41:92:21:69:37:81:ca:91:c5:37:91:d6:46:1f:b5:
                    dd:15:04:2f:cc:4d:93:58:81:96:af:9b:a2:d8:8a:
                    8e:64:b6:5c:4f:94:5f:b1:d9:49:3d:44:c6:57:f1:
                    7b:50:1c:b9:a0:4d:89:cc:ed:2c:e7:d0:2f:a0:36:
                    6e:e0:db:a1:dd:c6:c7:37:f7:b2:27:b2:50:ab:01:
                    b9:31:0e:bf:3a:c0:50:47:a9:15:e6:a4:14:bb:6b:
                    6c:5a:69:55:7f:4f:a5:f1:32:2e:cb:e0:65:01:f6:
                    13:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F2:3A:E1:F3:85:D6:5E:01:76:57:50:4F:CB:3F:B0:8E:FA:D4:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d1436432-4fee-3d3f-9ba6-dde3f9d293c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.226.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:60:26:de:0a:e0:32:f2:45:5b:21:ba:ec:69:54:35:de:b8:
         1e:e2:18:d8:aa:96:ef:a3:90:7a:c5:b9:b7:ae:65:58:5c:38:
         d5:b8:a8:c1:a4:40:01:e3:19:33:a1:18:30:39:eb:7d:80:85:
         dd:1b:99:1a:db:19:dc:7c:ff:6e:0f:2a:ec:1b:d5:b1:91:93:
         40:70:8a:db:4b:2f:68:75:8e:0b:22:7f:08:34:d8:91:5f:97:
         1b:41:95:65:09:fe:bd:6d:61:a3:03:73:aa:d4:bb:f5:c4:10:
         ad:af:05:8b:c3:0e:cb:03:1f:97:b9:24:c4:0d:31:4c:a8:65:
         a9:ac:1b:4b:2c:be:c4:27:fe:cf:e5:ef:60:fd:9a:40:09:ee:
         1c:2c:82:00:8b:9d:00:d8:65:5d:00:5f:85:1a:57:0d:12:2d:
         cf:2f:e8:c7:ad:61:de:89:93:27:c7:d1:d9:bb:1e:6a:93:84:
         04:fc:27:2b:af:f3:fe:75:f2:aa:d1:22:25:65:51:04:74:b2:
         0a:c6:bc:fe:c8:8b:52:91:d1:2f:da:dd:16:20:84:6a:08:17:
         5b:73:d4:7b:63:76:c3:4d:9c:6d:cd:16:48:f9:11:7d:9c:78:
         67:2b:38:48:80:5f:13:11:a0:58:a0:22:dd:bb:3b:28:60:52:
         8b:86:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:44:29 2025 by rpki-client