Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5dc82ac-ca36-3367-91d3-43eebdb0da9d.roa
File:                     d5dc82ac-ca36-3367-91d3-43eebdb0da9d.roa (raw, json)
Hash identifier:          ZOx9RF0eoSDi9EPMIDTHSEyIAh1ixYhVq557GjxAM4c=
Subject key identifier:   A7:0D:FB:12:A6:3B:E8:4D:32:CF:0E:1D:CB:13:7D:AB:F8:39:8A:94
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2A45F799400B7AFFC4FC80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5dc82ac-ca36-3367-91d3-43eebdb0da9d.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     395088
IP address blocks:        206.47.173.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2a:45:f7:99:40:0b:7a:ff:c4:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=6ec9a8bb-3c8a-4295-bb9a-1379e21c8e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d5:39:d0:cc:f1:59:42:27:c5:ea:38:af:11:
                    73:4b:3e:1c:71:48:f7:0b:9e:e4:55:a3:54:35:8e:
                    12:8e:59:3e:7b:d0:7e:75:e6:eb:19:ec:12:ba:1d:
                    ec:bf:cf:5c:04:4c:3f:d1:87:2f:5b:9a:7e:29:68:
                    9b:c5:a4:bc:50:9e:87:0a:74:52:04:4f:28:1a:57:
                    b6:a4:60:6c:fd:27:65:1b:32:50:49:fe:5d:83:47:
                    c0:af:3d:10:17:73:41:e9:4c:36:b9:94:c1:83:34:
                    9b:f4:e6:44:52:cb:f7:67:63:0a:5f:0d:f7:b1:59:
                    82:a1:e6:45:3b:29:2c:26:b9:94:a3:c3:38:16:b8:
                    7f:60:6e:41:f1:58:19:5f:83:f5:07:69:2a:af:9f:
                    11:7e:cc:9a:b5:3f:6e:1a:17:78:24:bf:68:bf:ea:
                    c2:e5:5e:f2:18:63:e5:1d:97:36:ea:19:ff:62:4a:
                    c9:6b:41:59:27:2d:b3:88:c5:c5:70:16:eb:a3:9e:
                    b8:99:28:f2:1c:fe:e6:5b:f8:c8:57:e2:c5:4a:f0:
                    24:e2:87:cb:53:6f:de:35:7d:8f:80:b7:92:6e:b0:
                    2b:5c:52:7e:bf:4a:19:57:d0:33:32:65:67:8a:59:
                    ae:6f:2d:84:ed:58:36:b3:e7:50:85:e4:88:82:5b:
                    8d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:0D:FB:12:A6:3B:E8:4D:32:CF:0E:1D:CB:13:7D:AB:F8:39:8A:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d5dc82ac-ca36-3367-91d3-43eebdb0da9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:47:ea:39:9f:80:ad:f3:97:c4:5b:cf:d6:c9:cc:4f:a4:3c:
         b8:ba:8a:7f:12:8b:a7:1b:cc:0d:f3:5f:ab:be:45:d8:0a:86:
         6e:3e:f9:ae:6e:77:a8:9c:b6:19:60:81:53:2f:7b:2f:32:93:
         3b:6d:9b:46:5e:93:55:60:a7:6a:2c:ed:cc:8e:8f:ef:73:c9:
         55:97:0a:4a:a3:f2:80:6a:77:d6:a0:24:e0:a2:f3:3c:fb:e6:
         63:91:fa:25:42:8a:b9:45:49:0c:9e:c4:aa:ec:a4:21:1c:c6:
         e0:23:49:d1:52:c5:36:75:34:df:82:5b:12:c4:ed:36:58:15:
         de:35:e8:ec:95:65:94:24:f7:8d:6c:ac:e4:33:f4:da:a7:ea:
         27:81:21:0a:6b:27:c4:a6:d6:7f:95:11:59:1a:5e:c8:b4:50:
         97:47:ac:9d:dd:50:ab:9c:b6:3a:eb:00:9a:d9:b9:26:e7:69:
         bc:06:83:0c:00:a6:08:a2:8e:a9:44:78:f1:f2:33:be:0e:ed:
         bd:80:0d:a4:7f:86:26:19:8d:e8:a9:d8:4f:f6:9c:c8:34:61:
         e5:5e:db:e0:0a:34:81:c5:a2:78:87:a0:be:fb:25:1d:4b:b4:
         c5:23:10:78:3e:d9:a5:d7:05:24:25:66:09:ac:e8:68:c8:ab:
         23:61:77:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:27:19 2025 by rpki-client