Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4ea05f2-703c-34eb-9f34-a4b3a48a07ee.roa
File:                     f4ea05f2-703c-34eb-9f34-a4b3a48a07ee.roa (raw, json)
Hash identifier:          qq6FGT7kPrTShcEBW5C2tl9HLpkXBvvb1rbDJ4Pprk0=
Subject key identifier:   3D:BB:FD:15:57:0B:86:37:40:23:82:08:5D:B3:12:6F:34:E4:9A:41
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D29B93592DE3F100E95BB40
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4ea05f2-703c-34eb-9f34-a4b3a48a07ee.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     21723
IP address blocks:        204.101.44.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:29:b9:35:92:de:3f:10:0e:95:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=d93dea65-b103-4cd0-ab5e-f1d58e1382cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:73:88:c6:d4:94:fc:bc:58:44:7a:76:70:0f:
                    29:02:f3:f8:44:d4:0d:ec:5f:37:ca:05:33:49:12:
                    d2:8d:e1:8c:f8:a6:21:f5:78:6f:7b:6a:18:45:04:
                    9a:bd:25:ca:85:95:45:4a:03:10:ea:be:e4:5e:4f:
                    08:54:82:59:b8:f8:15:e6:58:79:23:63:17:e5:a9:
                    58:d1:c5:4f:59:51:af:9b:50:90:67:75:a0:35:ea:
                    92:a2:e9:28:e5:81:80:31:3d:e9:14:37:0e:00:45:
                    72:54:4b:d8:23:30:59:63:b1:5a:e6:44:99:31:64:
                    5d:81:dc:36:8e:ba:36:a4:b6:15:03:3c:36:57:2a:
                    16:b6:91:54:bc:45:19:f4:5f:f6:3f:0f:fe:7c:77:
                    4a:c3:46:14:b0:a9:88:80:b2:57:1e:be:67:33:59:
                    a7:83:a6:7c:73:5c:bb:5c:0b:c9:af:14:f5:ef:47:
                    40:1e:5f:56:93:80:a4:1d:4b:12:c8:10:04:5d:0f:
                    a3:03:ff:a4:45:a3:fa:b6:fe:7f:86:c9:f3:3b:5f:
                    8d:55:fb:dd:b8:e7:ab:f8:fb:3a:1c:2e:d7:7d:78:
                    b2:82:46:19:fc:3b:a3:49:28:62:13:6c:84:8b:dd:
                    b3:24:0c:7f:f6:d2:65:5d:2b:8f:6d:c2:7e:4e:a8:
                    ac:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BB:FD:15:57:0B:86:37:40:23:82:08:5D:B3:12:6F:34:E4:9A:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f4ea05f2-703c-34eb-9f34-a4b3a48a07ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:e5:f5:64:35:5b:b5:b1:e7:08:22:17:fc:87:b2:98:c4:b5:
         7c:47:df:73:f6:70:a3:37:8c:8b:d4:57:ce:ea:b7:14:14:6b:
         58:6b:67:e0:38:83:57:c9:ab:14:c3:3e:60:be:54:3c:30:ed:
         42:03:32:69:6e:70:32:04:db:48:ac:1a:be:b5:0c:da:49:e5:
         ef:b3:63:30:25:c0:90:03:01:1d:ba:70:02:58:fa:e5:37:a6:
         38:ec:52:c6:8b:58:22:14:96:0a:84:1b:df:e9:81:1d:8f:51:
         fa:a7:8e:03:37:44:60:34:39:65:dc:8e:d9:0d:bc:93:5f:c8:
         78:6a:71:1b:f6:48:bc:4d:42:bc:d6:f0:d0:a6:ae:09:ea:f4:
         18:4d:cd:af:18:67:f2:ff:32:77:61:6b:0e:a7:ad:64:49:92:
         31:ea:7f:00:58:f5:49:ba:8c:c2:46:1e:b4:c5:3e:e3:0d:81:
         8c:bb:b4:15:a1:55:4a:ed:74:15:43:f7:6b:ba:e7:d6:27:10:
         fc:ad:ce:17:22:00:80:f9:54:d9:a1:c5:75:61:de:3f:1a:8c:
         f8:7f:c1:0a:ac:0f:06:27:31:89:68:5a:3f:e0:a3:a8:4b:c9:
         a6:dd:db:1d:42:da:01:b0:33:f2:13:6b:9b:6c:57:82:b6:61:
         72:d5:c6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:40:29 2025 by rpki-client