Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19504bd0-ea5b-3caf-ad2a-d34e3d23b336.roa
File:                     19504bd0-ea5b-3caf-ad2a-d34e3d23b336.roa (raw, json)
Hash identifier:          7KyO08Vz9PGERYyp31F2miOisV1FlDpwUj70EyjNDsc=
Subject key identifier:   8A:03:0D:8E:47:00:56:71:94:34:54:4D:26:4D:23:36:08:BF:86:A8
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285845DCD8D5A32240C44886FB3A00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19504bd0-ea5b-3caf-ad2a-d34e3d23b336.roa
Signing time:             Sun 12 May 2024 12:00:00 +0000
ROA not before:           Sun 12 May 2024 12:00:00 +0000
ROA not after:            Mon 16 Sep 2024 04:00:00 +0000
asID:                     13335
IP address blocks:        162.159.206.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dc:d8:d5:a3:22:40:c4:48:86:fb:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 12 12:00:00 2024 GMT
            Not After : Sep 16 04:00:00 2024 GMT
        Subject: CN=07b3ebdd-d5f6-4e9f-8a53-fe779ff1917e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d4:4d:b6:30:71:78:e4:56:2b:48:99:ad:aa:
                    13:6b:26:88:8e:62:d6:f7:cc:fd:d9:99:8d:40:f4:
                    fc:13:ab:04:bb:04:e9:27:2b:f0:e1:29:dc:56:70:
                    53:d6:55:1b:90:47:5c:e5:a9:3a:80:21:69:1c:97:
                    78:9a:1a:d1:7e:ec:1b:6d:be:4a:08:4a:23:3c:1d:
                    e5:f8:32:7d:11:52:b4:15:e6:c8:ba:f3:90:4e:98:
                    22:6b:9c:43:8b:7e:7f:89:b8:71:7c:f8:6e:e0:af:
                    6f:3e:ca:18:03:82:e4:cd:61:2f:e1:07:70:c7:83:
                    9b:3d:b0:9a:7a:78:cd:ef:7b:6f:7f:6d:98:b3:50:
                    87:b9:f1:9f:8c:fa:f1:a7:e6:27:8c:de:7a:b8:ae:
                    e0:ba:be:64:86:4c:d6:72:fd:4e:73:cf:09:1e:ed:
                    3b:2e:8d:8a:68:17:fe:fa:f9:fa:85:4b:30:b3:f2:
                    09:9d:13:3a:8e:7c:2b:fb:12:e7:b6:4d:af:93:a6:
                    2e:b0:05:35:5e:43:30:d1:fb:30:23:59:c9:bf:93:
                    fc:11:6a:f2:53:5c:9f:54:3c:99:e0:b0:02:0b:26:
                    9d:97:9f:f8:30:cd:ce:94:33:9d:90:01:b9:13:11:
                    e0:47:c8:93:38:06:1f:fd:73:ea:24:50:69:4d:2c:
                    28:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:03:0D:8E:47:00:56:71:94:34:54:4D:26:4D:23:36:08:BF:86:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/19504bd0-ea5b-3caf-ad2a-d34e3d23b336.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.159.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:9a:6f:4d:41:4d:ca:d3:2d:28:3c:a7:21:1b:df:53:ad:3a:
         de:6f:98:52:23:ac:c1:15:8d:88:aa:12:f0:f1:6a:54:dc:94:
         c6:48:46:e5:d3:f2:38:34:d0:d7:86:6a:c2:4d:c7:2d:57:98:
         88:bb:ff:62:8f:b1:db:89:e9:a2:36:12:a8:74:5f:46:6f:5b:
         38:59:6f:17:77:11:9d:39:84:6d:ad:26:e6:19:dd:18:b3:c9:
         61:26:40:bc:1c:c2:87:61:33:2c:11:bd:81:64:d7:c2:24:86:
         29:00:c9:2b:61:b5:1c:16:f3:b7:ac:ed:f8:26:09:bc:2e:33:
         ba:b8:44:e9:ac:2d:a0:b5:17:cd:6b:8d:39:eb:8b:6b:63:e1:
         65:2d:24:62:ec:5d:3e:b8:30:f9:fd:77:bf:a5:40:be:2d:d9:
         51:8d:18:47:79:f8:0d:62:0d:43:8e:21:84:fc:5e:25:76:10:
         c2:2c:c4:41:37:ba:98:89:0b:cb:9f:d1:4b:f8:36:aa:fa:0a:
         6f:c0:e6:f2:94:95:62:dd:86:b1:aa:00:7f:1e:c3:80:38:aa:
         2d:b7:4d:9d:82:cd:94:c9:2c:c3:22:c0:a6:b9:af:76:96:26:
         a3:3d:d8:5b:03:d7:ab:a5:03:fd:74:25:4f:bc:c5:44:c4:43:
         ae:2a:fb:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:51 2025 by rpki-client