Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da0793ce-8f6c-3e26-b009-8a436c5f8d50.roa
File:                     da0793ce-8f6c-3e26-b009-8a436c5f8d50.roa (raw, json)
Hash identifier:          Cks2ln31HrVKp7FgGazSNTRbWUfI+nL6q3xAkT8IniU=
Subject key identifier:   9A:3A:BB:2D:A7:6B:AB:71:71:27:B6:C9:32:1A:FF:81:C8:D2:05:82
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A7404F66D758AE1EAFFDB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da0793ce-8f6c-3e26-b009-8a436c5f8d50.roa
Signing time:             Fri 29 Nov 2024 13:58:44 +0000
ROA not before:           Fri 29 Nov 2024 13:58:44 +0000
ROA not after:            Thu 27 Feb 2025 13:58:44 +0000
asID:                     396540
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:74:04:f6:6d:75:8a:e1:ea:ff:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:44 2024 GMT
            Not After : Feb 27 13:58:44 2025 GMT
        Subject: CN=ce644b88-80a8-495b-84a3-d1cb0f104636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:ae:ee:62:af:1f:cd:f9:1e:0f:aa:e9:b1:
                    cb:a0:78:08:62:43:8e:ee:68:21:5d:ba:0b:85:b9:
                    46:c1:a3:9c:2e:d8:f9:bb:5e:8c:f1:23:2b:d2:61:
                    41:96:93:ca:93:65:d9:0c:f6:58:64:64:ad:f2:d5:
                    d3:93:76:d4:9c:3f:2a:19:a5:35:97:38:73:9a:e1:
                    40:43:9b:74:74:c7:b7:9f:47:68:a9:fa:20:91:95:
                    8d:7b:be:09:fe:70:e3:1b:05:33:e3:d2:48:fb:24:
                    12:19:e4:dd:c6:34:c4:93:b4:5b:dc:b2:9d:51:df:
                    83:73:4f:9e:93:8c:e2:9f:82:a3:e1:79:b0:e2:bf:
                    41:41:5d:4f:01:e8:ad:d9:c2:1f:23:a9:89:1f:82:
                    45:75:10:e3:1e:5f:13:32:3c:da:01:b1:aa:ec:ef:
                    27:6b:80:ba:64:2b:2d:c3:b7:fb:d7:e4:fc:16:09:
                    bf:b7:4c:5d:b1:28:03:83:bb:7e:78:44:fd:a5:3b:
                    f1:6d:8b:ab:57:87:6e:90:96:ee:f1:67:13:b2:71:
                    a5:2c:5a:73:33:e3:88:a9:41:d3:6e:3f:0a:f5:eb:
                    de:26:62:2c:3b:03:33:b4:cf:c3:7c:4d:ae:61:14:
                    20:f1:1b:da:99:2c:24:4a:fa:d3:fa:dd:19:41:e1:
                    e4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3A:BB:2D:A7:6B:AB:71:71:27:B6:C9:32:1A:FF:81:C8:D2:05:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da0793ce-8f6c-3e26-b009-8a436c5f8d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:c6:4c:b5:ba:55:52:30:33:4e:7f:af:8d:77:81:2b:c9:eb:
         a6:18:50:db:76:91:d3:b5:ed:09:13:fc:0c:99:4b:e6:d9:63:
         fb:67:21:25:74:a8:20:17:cf:f3:97:4f:39:29:90:83:04:61:
         14:9c:12:d7:52:24:5d:00:a4:48:db:91:07:fb:ea:62:37:ff:
         90:3f:d3:cd:cf:d2:37:97:54:d9:74:9a:23:c1:41:b2:78:f3:
         65:8c:b6:ba:d2:41:75:ce:b8:c6:7c:22:4f:95:a0:de:aa:53:
         cb:ec:24:89:35:cd:6c:c9:a6:c1:e0:90:9e:90:6e:66:ca:71:
         22:db:14:ae:e4:85:45:e0:e9:8f:b3:10:43:4d:e0:9e:eb:6e:
         4f:14:f6:d7:24:62:83:d1:1c:20:25:56:84:40:1a:39:48:09:
         5c:05:21:5b:15:7d:36:7b:28:b3:d7:f9:ff:ae:c2:e6:57:10:
         07:34:bf:f9:eb:4f:98:03:a0:21:e5:ff:00:03:71:ba:72:a9:
         c6:91:c1:6a:99:16:c8:b3:7e:34:31:bc:b8:a2:1e:ec:5f:13:
         13:5d:3a:fc:79:81:5c:aa:be:32:20:e7:ef:31:6c:35:c6:b2:
         f8:8b:51:40:f7:f8:f9:15:2c:4d:3a:c9:5b:5f:c0:fa:fc:4f:
         92:14:19:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:28 2025 by rpki-client