Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/36ec7a3e-184d-3652-9ff9-a23d9f91f78e.roa
File:                     36ec7a3e-184d-3652-9ff9-a23d9f91f78e.roa (raw, json)
Hash identifier:          051QvqKgmU+aSEfFCNIP1xQwjciC5+w4s2S5QS+8Mg4=
Subject key identifier:   61:C8:AF:2A:E7:36:98:84:5B:BA:F9:44:F2:39:B9:30:D7:63:C6:49
Certificate issuer:       /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial:       010D0C9F432858480730CE22D67F9CA9F6D73680
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/36ec7a3e-184d-3652-9ff9-a23d9f91f78e.roa
Signing time:             Thu 28 Nov 2024 09:55:53 +0000
ROA not before:           Thu 28 Nov 2024 09:55:53 +0000
ROA not after:            Wed 26 Feb 2025 09:55:53 +0000
asID:                     43260
IP address blocks:        199.96.166.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:30:ce:22:d6:7f:9c:a9:f6:d7:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
        Validity
            Not Before: Nov 28 09:55:53 2024 GMT
            Not After : Feb 26 09:55:53 2025 GMT
        Subject: CN=958fb13d-67e0-4cb6-9199-29618647d818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:ce:14:7e:01:68:d0:3a:2e:e2:b8:35:cf:
                    a7:a7:1b:75:ef:1a:a3:fd:6e:4c:20:49:ce:db:2c:
                    ea:0f:b6:25:6c:6e:14:15:00:e6:ad:48:c7:2b:42:
                    64:a4:be:7f:39:72:dd:71:56:4a:ba:98:8b:40:78:
                    61:3e:83:11:87:da:c0:09:32:77:08:8e:cb:4a:5e:
                    f8:74:19:53:0a:02:61:d5:58:23:9b:03:35:84:a9:
                    db:51:16:41:28:f3:38:de:14:cc:3b:de:51:2f:63:
                    06:c8:12:eb:89:3b:02:e7:28:cb:0b:c3:25:cc:e1:
                    04:99:e6:b0:62:c3:12:c3:0c:4e:87:97:2f:b0:30:
                    89:94:82:6a:54:c2:c0:35:fb:71:d3:fd:dc:bc:14:
                    64:62:49:98:d8:2d:c3:00:27:84:46:f5:a2:ca:e4:
                    ca:6e:96:6c:a7:d4:e3:57:0a:8d:fd:1b:25:c6:a5:
                    ca:9a:5b:38:17:c2:e0:af:99:d3:57:42:06:b2:c4:
                    0f:d8:94:61:7c:7c:47:17:af:0c:53:fd:89:9f:cf:
                    63:02:51:79:60:29:b9:1e:ad:72:8e:9a:9f:ff:6d:
                    e9:2f:06:a3:0f:6e:e9:5d:32:14:e1:6d:73:ef:1b:
                    0d:4f:8d:6f:7d:bd:a0:95:10:7a:6a:c8:c4:a0:30:
                    57:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C8:AF:2A:E7:36:98:84:5B:BA:F9:44:F2:39:B9:30:D7:63:C6:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/36ec7a3e-184d-3652-9ff9-a23d9f91f78e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl

            X509v3 Authority Key Identifier:
                keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d8:e8:2c:f8:98:7c:17:f8:01:dd:6c:cf:7a:4c:2a:37:e3:
         2b:8f:cc:4e:6e:d1:02:e6:48:c9:ee:e3:c4:77:d5:bf:54:cf:
         32:f4:3c:2a:33:c9:b1:1a:44:da:15:38:70:c4:94:82:07:65:
         3b:38:bd:b7:a8:92:bd:5d:cc:27:4e:b6:b4:19:49:c4:ef:a5:
         a5:b5:6e:9b:c3:65:df:f5:e1:5e:2b:f6:ff:19:e5:89:f4:97:
         36:0c:5d:dd:23:98:c6:cd:a8:f6:ae:63:f2:63:1d:55:67:b6:
         b2:12:34:82:2a:e8:87:3c:92:10:90:c0:ff:7d:6a:21:0f:3a:
         64:42:99:90:c2:33:8c:1b:a1:8e:1b:64:bc:d7:de:0c:28:b3:
         9d:ea:e0:dc:ce:7c:04:47:04:26:be:68:87:70:a3:b8:18:c7:
         64:b3:57:fc:00:23:84:93:e5:d4:11:db:d0:5a:86:ee:f6:af:
         5a:98:ea:af:50:ef:1a:3c:f7:1f:fe:50:99:10:c7:f4:cd:23:
         4a:f4:89:e1:86:fd:12:5b:7b:ca:5f:9f:c8:88:7c:96:1e:18:
         ff:f3:28:4b:58:8d:6e:51:f2:89:a4:46:7c:a2:a8:c3:cf:25:
         33:60:93:8e:9f:37:ef:c1:74:15:98:5a:bf:cf:d9:69:69:ee:
         51:56:b2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----