Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2b0e5b10-2897-3b15-bb38-20d9efd74ffa.roa
File:                     2b0e5b10-2897-3b15-bb38-20d9efd74ffa.roa (raw, json)
Hash identifier:          /fXc/TAF/Pnu6X/E1CLWgierX1+RfPDyAPM6A3733jo=
Subject key identifier:   F0:91:C4:29:70:DF:58:EC:BE:9D:0F:82:B3:B1:E6:9C:E3:41:40:59
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802664290B5D267DB3CD8640
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2b0e5b10-2897-3b15-bb38-20d9efd74ffa.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:2fa0::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:64:29:0b:5d:26:7d:b3:cd:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=329f2c9b-bd64-4742-82aa-8c5c793d0c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:72:f4:fa:84:f1:71:7e:37:95:be:82:84:17:
                    16:65:7e:dc:20:f4:55:34:62:5c:99:2d:9a:39:14:
                    d0:8b:f9:b2:6f:82:00:69:19:ed:41:ca:a8:9e:43:
                    a5:02:66:9f:c9:1a:ab:64:3a:0c:24:75:40:08:d3:
                    86:b1:02:70:fe:4c:38:8b:ef:08:6d:21:cd:4f:05:
                    15:83:a3:e6:94:ce:9a:c5:df:11:ac:79:78:76:a8:
                    c7:b5:af:80:6d:83:7f:41:ab:d6:14:12:ed:2e:68:
                    91:5f:63:15:57:49:cb:c6:64:c7:8e:e5:37:ab:47:
                    cd:30:f7:89:8b:65:55:7c:eb:ec:f9:98:49:85:07:
                    ea:b4:dc:fa:91:f5:84:e6:b7:99:18:5f:8a:20:3a:
                    57:70:ce:82:9b:44:9c:ca:39:fd:37:95:eb:5b:12:
                    46:91:e9:1e:f5:30:87:b2:d7:3c:1d:12:56:f0:15:
                    98:cb:9c:50:79:df:87:28:6d:f5:57:8f:72:b4:15:
                    42:65:72:3d:8d:e1:6b:b9:71:a6:5a:9a:ad:93:39:
                    6c:28:a1:b5:d7:cf:6b:bf:46:26:c6:ba:63:a4:af:
                    fc:d6:8c:5f:a4:84:c0:53:d1:82:76:02:0b:e8:29:
                    6a:34:48:25:5d:82:ee:8d:ba:95:19:15:1e:14:e8:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:91:C4:29:70:DF:58:EC:BE:9D:0F:82:B3:B1:E6:9C:E3:41:40:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2b0e5b10-2897-3b15-bb38-20d9efd74ffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2fa0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d7:73:c2:c6:68:75:f8:dd:c9:8b:8f:f6:27:3a:f2:44:98:
         e4:7d:b3:7f:cf:53:cd:30:c0:63:1c:31:f9:11:a5:12:df:cf:
         b5:ed:33:eb:ed:30:82:7a:99:50:20:33:6f:75:f2:8a:2e:26:
         51:24:3d:c2:e0:48:5e:cb:02:ca:9b:a1:7c:bb:cb:c2:c0:37:
         28:4e:25:8e:98:a8:6d:07:88:fa:e9:97:96:bc:fc:d2:54:6a:
         80:3f:ce:14:72:21:fa:9b:20:73:97:f4:24:af:a5:c5:45:58:
         72:49:f8:21:bc:fa:2d:b5:0e:c5:86:4e:cb:b2:b4:12:86:c5:
         49:7e:72:3b:93:07:16:cc:8a:d9:1f:4e:da:97:9e:7d:5c:df:
         ea:7a:e2:da:fa:b3:b2:48:63:7b:53:08:39:33:cc:8b:50:fc:
         54:21:7b:bd:a2:bb:f3:3c:46:61:15:b6:f2:03:43:26:0e:de:
         bd:6c:37:59:19:a9:50:88:56:f5:54:9e:8a:d2:63:4b:11:d1:
         6a:85:1c:f7:e8:e2:81:e0:9c:2f:d3:cb:4e:d3:5d:9c:4c:b4:
         bf:d9:6a:68:79:80:92:f7:46:b3:e9:d1:b3:95:7f:fe:19:0f:
         4f:11:8a:17:fd:bf:6e:c4:0b:13:92:d1:e1:46:56:ff:43:20:
         e8:e4:a1:21
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJmQpC10mfbPNhkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
MzI5ZjJjOWItYmQ2NC00NzQyLTgyYWEtOGM1Yzc5M2QwYzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nL0+oTxcX43lb6ChBcWZX7cIPRVNGJcmS2a
ORTQi/myb4IAaRntQcqonkOlAmafyRqrZDoMJHVACNOGsQJw/kw4i+8IbSHNTwUV
g6PmlM6axd8RrHl4dqjHta+AbYN/QavWFBLtLmiRX2MVV0nLxmTHjuU3q0fNMPeJ
i2VVfOvs+ZhJhQfqtNz6kfWE5reZGF+KIDpXcM6Cm0Scyjn9N5XrWxJGkeke9TCH
stc8HRJW8BWYy5xQed+HKG31V49ytBVCZXI9jeFruXGmWpqtkzlsKKG1189rv0Ym
xrpjpK/81oxfpITAU9GCdgIL6ClqNEglXYLujbqVGRUeFOifHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPCRxClw31jsvp0PgrOx5pzjQUBZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmIwZTViMTAtMjg5Ny0z
YjE1LWJiMzgtMjBkOWVmZDc0ZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQC+g
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHbXc8LGaHX43cmLj/YnOvJEmOR9s3/PU80wwGMcMfkRpRLfz7Xt
M+vtMIJ6mVAgM2918oouJlEkPcLgSF7LAsqboXy7y8LANyhOJY6YqG0HiPrpl5a8
/NJUaoA/zhRyIfqbIHOX9CSvpcVFWHJJ+CG8+i21DsWGTsuytBKGxUl+cjuTBxbM
itkfTtqXnn1c3+p64tr6s7JIY3tTCDkzzItQ/FQhe72iu/M8RmEVtvIDQyYO3r1s
N1kZqVCIVvVUnorSY0sR0WqFHPfo4oHgnC/Ty07TXZxMtL/Zamh5gJL3RrPp0bOV
f/4ZD08Rihf9v27ECxOS0eFGVv9DIOjkoSE=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:07:22 2025 by rpki-client