Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/54a91dc8-b28c-3b6f-b1c4-59fc54fa5bbe.roa
File:                     54a91dc8-b28c-3b6f-b1c4-59fc54fa5bbe.roa (raw, json)
Hash identifier:          MWEAc6MPJ1vP63okR/dWNPvRFNwKPoh7dC6al4bPEjI=
Subject key identifier:   E4:C9:2F:FC:53:0C:D4:1C:77:C2:E3:16:61:3F:AD:A7:D6:16:E2:F7
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780266D109646E13470FA5380
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/54a91dc8-b28c-3b6f-b1c4-59fc54fa5bbe.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:3c80::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:6d:10:96:46:e1:34:70:fa:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=0b30edc1-e8e1-41b1-84ab-7f427edd1f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:f9:ea:10:f4:60:b9:e8:92:63:44:85:39:
                    d2:f9:5e:54:53:ef:b9:06:93:59:a3:76:f1:07:67:
                    81:8d:d5:9f:e0:4e:f2:91:6f:e2:9f:c0:30:fd:e0:
                    0d:a9:8d:1e:22:7b:1b:d6:69:dc:c1:e1:39:79:3f:
                    20:91:e9:97:07:80:28:b2:e1:33:16:30:c0:6c:f4:
                    a3:e6:51:12:b1:eb:04:d5:ca:29:ae:d3:63:f9:26:
                    12:bb:96:b3:a2:e3:ed:30:83:1b:46:77:14:f9:f6:
                    86:fb:a6:62:22:a6:43:b1:6a:3c:5d:14:4b:96:a6:
                    d6:35:5a:c6:7b:68:6b:7d:37:4c:c9:df:bd:a4:ff:
                    e7:bf:78:21:38:61:c4:c8:7e:a3:c4:53:a7:2b:1f:
                    8c:a4:a0:02:e3:c4:76:07:b5:dd:03:16:c8:3e:f0:
                    e9:df:19:4b:22:a2:1b:3a:b2:5b:d1:88:2f:fe:41:
                    cc:46:35:36:68:a2:86:50:3a:5e:6a:db:92:57:dd:
                    08:28:d1:17:6c:9c:c6:05:1b:af:b4:4a:17:25:3e:
                    dd:b3:b4:c1:42:70:0e:1d:74:ec:13:f8:c4:42:23:
                    31:19:95:7c:81:90:d2:19:e8:cb:10:15:9f:88:b0:
                    b2:bf:31:45:af:d0:a2:92:8b:3d:2f:5d:fd:04:78:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C9:2F:FC:53:0C:D4:1C:77:C2:E3:16:61:3F:AD:A7:D6:16:E2:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/54a91dc8-b28c-3b6f-b1c4-59fc54fa5bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3c80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:9c:57:30:e9:ea:ef:d9:31:40:d6:f0:b7:d7:e9:76:8c:68:
         25:7e:b6:a2:5c:41:73:b9:88:60:e0:87:d4:bf:77:e9:c9:1c:
         ce:8b:3e:de:f1:e1:2a:54:ab:75:65:9f:b7:b7:e4:15:61:a2:
         3a:31:dd:b7:7c:cb:37:e8:57:f6:a5:f6:de:3a:41:65:73:1b:
         16:a0:1c:b9:73:a0:d3:8b:b6:42:9c:ae:2a:4a:2e:29:28:cf:
         ad:1b:08:05:c8:c7:50:8a:ee:8e:d1:2b:dd:55:5c:a6:2b:c5:
         32:4c:1a:ca:4c:14:a4:a4:a8:e3:c5:49:c8:24:f9:3a:4c:54:
         14:f5:c1:03:70:5d:e2:33:66:d6:68:00:6c:ed:de:26:54:4e:
         ed:d9:fc:da:ef:4a:26:f4:d6:0d:ff:8b:e3:7a:ba:c0:f9:6a:
         60:a6:94:38:77:fe:2d:c2:7c:6e:4a:82:21:c2:d3:5c:c9:48:
         fb:2e:a3:ae:7f:f1:1d:20:7c:ce:b5:fb:93:e5:3c:bb:b9:80:
         a1:07:6b:5f:8e:56:a6:85:2c:9f:d0:ae:ed:ca:46:9d:b3:d8:
         d6:d4:f2:0b:ac:63:bd:d0:d3:1b:56:6b:67:79:02:ee:c2:98:
         db:ea:8e:ed:b5:a2:b6:ca:75:c0:8b:f4:b3:b5:06:15:0d:59:
         35:91:64:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:58 2025 by rpki-client