Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/741eac26-cc1f-3cde-89f4-2ab46c5913e4.roa
File:                     741eac26-cc1f-3cde-89f4-2ab46c5913e4.roa (raw, json)
Hash identifier:          PNsRIHwkmwKhPI/msvyFoGfoodwLB8eGByAQ5710fXs=
Subject key identifier:   2A:78:04:D6:4C:C2:D9:27:21:15:D5:70:20:4A:DF:A3:E8:CF:CF:79
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780268D56C05E54B52871CB40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/741eac26-cc1f-3cde-89f4-2ab46c5913e4.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:38c0::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:8d:56:c0:5e:54:b5:28:71:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=e1087336-209b-4282-93b7-5e8a7b8fe698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:51:ff:72:0f:e5:65:8b:4b:15:04:fe:03:51:
                    1d:e5:68:22:81:df:1a:a2:30:d3:c5:24:2d:e9:e0:
                    60:a5:7d:f1:b9:cb:69:bc:c8:29:dd:76:b5:90:f5:
                    7e:28:8f:1d:db:36:30:05:f3:aa:b9:1c:32:05:f8:
                    3b:62:4e:1a:76:9b:08:3e:22:84:e2:6a:e5:a8:79:
                    1e:ec:ea:f6:11:68:28:64:8c:dc:29:d5:e2:c5:86:
                    03:f8:79:20:de:5a:77:2e:00:03:db:db:e0:02:f8:
                    f5:d0:9a:41:a7:7e:c2:1b:f5:8b:42:d6:2b:26:43:
                    56:13:3d:18:34:c3:67:db:2e:f9:43:e0:1f:d0:96:
                    66:30:7e:24:af:e0:36:95:30:05:3a:8c:96:e6:42:
                    84:82:01:8d:61:69:71:53:a8:3d:78:19:c9:ce:99:
                    10:57:5e:f0:9a:81:70:79:67:a2:3b:cc:84:64:71:
                    a6:66:10:67:3c:7b:7f:31:68:93:b5:8e:79:27:f6:
                    c2:78:ff:91:60:7d:82:2d:e0:6e:a8:12:0e:a7:b9:
                    f9:b3:70:24:ff:2c:19:fe:ec:e9:10:a4:e7:17:12:
                    2e:f5:97:e3:fb:52:15:fd:81:36:6b:be:49:d6:6a:
                    b0:77:cc:66:d1:17:12:35:d3:fd:1e:d9:7d:9c:c1:
                    69:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:78:04:D6:4C:C2:D9:27:21:15:D5:70:20:4A:DF:A3:E8:CF:CF:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/741eac26-cc1f-3cde-89f4-2ab46c5913e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:38c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4a:97:cb:69:63:77:ec:ab:d9:f7:4d:61:27:6c:e8:f6:a1:
         02:27:64:f2:23:0e:2e:7c:7a:92:d9:35:65:b9:a1:7a:cd:c0:
         54:ca:69:a0:3b:e3:77:b9:e7:d9:b9:d5:8f:4e:b3:db:7b:2c:
         99:8f:e4:1d:90:df:51:97:74:1b:1b:47:1f:a7:e1:0e:48:53:
         04:bc:2d:5d:c9:bd:0f:e9:e1:bf:a4:c9:98:3d:3c:33:fe:e7:
         34:74:29:cd:3e:41:21:c6:3b:16:7f:18:81:ff:32:27:a8:e9:
         e7:ea:8a:63:c7:c0:04:aa:a9:5d:01:bb:67:60:fc:30:25:df:
         f7:8e:70:6d:ac:8d:13:48:08:6a:0f:1d:5b:4e:5b:57:81:71:
         f4:62:2e:8e:9f:cd:3c:dc:f7:c5:00:a6:97:1f:1f:bb:ce:ca:
         15:1c:1a:66:9f:22:b9:5b:3b:1d:9d:a5:c2:29:7a:5d:9a:01:
         5a:2b:ec:7f:92:80:ba:0a:15:ce:46:e1:40:9b:81:9d:39:8b:
         a1:4a:5d:0b:63:92:a9:e1:c3:b7:be:36:77:44:5a:0c:99:5f:
         5f:1b:35:5d:50:6f:b7:ae:28:df:92:00:bb:ad:83:fc:b1:79:
         54:4d:ea:6a:e5:38:67:e4:29:1b:2a:80:5a:9a:b9:b2:8c:e2:
         00:1d:0f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:13:04 2025 by rpki-client