Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7e39a3c2-8409-37ed-979b-3436f095d849.roa
File:                     7e39a3c2-8409-37ed-979b-3436f095d849.roa (raw, json)
Hash identifier:          zYfxePJGybLwkVDvEyMQNH6Xr3KMX2eGP32KM2IAhDA=
Subject key identifier:   E7:F2:A4:44:12:77:57:0C:FB:5B:89:19:06:D2:66:98:77:59:2F:12
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802692D726B44DFE426F8F80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7e39a3c2-8409-37ed-979b-3436f095d849.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:35f0::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:92:d7:26:b4:4d:fe:42:6f:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=6963dc6e-8883-499d-84e8-7db4c192d6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:83:04:df:bb:e6:d7:6a:28:fc:12:68:e3:78:
                    9a:49:bf:e3:fd:c5:45:72:70:63:22:54:77:a0:d1:
                    53:fd:13:6d:45:34:81:e0:8f:62:e9:13:a8:65:02:
                    34:e4:36:04:3f:47:f7:9c:70:54:8e:b6:f0:f8:c4:
                    80:3a:fb:92:fc:6e:fe:26:63:bb:60:bf:1c:f9:d3:
                    d7:d0:1c:22:36:aa:d3:65:8b:8c:ef:4a:e5:a8:01:
                    37:28:4c:5e:fb:c7:f8:48:a2:da:ce:fd:a1:2b:d6:
                    22:16:44:ce:41:81:3b:5a:3d:95:71:83:45:4b:eb:
                    b0:71:94:85:a8:67:41:2b:ba:b2:57:f2:4a:b3:12:
                    0a:04:99:05:93:df:fd:88:02:59:16:74:92:b8:d7:
                    d2:c9:c3:98:13:e0:c3:95:72:17:ab:0b:b9:bf:d3:
                    b5:f8:49:09:e3:59:68:76:a9:dd:de:7b:7b:5e:13:
                    f4:64:fe:70:07:82:79:e4:40:11:f8:79:42:9a:d8:
                    ab:f3:d0:bb:d0:02:78:16:af:dd:6f:4a:47:f2:f9:
                    77:cb:4e:7e:73:77:d1:5b:09:56:53:74:9e:53:16:
                    fc:27:b9:ef:76:65:8e:4d:48:13:b0:af:ea:ed:f4:
                    1d:78:95:ac:46:79:7e:af:7f:2e:22:2d:8e:92:46:
                    35:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F2:A4:44:12:77:57:0C:FB:5B:89:19:06:D2:66:98:77:59:2F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7e39a3c2-8409-37ed-979b-3436f095d849.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:35f0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:af:42:b0:c8:96:0f:9e:e0:8a:d1:64:64:ee:de:5c:34:dc:
         33:a5:21:17:6b:48:d2:2f:5d:7b:50:a3:45:b6:57:d5:1e:3d:
         0d:4b:a7:57:cf:56:e7:52:24:66:ae:52:a3:96:e5:23:c8:48:
         12:7f:91:97:f7:1d:16:69:c5:75:a7:40:4c:e4:5e:c2:70:e6:
         0e:c5:02:73:03:4d:fe:82:50:c8:38:20:cd:a2:3b:74:f0:1d:
         72:25:3d:8e:81:be:a1:24:8e:3d:ea:78:64:28:75:bc:58:0d:
         4e:9a:1a:d0:83:a9:76:c2:8a:b4:a3:5a:ac:e9:3a:d5:87:e8:
         08:04:f8:27:b7:c0:f0:d6:61:82:78:5a:44:ac:82:12:c5:1c:
         40:da:b9:94:cf:ec:70:5c:ce:92:96:7b:73:23:dd:8f:ff:d9:
         12:68:73:a1:c1:36:0e:db:b0:09:1a:18:a7:4d:df:a0:3f:31:
         9e:96:83:f4:e6:30:8d:76:ec:a3:bc:b5:27:13:0b:c7:52:2b:
         d1:60:65:03:e0:d3:40:a5:12:93:f5:36:c1:62:c9:86:fe:9e:
         07:5d:a6:d7:28:5c:49:a8:2a:64:44:ff:09:fb:ae:4d:01:5b:
         75:4c:30:f2:36:32:c2:f4:74:29:2c:77:ae:49:65:eb:4e:b5:
         43:ee:1e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:38 2025 by rpki-client