Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f835ff6-57e9-3c08-b5a3-6818332e3514.roa
File:                     7f835ff6-57e9-3c08-b5a3-6818332e3514.roa (raw, json)
Hash identifier:          2Oc6CM/2R9Le2MZdIP0hDNoUXdOB85ZCn5AqjHRxheY=
Subject key identifier:   31:82:77:AF:32:A4:DE:AF:BA:09:F4:87:2D:E4:6D:39:DA:2E:8B:89
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026817AFDFE3AA53A355580
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f835ff6-57e9-3c08-b5a3-6818332e3514.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:2e80::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:81:7a:fd:fe:3a:a5:3a:35:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=9b98cedd-c954-4d50-a9c3-86a3a48a38ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:58:bc:1d:6b:d8:89:39:a6:da:07:16:cd:7a:
                    90:6e:db:98:d7:59:f3:5d:34:25:58:b9:ba:c0:7d:
                    f2:24:b4:a6:7f:9e:8f:a3:96:38:c0:ac:70:08:fa:
                    ad:94:77:44:08:a7:2c:6f:6f:59:bc:d6:03:80:2b:
                    0b:7d:3f:fb:be:0e:78:5d:39:31:49:d2:a3:93:05:
                    f6:49:a8:66:fd:fa:0f:ff:4d:b1:47:6d:42:98:db:
                    c1:27:b1:58:c0:d9:8e:f4:47:53:86:20:32:e7:19:
                    09:ac:6b:dd:71:14:c2:39:df:fd:5a:90:69:f9:8a:
                    45:27:1a:62:dd:cd:1a:70:ae:c6:d9:22:03:9c:69:
                    20:c5:ea:fe:d4:f6:a1:6e:c8:5d:66:2a:16:9a:eb:
                    07:c5:1a:aa:d0:12:95:84:ad:14:78:fa:22:4e:ae:
                    39:e1:fa:f5:bc:11:11:c3:38:a6:b4:e9:2c:5a:66:
                    49:70:60:0f:b2:30:72:a4:3b:84:98:08:f8:a0:81:
                    cc:db:bf:e0:d3:38:b5:74:74:1a:e1:22:98:d4:2e:
                    23:cb:56:96:c1:80:8a:1e:98:7f:ee:03:bc:a8:56:
                    15:4e:b2:a6:c0:ad:da:ba:22:08:53:74:d2:f9:ec:
                    55:de:1e:cc:f7:6a:0d:5b:d3:c2:b4:d9:5b:79:3f:
                    f3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:82:77:AF:32:A4:DE:AF:BA:09:F4:87:2D:E4:6D:39:DA:2E:8B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f835ff6-57e9-3c08-b5a3-6818332e3514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2e80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:cd:1e:35:83:16:91:4b:a1:ae:3e:28:6c:cc:2e:58:4f:82:
         29:07:aa:8f:79:c1:32:db:f9:7e:74:83:fc:58:53:6a:66:1b:
         eb:3c:69:3b:d0:18:70:76:31:31:02:39:f9:6e:2f:97:6a:34:
         15:6b:64:b4:a1:56:c5:75:c0:19:c8:3a:6d:5e:d5:df:0f:f6:
         2a:8e:49:30:57:b5:ed:98:7c:02:5d:b1:11:a2:46:ce:46:6c:
         f7:68:2a:ef:af:f2:f4:69:14:e7:18:24:bb:10:19:48:d9:5f:
         3b:fb:f2:da:99:9a:4a:6f:79:2c:b2:db:00:c7:38:d7:f4:3c:
         c6:86:f0:40:78:f5:87:72:16:c7:00:64:c8:2d:5f:9e:de:cf:
         e1:26:90:d8:6d:86:f2:e5:bc:92:13:67:97:21:9d:fb:5c:b3:
         1c:71:7b:d8:19:dd:78:2d:5e:01:70:4a:b5:79:29:ed:26:b5:
         c8:0a:b0:b2:56:ac:9d:72:e4:90:5c:a2:27:34:87:0d:c8:6c:
         3e:d0:88:bd:bd:ae:34:9a:29:8e:21:30:55:13:06:fc:a4:b4:
         f3:93:d5:14:69:2e:af:1a:7f:a1:cf:43:50:2c:87:59:2f:36:
         84:59:b0:41:ba:d1:57:30:9b:5c:6c:32:36:59:69:80:dc:b5:
         2d:25:61:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:48 2025 by rpki-client