Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/87388934-65b7-3e0e-b67f-b737b0709b31.roa
File:                     87388934-65b7-3e0e-b67f-b737b0709b31.roa (raw, json)
Hash identifier:          iC5wnWfm6N0MJBaF+7CM48gcNygyWdAgKXuxDq56pmA=
Subject key identifier:   2A:A6:DD:3A:FC:AC:62:E4:86:90:56:A3:0E:79:BE:19:B2:3D:FD:58
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802688776013868E1DB0DD00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/87388934-65b7-3e0e-b67f-b737b0709b31.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:3e00::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:88:77:60:13:86:8e:1d:b0:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=65189d68-3cd7-4ddf-bcaa-3b933cbe54ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:57:62:29:ba:68:86:81:d2:a9:d2:3d:a1:ae:
                    1a:38:69:5e:1a:36:eb:47:67:87:75:68:68:73:43:
                    90:df:c8:a9:c1:ed:9a:34:03:f5:58:ac:1d:68:a7:
                    11:d0:01:cb:44:9d:3c:bf:d1:41:aa:4b:ff:b0:ea:
                    96:e6:97:d9:2c:c6:0d:27:6e:bb:a1:0a:e8:c6:3b:
                    da:01:48:43:f9:d7:bf:b2:d1:4b:f3:ff:90:16:f0:
                    fa:00:aa:ad:f7:53:b4:b0:6d:95:2f:8a:ff:98:a2:
                    aa:19:e1:93:c9:fe:09:11:0c:d2:0f:b6:fc:36:09:
                    88:92:6e:c6:62:22:b6:8d:50:c5:f9:67:f7:d8:aa:
                    76:f5:e5:3f:65:7a:f6:de:15:67:7b:17:d1:01:f2:
                    b9:bc:0f:ce:35:80:2c:b1:cb:94:93:8c:ab:99:d2:
                    a1:8b:35:ef:71:c8:df:a8:11:a5:1e:0e:8a:c9:25:
                    2d:88:c4:e4:a3:a8:01:20:81:e6:4f:f4:f4:0e:2b:
                    df:85:06:ef:c5:a1:c5:a7:33:b1:94:f7:03:08:51:
                    cc:76:31:93:58:5e:32:2d:f9:37:89:10:32:22:0c:
                    df:17:80:ba:80:67:45:46:a0:dc:58:3d:6e:6c:c6:
                    8f:03:59:ee:65:07:f6:1b:2d:49:4c:06:d0:85:8c:
                    a0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A6:DD:3A:FC:AC:62:E4:86:90:56:A3:0E:79:BE:19:B2:3D:FD:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/87388934-65b7-3e0e-b67f-b737b0709b31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3e00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:9f:31:b2:73:dd:4e:ee:5c:0e:b3:b9:9f:df:a8:07:90:b3:
         c6:27:02:1b:5a:55:d3:e9:02:5a:18:59:b6:10:2a:02:eb:90:
         f6:c6:3f:37:b8:95:69:bb:82:d5:4d:50:89:71:ac:3d:92:81:
         4a:30:e3:41:4d:ad:d3:58:62:fc:9a:ce:f6:f2:87:a3:f2:2a:
         8f:13:0f:22:cf:9a:69:69:d1:41:c3:21:7c:65:78:d7:24:1e:
         10:29:39:05:da:c1:05:19:72:8d:1b:ad:36:97:7d:23:a1:83:
         9a:a4:b3:cb:0e:63:62:46:04:a1:b8:b9:c8:fc:38:09:74:b1:
         f1:d0:1c:e6:cc:2d:04:cd:ca:60:d3:f6:15:71:6b:44:ae:da:
         be:95:1e:b9:8d:88:8b:f3:d7:34:da:9b:72:3a:76:ac:23:b3:
         0b:f3:49:ca:ae:5e:ad:94:f0:83:5e:db:ab:e8:16:01:b2:c6:
         1a:9a:08:3c:01:59:9a:de:36:d5:1c:88:11:d3:74:79:de:6b:
         1b:fb:83:06:d6:62:61:60:a4:fa:f0:d1:a7:80:43:f3:22:53:
         01:58:53:df:27:f2:a3:1f:8a:e7:89:5c:3f:10:7f:1e:a6:2e:
         cb:24:bc:e5:98:26:82:66:20:4d:d2:22:2f:cc:5c:26:da:45:
         0b:46:64:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:05:34 2025 by rpki-client