Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/95634896-f990-3877-851b-ece94d45e876.roa
File:                     95634896-f990-3877-851b-ece94d45e876.roa (raw, json)
Hash identifier:          fvR7X0uxXhsxCiX/ArEYo1LV2Nm+AtR4KwJX0p7Z5tk=
Subject key identifier:   38:9E:55:BA:90:43:A4:98:D8:BC:ED:C7:D5:EA:83:64:6B:05:D5:A9
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847802696A9A3D44078704D7880
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/95634896-f990-3877-851b-ece94d45e876.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:34b0::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:96:a9:a3:d4:40:78:70:4d:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=f4ae7a1a-89b7-4287-a991-a92d85d6e8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:e8:13:b6:ad:4c:47:77:05:5b:fc:cc:68:
                    62:e5:f2:63:90:2f:de:b6:83:14:89:77:b1:10:34:
                    1a:b4:28:d2:c4:67:1c:14:bd:f0:06:65:30:c2:58:
                    d7:b1:88:51:55:b2:66:94:8a:4c:c4:5b:0e:2d:e7:
                    e6:83:f2:82:4b:39:89:8c:e3:e5:c4:14:eb:9d:92:
                    1a:04:9f:73:62:bf:bd:3d:fe:8e:2a:23:dd:1d:f8:
                    3d:3c:ef:91:79:da:e0:86:6e:2b:80:6d:5e:be:47:
                    5e:1e:76:cf:59:04:4d:b0:d8:c9:9d:ce:2d:56:89:
                    ca:14:ab:c1:54:94:ff:11:3b:36:63:eb:f1:c7:39:
                    90:30:9c:d9:00:fa:78:ed:8a:c5:d9:03:37:8a:9f:
                    de:00:eb:37:f9:82:1a:53:78:43:cc:bc:98:a6:6d:
                    72:85:d2:c6:1a:cb:08:2e:e8:85:ab:b1:8d:96:69:
                    8e:45:b9:3e:fc:c9:f6:d9:0c:00:6b:23:b0:0f:83:
                    6f:38:38:b8:4b:cf:3e:1a:e2:a6:15:d4:af:99:6d:
                    1b:6a:40:66:39:f1:89:6f:ea:61:f5:b1:17:1f:ea:
                    f7:e1:18:a4:a6:e9:e1:1b:07:8c:1b:88:d8:8c:af:
                    24:d5:68:ff:a4:d2:ad:c5:d4:57:d6:8c:16:05:98:
                    e2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9E:55:BA:90:43:A4:98:D8:BC:ED:C7:D5:EA:83:64:6B:05:D5:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/95634896-f990-3877-851b-ece94d45e876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:34b0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:90:0d:83:73:2a:84:7b:e4:f0:ae:8f:3b:80:e6:18:44:75:
         4b:9c:37:eb:df:9c:eb:68:c8:23:39:68:cb:e8:53:6e:17:29:
         9e:99:ee:01:a3:bf:ea:1d:08:e4:ff:4e:38:73:94:3e:3f:b6:
         20:89:e8:b7:ee:54:03:48:f9:e3:b0:7e:ba:f7:80:c8:d5:67:
         b8:c8:d9:66:57:fe:be:c6:1e:2b:41:a0:4a:f5:88:36:50:67:
         5a:d4:d3:6d:13:d6:cb:b7:3b:90:3b:19:89:39:ec:13:e1:58:
         90:79:8d:d7:b7:10:b8:60:0d:be:cd:c8:67:07:66:f0:05:88:
         06:9d:be:b4:b9:89:4f:eb:c0:a9:d4:d9:38:23:d8:c5:50:c8:
         e6:28:a3:b3:bd:b8:ad:0c:8d:e7:54:fd:37:52:8e:13:58:41:
         33:95:e2:6b:09:00:e0:be:86:7d:c5:89:88:9f:41:68:60:e1:
         0e:ad:fe:cb:fc:8c:b3:4c:de:c1:b3:d1:6c:55:dd:f7:d7:75:
         d5:3b:78:be:17:10:91:8f:48:9d:89:7f:7f:0b:59:a5:45:7c:
         3c:c0:6b:26:23:78:c5:f2:8a:85:df:98:22:41:0c:44:f3:ba:
         98:81:3f:a0:39:d2:a4:08:1b:45:4c:21:db:04:00:dc:26:13:
         1c:c5:fc:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJpapo9RAeHBNeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
ZjRhZTdhMWEtODliNy00Mjg3LWE5OTEtYTkyZDg1ZDZlOGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7HoE7atTEd3BVv8zGhi5fJjkC/etoMUiXex
EDQatCjSxGccFL3wBmUwwljXsYhRVbJmlIpMxFsOLefmg/KCSzmJjOPlxBTrnZIa
BJ9zYr+9Pf6OKiPdHfg9PO+Redrghm4rgG1evkdeHnbPWQRNsNjJnc4tVonKFKvB
VJT/ETs2Y+vxxzmQMJzZAPp47YrF2QM3ip/eAOs3+YIaU3hDzLyYpm1yhdLGGssI
LuiFq7GNlmmORbk+/Mn22QwAayOwD4NvODi4S88+GuKmFdSvmW0bakBmOfGJb+ph
9bEXH+r34RikpunhGweMG4jYjK8k1Wj/pNKtxdRX1owWBZjiNQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDieVbqQQ6SY2Lztx9Xqg2RrBdWpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTU2MzQ4OTYtZjk5MC0z
ODc3LTg1MWItZWNlOTRkNDVlODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQDSw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAICQDYNzKoR75PCujzuA5hhEdUucN+vfnOtoyCM5aMvoU24XKZ6Z
7gGjv+odCOT/TjhzlD4/tiCJ6LfuVANI+eOwfrr3gMjVZ7jI2WZX/r7GHitBoEr1
iDZQZ1rU020T1su3O5A7GYk57BPhWJB5jde3ELhgDb7NyGcHZvAFiAadvrS5iU/r
wKnU2Tgj2MVQyOYoo7O9uK0MjedU/TdSjhNYQTOV4msJAOC+hn3FiYifQWhg4Q6t
/sv8jLNM3sGz0WxV3ffXddU7eL4XEJGPSJ2Jf38LWaVFfDzAayYjeMXyioXfmCJB
DETzupiBP6A50qQIG0VMIdsEANwmExzF/Ak=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:49 2025 by rpki-client