Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/99ceaf1e-810c-31bb-9d85-8ef18e914383.roa
File:                     99ceaf1e-810c-31bb-9d85-8ef18e914383.roa (raw, json)
Hash identifier:          +uachdLIs/BUTxUn0/wgpZ/US7JxiA2FcsK/hq5r5jo=
Subject key identifier:   C3:AD:00:D7:84:87:0D:3F:AD:21:09:9F:CC:43:E9:DA:DA:6A:C2:78
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780268A09181FFB5711820E00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/99ceaf1e-810c-31bb-9d85-8ef18e914383.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:3370::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:8a:09:18:1f:fb:57:11:82:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=9e9b0c51-e061-4d96-9e48-2b6017875a36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:04:89:2d:5d:c8:32:a8:87:f9:0d:03:e5:76:
                    3a:d4:ef:0a:1d:a3:aa:e7:e6:24:63:a5:fd:ea:10:
                    e2:65:c4:dc:55:53:d9:70:30:59:41:a2:bd:4e:96:
                    a8:6b:07:97:6b:2c:fb:7d:9f:50:82:d2:e9:1b:ec:
                    ee:78:f7:3a:24:22:c9:6d:2e:43:03:9e:0e:3f:11:
                    54:16:de:e1:f6:2c:d0:f6:8c:18:f5:ec:88:8a:6c:
                    0e:9a:24:79:54:66:ba:55:10:6e:b0:b6:de:bf:b4:
                    2d:9b:e0:1d:05:f5:f4:02:67:99:a0:58:29:cf:42:
                    13:76:ee:75:28:36:c4:69:d3:d3:9c:fd:c8:11:ab:
                    80:3a:8d:a2:5a:a6:01:ab:5c:4d:e8:a0:bc:a3:a0:
                    72:dc:d4:42:9a:2a:25:52:8a:7a:85:1b:bc:75:98:
                    5d:e2:3a:4a:3e:5b:6b:1f:e8:45:cf:82:1e:8b:ac:
                    aa:0a:a3:74:fb:23:ad:f4:d3:fa:d7:38:57:d1:2b:
                    53:13:4f:79:11:2b:f5:29:41:40:58:ff:9f:31:9e:
                    f1:ff:a3:dd:c4:b2:dd:ab:1d:4b:c8:a5:bb:40:8b:
                    38:8b:54:c9:ab:1a:83:8b:12:7a:44:4a:cf:c7:52:
                    3f:7e:ff:bd:a7:3d:5b:e7:5e:7f:8c:6e:76:0f:53:
                    84:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AD:00:D7:84:87:0D:3F:AD:21:09:9F:CC:43:E9:DA:DA:6A:C2:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/99ceaf1e-810c-31bb-9d85-8ef18e914383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3370::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a5:ed:2a:21:80:ec:ab:e4:62:f5:de:3d:58:b6:9c:9b:e4:
         92:ad:4c:24:71:3c:2b:08:4d:27:13:bf:e3:26:d9:8f:60:ee:
         c8:88:e4:d1:38:26:4c:07:15:d2:82:8d:96:cb:c3:5e:1a:93:
         bb:33:05:f9:7e:ac:ea:ba:c3:44:c0:7b:37:df:f3:9c:e3:e5:
         c3:44:73:3e:c1:3d:27:ee:3d:af:1d:3c:de:7a:3d:33:c4:cf:
         ad:99:75:9c:c8:2b:ff:40:92:a4:7c:85:4e:6e:f8:26:c8:af:
         9f:97:89:46:f7:b5:d8:3f:b5:45:4b:9f:9e:28:b0:88:dc:44:
         bc:c6:d0:bf:92:65:fa:e4:84:bd:85:d2:31:02:f8:c1:d3:6c:
         8b:a9:f7:f7:d2:6d:2c:a6:f2:53:c3:c2:da:6b:e7:32:24:65:
         10:30:2f:41:42:d6:67:08:e9:20:8f:c3:a3:41:2b:01:30:3d:
         66:22:27:aa:2e:12:90:5c:65:f8:50:a0:05:dd:58:9c:b2:a1:
         92:5f:05:41:8b:a7:90:9d:de:31:bd:da:62:de:df:a9:00:2a:
         3f:3c:b7:19:b6:6f:be:3a:4b:68:31:b1:6f:b4:c0:c7:ef:98:
         4c:b6:a5:70:e3:5f:96:07:d3:00:db:f2:59:be:5d:70:6f:e7:
         1b:3b:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:27:56 2025 by rpki-client