Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a16e89d8-ed6d-3e3e-b7a1-ed3f28a1794d.roa
File:                     a16e89d8-ed6d-3e3e-b7a1-ed3f28a1794d.roa (raw, json)
Hash identifier:          rBxKF5zdUMA1BVKfin8I9fxcNCzpn5hGxfcdjBJUjn0=
Subject key identifier:   FC:D9:42:4E:F6:6A:DC:DB:64:EA:8D:89:9A:41:08:1C:9E:14:85:6E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858485F9AFED6084A5D3A5C15B700
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a16e89d8-ed6d-3e3e-b7a1-ed3f28a1794d.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     209242
IP address blocks:        2607:8940:3fc0::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:fe:d6:08:4a:5d:3a:5c:15:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=6bb34330-8a41-44e7-a612-af45d1746746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:58:42:0e:af:73:1d:56:e2:7e:63:e6:b2:1f:
                    79:0f:d0:2d:27:ad:69:d9:90:dd:f9:5e:36:63:1a:
                    5c:36:1d:00:f6:42:39:14:95:da:f9:24:b3:04:34:
                    a0:9c:bb:7f:7f:8d:0d:88:07:ea:30:16:67:37:68:
                    79:9c:30:ad:1a:1f:89:bb:40:27:61:45:5f:28:cd:
                    8d:f7:17:25:dc:83:c3:07:2c:93:ba:2d:8b:97:8d:
                    cd:89:d2:ed:35:3f:34:b8:8b:4a:25:ff:98:0c:59:
                    06:f8:58:5a:43:85:21:3b:a2:6e:7f:fa:bf:f8:3f:
                    04:5f:7f:22:05:18:a8:c5:4a:34:cb:72:03:91:99:
                    f8:90:0c:1b:6c:0e:1e:bc:8f:94:5f:d8:fa:fa:08:
                    f8:fa:9c:4a:55:94:09:8b:1f:f9:fe:79:8b:c6:9b:
                    49:43:66:35:d2:df:e0:37:e4:61:ab:c6:e7:86:75:
                    09:96:b8:a3:3e:9b:e9:00:86:b6:3e:89:2b:df:b0:
                    7b:a1:93:e5:3b:af:97:77:44:03:8b:ad:3b:78:f6:
                    52:c8:33:9b:33:9b:a7:f7:24:65:f1:9e:aa:87:88:
                    a5:84:c9:1f:76:ca:f6:f8:fc:7d:f1:51:db:41:ef:
                    29:70:57:09:8b:4e:f5:c3:fe:4b:66:98:8a:5c:a8:
                    43:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D9:42:4E:F6:6A:DC:DB:64:EA:8D:89:9A:41:08:1C:9E:14:85:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a16e89d8-ed6d-3e3e-b7a1-ed3f28a1794d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3fc0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:64:44:6a:ec:32:a4:e3:55:1a:89:19:37:b3:a9:b0:ec:c9:
         3b:2f:c2:55:4e:4a:0e:3a:2b:81:44:ac:37:3c:00:9a:cb:b1:
         18:63:32:f2:5c:95:17:70:45:c2:c5:5d:bb:2c:d0:12:eb:46:
         4f:f6:a4:87:be:c4:6d:6d:f1:a7:14:3e:7e:eb:02:a3:ed:8b:
         a6:0e:9d:a7:c4:3b:f2:f8:5a:fb:f6:b6:dc:79:3b:07:b0:22:
         58:a5:6b:66:1d:c3:51:21:53:2b:68:92:ae:39:e0:d8:19:0d:
         06:2f:ee:1c:5b:cf:a6:8a:76:f2:27:42:e4:1c:e0:70:f2:6c:
         03:e4:96:7e:f0:ca:d7:63:d0:6f:3f:78:39:f2:a3:d9:72:75:
         38:50:0f:2d:9a:bd:51:1b:72:6c:e9:8e:88:44:cb:53:dc:57:
         ef:a6:29:10:cd:1c:8b:29:57:eb:bd:b1:85:7c:27:53:3d:35:
         36:41:08:64:99:44:ab:26:28:4d:f6:95:87:7c:6c:90:ee:e5:
         d5:b2:3e:b8:6c:c8:38:81:f2:b4:3f:6b:16:d5:0d:ac:78:4f:
         f2:5d:7a:20:91:30:e9:66:d9:1a:6d:0c:ee:9f:94:73:ae:38:
         a1:e4:a5:22:1b:b9:8b:e9:d6:0b:82:07:7c:b4:a5:57:36:0e:
         2e:75:6b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:25 2025 by rpki-client