Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5e44267-131e-3b1d-ac07-eeb87fe5ad64.roa
File:                     a5e44267-131e-3b1d-ac07-eeb87fe5ad64.roa (raw, json)
Hash identifier:          1mQawbZaSs/CSYNDMkuprWaJAz/gKgQXy1NvMV3KOdM=
Subject key identifier:   73:FC:E4:41:FF:CE:D5:02:70:D6:18:45:B6:8D:6D:7B:4D:D9:A9:50
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780267112C6FA8097B8E73D00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5e44267-131e-3b1d-ac07-eeb87fe5ad64.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:2640::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:71:12:c6:fa:80:97:b8:e7:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=e27e1dcc-d798-4731-a8e3-c865d4b608ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ed:27:62:7a:04:80:1f:76:b0:23:82:61:08:
                    2e:fb:c2:ce:1b:64:c3:7d:f4:53:60:2e:6b:b7:85:
                    b5:af:65:09:23:7b:47:8b:23:bf:ba:d9:44:4f:0c:
                    54:97:3e:60:6f:e1:a1:b5:49:3d:42:93:d5:6f:c6:
                    a9:e2:04:5a:04:e5:75:6e:6f:63:6d:f0:f8:43:db:
                    e4:7b:64:08:01:90:13:93:60:5a:ef:34:e5:10:9a:
                    ca:3b:65:42:4e:ca:11:7c:8b:cd:13:e2:e9:33:26:
                    fd:9b:58:af:13:3b:b6:f8:f8:1b:b4:e6:72:1b:fb:
                    36:92:a6:df:5a:59:2e:ba:76:18:22:9c:88:f1:53:
                    70:ad:4f:1a:5a:5f:30:ba:f5:ae:a4:74:a4:19:26:
                    d9:86:6c:d1:70:6d:27:66:d9:35:32:b9:1c:9f:2d:
                    59:2b:98:b7:cc:36:50:63:49:01:c1:9c:08:0c:99:
                    6c:99:3d:4b:1a:e8:41:9a:e7:78:6a:ed:b5:bb:36:
                    42:e3:49:89:2f:49:bf:79:d7:93:8a:b3:c5:f6:36:
                    55:59:5a:5c:3f:56:ca:7f:19:f5:6a:2c:99:23:cc:
                    4f:23:dd:63:2a:aa:d4:20:70:93:36:f5:91:8b:3c:
                    08:26:82:42:8a:20:98:70:c3:7b:e2:c5:4f:22:fa:
                    27:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FC:E4:41:FF:CE:D5:02:70:D6:18:45:B6:8D:6D:7B:4D:D9:A9:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a5e44267-131e-3b1d-ac07-eeb87fe5ad64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2640::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a6:b4:d4:90:aa:ca:82:bb:3c:53:cd:3e:6e:85:f0:52:16:
         2e:c3:04:99:63:1d:4d:c4:b2:15:4d:f3:b5:c8:84:f8:44:22:
         8d:20:92:0c:c8:f9:55:3e:45:a0:dd:a4:21:90:87:54:24:45:
         65:2e:07:d9:41:c3:ff:8e:c4:bf:18:3c:76:0a:c8:31:ff:a3:
         92:4c:ae:32:d2:10:aa:71:8a:25:a8:5c:e6:fd:da:18:18:4f:
         e1:02:22:4a:ef:61:17:18:d8:0e:13:a8:23:51:b7:57:a3:ed:
         c0:54:94:c0:06:5e:e5:7c:1b:56:48:78:39:61:66:98:6b:19:
         36:c2:aa:35:0d:9a:a8:c1:34:9f:d8:8e:c9:93:1f:9e:d2:a4:
         83:4a:89:7e:c3:01:7e:cc:e6:24:f5:ae:59:e4:a1:6a:75:6e:
         f8:b0:e4:b5:dd:b2:2f:d9:71:76:cf:59:19:aa:c4:74:4d:81:
         b4:04:9a:25:8b:8a:77:49:97:6a:14:16:a3:17:cf:a7:4b:33:
         62:64:ff:8f:99:d8:84:51:f9:e3:dd:ec:11:03:44:39:32:75:
         4f:b9:2b:dd:3c:ec:ea:91:d4:4f:7b:c9:ba:a4:c0:3b:49:d2:
         9f:c1:32:2a:00:5a:37:00:cd:7f:c7:b4:5d:a1:b4:7d:ce:f2:
         0e:6d:30:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:36:01 2025 by rpki-client