Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aef47414-80f2-35e5-ba26-f9412c364c91.roa
File:                     aef47414-80f2-35e5-ba26-f9412c364c91.roa (raw, json)
Hash identifier:          Z+keYsGsLdb/xzUpHGq7TQ8GMEvXK0kSj36zNCoAnhk=
Subject key identifier:   5A:7D:F1:D1:BC:9C:5F:61:9C:1C:04:4E:F2:71:6E:9D:9F:51:72:5F
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780268F08724D58C4D146BE00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aef47414-80f2-35e5-ba26-f9412c364c91.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:3800::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:8f:08:72:4d:58:c4:d1:46:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=ecf6311c-4ae6-4098-855f-05704f2cca0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:8d:a5:21:8e:cd:e8:c7:bc:71:2a:c0:a0:
                    2c:a4:c2:c1:7f:2f:df:f9:5e:4f:c7:33:83:60:52:
                    97:82:11:d5:15:a1:15:5f:e3:d9:07:b3:39:d5:fe:
                    8a:61:80:6f:ba:75:1d:dc:cb:12:3c:58:93:44:d1:
                    d7:f4:c8:79:54:28:21:19:c7:8c:3e:70:0d:56:07:
                    7e:b1:25:06:11:c8:fc:6c:3b:03:aa:c7:58:ff:77:
                    18:b0:89:8f:09:b0:a5:2c:e7:36:7a:48:80:bf:53:
                    ff:f2:c7:4d:6d:d4:90:ab:5d:b0:f8:34:60:9f:27:
                    36:7b:75:5d:78:b7:e6:e0:0b:ed:a3:95:58:b4:bc:
                    d8:3f:49:47:95:5d:2a:05:79:b6:dc:ce:5e:69:7b:
                    71:a8:9c:e9:94:8f:08:db:d0:ad:64:bb:b3:40:b2:
                    98:aa:44:53:9f:cf:a8:65:04:42:4b:3c:a2:04:18:
                    6f:20:fe:4c:96:c2:dc:20:9f:7e:47:15:b8:e5:69:
                    f1:b3:40:69:44:01:5c:3b:d4:4f:c5:63:78:fc:c6:
                    f7:10:75:33:d0:70:a4:31:f6:cf:3e:77:f3:fa:79:
                    2a:3d:09:bf:cc:02:19:cf:58:f0:cb:f2:a1:6e:8a:
                    10:ee:3c:6f:3d:53:6d:08:28:6d:ee:94:f7:2e:0f:
                    20:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7D:F1:D1:BC:9C:5F:61:9C:1C:04:4E:F2:71:6E:9D:9F:51:72:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aef47414-80f2-35e5-ba26-f9412c364c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:3800::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:17:4a:06:5b:57:7c:d4:66:11:21:cf:e4:08:1a:1e:1a:9e:
         21:cb:80:cd:3e:ca:3c:ab:ed:17:89:67:28:79:df:86:9c:df:
         6f:23:35:f9:77:0a:56:0e:39:63:88:3b:77:66:38:bb:e7:25:
         a3:09:76:50:3e:7f:f1:57:ae:fa:94:ad:28:5e:52:10:cf:8b:
         00:a7:45:32:06:28:2b:3f:78:ae:35:47:79:f2:8b:93:9e:d2:
         3f:28:52:4f:9c:6d:37:35:cd:49:ff:aa:38:e8:88:d2:c8:a7:
         d4:0a:12:fc:49:37:5a:0e:b2:be:7c:df:b4:2a:2e:ca:12:14:
         65:57:e7:78:91:d3:0f:a1:b6:17:f2:2c:5b:40:b4:e5:2a:d6:
         15:c1:dd:6c:40:9d:6f:7c:26:6e:44:59:31:da:ba:49:f5:20:
         86:fc:94:75:ce:61:c0:c8:d3:ad:1b:c5:02:4c:7d:b9:0a:ec:
         fe:dc:e2:43:5e:48:8b:5c:98:fb:a8:65:1a:72:70:86:cf:ab:
         0b:ef:9e:42:50:85:35:fe:23:45:24:7e:d3:8b:bd:48:3c:8c:
         11:c0:86:78:10:51:ce:b3:c0:63:0d:f6:e9:37:cc:95:f5:1b:
         34:cd:0b:f1:bb:74:c0:43:11:d7:cc:6a:4b:e6:23:20:47:9b:
         33:4e:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:45 2025 by rpki-client