Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d7c9ba54-2608-3f35-8481-46f7dbceb26c.roa
File:                     d7c9ba54-2608-3f35-8481-46f7dbceb26c.roa (raw, json)
Hash identifier:          fpVi0AYpCJNv4y4ZMCwg3hCjgIGKwKGAq1UQsNAUn34=
Subject key identifier:   69:A3:EF:79:8E:12:6A:6E:53:11:A9:E0:61:B1:B6:1F:1E:21:CE:77
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026872F64FB6FB5049DC160
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d7c9ba54-2608-3f35-8481-46f7dbceb26c.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:28c0::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:87:2f:64:fb:6f:b5:04:9d:c1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=7c443e6d-d6b6-4160-ae6a-15f0fccdd591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ed:bc:c0:bb:9f:6c:0b:ea:5f:07:04:53:2f:
                    6c:6d:f2:90:1b:da:98:27:ec:1a:da:62:98:1c:9a:
                    6c:fb:0b:34:1a:d9:c2:a5:a5:c5:80:02:c8:be:f3:
                    73:6f:7e:ba:1b:55:ff:33:de:dd:b0:c3:56:4a:9b:
                    0b:16:7f:b0:d8:44:8d:2f:df:d0:06:6c:bc:bf:fa:
                    74:2e:1d:75:d8:5b:8c:de:1c:b5:bd:8c:4e:ec:2d:
                    fc:68:4e:7c:e9:03:c5:88:29:cf:02:01:a9:8e:26:
                    d8:a6:63:d6:1a:2a:22:4c:ef:43:f0:66:81:60:a8:
                    79:28:5c:ee:21:04:fc:67:d1:0c:73:75:9c:f6:6d:
                    ee:1f:ed:1d:57:07:9e:c2:7d:fe:ea:e4:89:18:7e:
                    9e:2f:24:2a:f4:ea:9a:c1:5b:af:e9:cf:8f:73:bb:
                    2c:43:c0:9a:37:44:d5:49:57:51:b5:78:28:46:de:
                    9f:3b:32:7a:09:4f:d1:0b:4b:6f:b3:07:5a:88:9e:
                    47:ef:13:fe:55:0d:3d:b8:fa:4c:e7:29:8d:cf:42:
                    72:2f:bb:4a:3c:60:52:e8:65:92:51:65:cf:4c:e4:
                    61:41:17:8c:72:ea:d5:6f:fe:07:ff:48:bf:30:0e:
                    bb:11:c0:5b:45:00:bb:84:42:f2:86:6d:de:16:f4:
                    57:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A3:EF:79:8E:12:6A:6E:53:11:A9:E0:61:B1:B6:1F:1E:21:CE:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d7c9ba54-2608-3f35-8481-46f7dbceb26c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:28c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:d5:c8:dd:2f:95:a9:23:4b:53:97:04:aa:e1:c5:11:85:a7:
         f8:cb:9e:dd:bf:53:82:01:be:b9:5e:33:d2:23:e8:4d:8f:0a:
         d9:1d:bd:06:37:83:d7:62:f2:55:fb:21:f6:17:a0:a6:d7:bd:
         a4:0f:c5:0b:f3:a4:93:da:c3:bb:ac:6e:ba:8e:59:f4:ed:6c:
         2c:b7:ba:a0:f0:e2:d1:37:74:ee:20:13:1a:fb:f1:c5:1b:2d:
         74:1d:84:00:ee:cb:a2:3b:09:fd:22:9f:5b:4e:4b:00:3f:3a:
         bf:16:a5:a3:97:7f:58:5b:18:18:8a:10:1d:28:5f:d1:e9:8f:
         cb:ea:b0:8a:19:0b:cd:6a:85:fd:52:65:84:a5:4f:56:aa:d8:
         7a:26:69:ea:1e:d9:ba:7e:73:0d:6b:7d:7c:df:db:34:4d:1b:
         60:b6:1c:7c:52:77:6f:85:29:98:14:b7:a0:69:25:6b:11:43:
         07:f3:de:d3:de:fd:4e:8e:32:69:79:1c:4f:22:c9:18:1c:62:
         0a:0f:bc:20:2a:c6:63:39:de:46:60:19:08:2e:71:0d:9a:ad:
         bc:78:d0:92:4d:0b:f3:46:e5:cc:f6:3e:c0:a5:08:81:59:d9:
         e8:e8:b4:3e:58:b4:09:49:e0:d2:4e:53:d6:2d:9c:1b:b6:b6:
         23:cf:8d:60
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeAJocvZPtvtQSdwWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI0MTAxMTAxMDAzMVoXDTI1MDEwOTAyMDAzMVowLzEtMCsGA1UEAxMk
N2M0NDNlNmQtZDZiNi00MTYwLWFlNmEtMTVmMGZjY2RkNTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+28wLufbAvqXwcEUy9sbfKQG9qYJ+wa2mKY
HJps+ws0GtnCpaXFgALIvvNzb366G1X/M97dsMNWSpsLFn+w2ESNL9/QBmy8v/p0
Lh112FuM3hy1vYxO7C38aE586QPFiCnPAgGpjibYpmPWGioiTO9D8GaBYKh5KFzu
IQT8Z9EMc3Wc9m3uH+0dVweewn3+6uSJGH6eLyQq9OqawVuv6c+Pc7ssQ8CaN0TV
SVdRtXgoRt6fOzJ6CU/RC0tvswdaiJ5H7xP+VQ09uPpM5ymNz0JyL7tKPGBS6GWS
UWXPTORhQReMcurVb/4H/0i/MA67EcBbRQC7hELyhm3eFvRXLQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGmj73mOEmpuUxGp4GGxth8eIc53MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDdjOWJhNTQtMjYwOC0z
ZjM1LTg0ODEtNDZmN2RiY2ViMjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQCjA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEbVyN0vlakjS1OXBKrhxRGFp/jLnt2/U4IBvrleM9Ij6E2PCtkd
vQY3g9di8lX7IfYXoKbXvaQPxQvzpJPaw7usbrqOWfTtbCy3uqDw4tE3dO4gExr7
8cUbLXQdhADuy6I7Cf0in1tOSwA/Or8WpaOXf1hbGBiKEB0oX9Hpj8vqsIoZC81q
hf1SZYSlT1aq2Homaeoe2bp+cw1rfXzf2zRNG2C2HHxSd2+FKZgUt6BpJWsRQwfz
3tPe/U6OMml5HE8iyRgcYgoPvCAqxmM53kZgGQgucQ2arbx40JJNC/NG5cz2PsCl
CIFZ2ejotD5YtAlJ4NJOU9YtnBu2tiPPjWA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:21 2025 by rpki-client