Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e4bfbafd-d63f-3a02-8b82-e2e73d906d00.roa
File:                     e4bfbafd-d63f-3a02-8b82-e2e73d906d00.roa (raw, json)
Hash identifier:          YYuBxgUoiEz05C6Rkvpk5gkeLmECDbg0ZmjFeha2C8Q=
Subject key identifier:   12:FE:34:B5:02:79:59:52:75:04:ED:96:81:19:67:16:B1:B9:8A:76
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584780265DBF8DD0C45655177108
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e4bfbafd-d63f-3a02-8b82-e2e73d906d00.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:39a0::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:5d:bf:8d:d0:c4:56:55:17:71:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=e50020fc-58b0-4526-af7c-208cce387867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:2a:0a:51:f3:7b:d4:00:3c:b6:cc:49:ae:
                    84:53:8d:be:61:78:67:4e:37:93:40:f8:98:62:c2:
                    3b:10:4e:94:45:d2:f7:a2:24:d3:7a:12:2a:12:5b:
                    49:0d:ec:c3:0c:1d:2e:26:ce:a9:f7:60:e1:91:45:
                    76:a1:42:01:bd:71:62:f8:6f:21:8a:d9:7e:8b:48:
                    a6:3c:dd:58:3b:b4:63:12:49:e4:3c:67:f6:1d:7c:
                    39:4f:e3:ff:c8:09:65:e6:07:30:af:27:a0:8a:5d:
                    98:94:8e:d9:b3:5c:4b:a9:42:a2:6d:c3:46:c9:e7:
                    e2:f5:34:62:d5:f3:d9:4c:4b:be:4a:2e:7e:8b:68:
                    f5:9c:14:f7:32:de:67:d2:bd:aa:59:d0:0e:45:f8:
                    2e:f2:0c:53:dc:04:cf:79:c6:9a:b7:4b:8a:ce:77:
                    03:d3:2b:ba:ef:c4:92:de:ef:ce:16:34:8e:fe:54:
                    86:b5:6b:d0:c4:20:b1:e0:9a:59:f1:01:fb:93:fc:
                    ad:a5:0f:3c:9d:ca:2e:7c:fd:1c:cb:8d:33:b0:0a:
                    8a:11:10:0d:d6:64:b5:10:26:b2:e9:f8:d1:5a:71:
                    c7:a8:3e:6c:0c:24:6e:35:4b:31:37:03:4b:c8:b6:
                    e6:56:19:dc:45:df:c9:ad:9c:6c:8b:a8:b0:a4:c6:
                    e2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FE:34:B5:02:79:59:52:75:04:ED:96:81:19:67:16:B1:B9:8A:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/e4bfbafd-d63f-3a02-8b82-e2e73d906d00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:39a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c5:e8:cc:41:d2:e9:b7:ef:55:67:99:88:51:aa:e6:fc:d0:
         f4:8d:b9:3f:14:99:63:5e:42:f3:65:01:f0:68:37:f2:aa:e5:
         a6:ac:28:cd:5a:e3:31:c6:59:b7:1d:63:e5:68:dc:6b:00:9b:
         f2:c2:3b:6e:7f:2f:dd:72:a0:d5:ac:99:70:4f:1c:d1:94:c0:
         db:0b:df:1b:31:31:38:1f:1d:46:e8:d4:51:bf:eb:f7:ca:9d:
         e9:0f:2c:6b:51:e5:4b:19:1c:0e:e1:4a:01:d2:03:c3:bd:37:
         00:b2:b8:41:a7:f6:94:b0:90:4f:31:18:13:71:de:98:cf:76:
         c2:48:46:a1:af:13:e7:8e:2e:61:1f:5b:22:31:b4:3a:1e:9f:
         c7:da:df:2e:9b:ea:91:05:5b:7b:eb:85:23:d9:83:87:af:3c:
         01:c9:77:0f:90:3f:4c:f8:88:e6:42:20:3e:0e:09:b3:09:2b:
         56:ad:12:68:30:a0:89:08:04:3a:ea:b6:06:c1:d1:35:8c:94:
         36:55:53:f8:ad:59:47:81:2a:8f:75:ea:33:8c:6c:b7:62:e2:
         74:20:c3:5c:c0:41:ed:5a:6d:75:6d:75:e3:27:12:da:45:21:
         cf:10:61:8e:99:2e:3b:17:47:e8:ef:6b:45:db:e7:0a:fc:23:
         ef:d3:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:36 2025 by rpki-client