Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f5bba812-baa5-3a94-a9d9-08abf81c467c.roa
File:                     f5bba812-baa5-3a94-a9d9-08abf81c467c.roa (raw, json)
Hash identifier:          0UgDHsCADPgGiyB8Rvsx75tcHzb12MW9nLIBDD3NCoY=
Subject key identifier:   0F:20:C4:9F:5A:3D:E9:30:6F:C7:D4:A9:A6:18:73:82:54:96:48:34
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F432858478026970D5E8F6650950E4EC0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f5bba812-baa5-3a94-a9d9-08abf81c467c.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     209242
IP address blocks:        2607:8940:24c0::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:97:0d:5e:8f:66:50:95:0e:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=dcbf7a7d-05f6-439c-9565-9b132a63ac09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:65:52:27:61:d5:37:e8:1c:6e:37:d9:19:20:
                    36:62:be:c4:84:a5:8e:c1:f3:e9:6a:22:df:f2:d7:
                    76:0a:5f:c8:c7:0e:ad:4c:bf:17:0f:cc:cd:27:c4:
                    f0:8d:44:3d:56:8f:da:3c:67:08:de:57:25:b5:81:
                    d5:16:79:30:80:14:0e:1a:9a:9e:9e:3f:e6:70:00:
                    f3:88:10:03:1c:62:b0:cc:1c:53:63:ef:b4:c0:f6:
                    20:2f:3c:77:4d:37:94:41:eb:a6:08:1e:2b:bb:87:
                    a2:ff:18:e2:0e:a5:e3:93:c1:bb:f1:7f:9b:97:04:
                    b9:db:1c:25:ab:26:4c:4c:0f:a2:bd:59:6e:39:77:
                    4a:8e:d4:83:e5:23:d9:9e:8d:cf:a6:20:8f:09:7d:
                    45:04:8b:29:a3:e4:c6:62:a3:45:c7:92:c2:d9:21:
                    99:81:90:89:7a:3b:a6:0e:12:1b:25:c7:c1:45:ce:
                    68:a2:4f:b2:7e:e4:2e:40:9b:c3:e7:0a:ad:ae:a7:
                    f5:72:d8:70:fc:83:e8:cd:ff:d0:e8:f7:9d:45:89:
                    3a:0c:3f:20:b7:3c:c8:84:18:3a:81:f9:ea:33:e1:
                    ac:dc:db:c9:4a:e0:82:16:11:41:50:3e:65:59:54:
                    54:b9:f5:95:87:02:59:e0:5c:8d:d6:40:6c:fd:4e:
                    eb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:20:C4:9F:5A:3D:E9:30:6F:C7:D4:A9:A6:18:73:82:54:96:48:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/f5bba812-baa5-3a94-a9d9-08abf81c467c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:24c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:a6:58:25:37:47:c4:03:e0:75:40:a5:cf:ef:9f:43:39:62:
         76:b4:29:bf:22:0d:3c:ef:1d:06:26:69:15:70:e5:17:d5:02:
         42:95:27:c4:99:a8:14:a0:f5:f2:57:30:f9:c3:f7:c1:23:3e:
         10:fc:76:74:31:f3:bd:60:98:a3:32:c5:09:01:e8:2f:df:48:
         df:0c:96:a9:66:43:f4:a7:45:c0:2f:ac:96:01:60:68:f3:a5:
         b0:bf:58:1b:8b:ba:7b:8b:86:08:9e:34:fb:93:fa:4c:c4:6a:
         48:8f:4e:7a:b8:55:05:07:8d:86:f7:8d:42:13:74:ae:69:75:
         02:7a:1b:46:1d:e8:3f:16:6e:97:41:e9:93:d8:75:56:89:c9:
         9b:22:df:76:e7:2f:61:35:5f:93:55:77:fe:da:48:24:e9:db:
         ff:f0:67:17:7d:dc:8e:2d:95:1e:d3:42:53:ca:0c:71:74:c3:
         46:fa:76:13:f2:b3:4d:a0:bf:85:6c:ea:5b:2d:1e:bf:19:b1:
         db:42:60:2e:6f:2d:05:9b:99:76:51:99:f3:2a:ee:62:f7:12:
         dd:41:2e:e3:0c:7e:bd:54:5c:0c:eb:4f:5b:7d:ec:34:b0:1c:
         7a:d9:0a:bb:54:a6:19:83:39:b9:bf:89:94:3d:c8:2e:b0:ae:
         03:89:b3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:08 2025 by rpki-client