Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69e87c00-0cad-3458-9588-f379f5244f10.roa
File:                     69e87c00-0cad-3458-9588-f379f5244f10.roa (raw, json)
Hash identifier:          buedcziIwQwRDRD5Oh1Eekdq0vTS6BhaWFH/3Q2gYB4=
Subject key identifier:   7D:20:34:3B:10:0A:13:E7:49:EE:FF:4D:CC:34:FA:E5:E8:06:D3:F6
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584711E09B13CBDE3B0E836CCB80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69e87c00-0cad-3458-9588-f379f5244f10.roa
Signing time:             Sun 01 Sep 2024 13:00:41 +0000
ROA not before:           Sun 01 Sep 2024 13:00:41 +0000
ROA not after:            Sat 30 Nov 2024 14:00:41 +0000
asID:                     7029
IP address blocks:        71.7.8.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:11:e0:9b:13:cb:de:3b:0e:83:6c:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep  1 13:00:41 2024 GMT
            Not After : Nov 30 14:00:41 2024 GMT
        Subject: CN=b0dea652-2c85-4ba6-adea-967e02c664f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:5a:a4:b8:c8:cd:dc:81:44:d6:22:8f:f8:
                    06:b9:63:7b:23:41:be:fa:64:6e:7f:66:14:18:77:
                    74:f9:6d:8b:d6:a6:93:b8:c9:f1:34:f7:ef:f1:3e:
                    52:cf:e0:e9:da:f1:34:45:d3:f0:34:52:44:fa:99:
                    e3:80:b0:62:d5:1b:b8:2d:a3:52:e9:b9:1f:d2:a5:
                    fc:03:41:66:69:f9:90:7a:59:35:ca:c7:1f:16:9d:
                    29:e1:13:70:6b:bb:4b:4b:54:34:f7:a0:8d:e3:bf:
                    dc:a3:cb:3e:78:f2:53:a2:16:f1:fc:ce:0a:6a:f9:
                    c7:57:b3:8d:ad:0d:07:05:56:cb:48:22:e9:a0:4c:
                    4c:ab:dd:5f:4e:bb:52:a6:a5:e9:06:2d:cc:cc:2c:
                    64:6d:5e:9c:94:42:b9:cf:38:4f:9a:38:ce:27:79:
                    2a:ed:fa:4d:f2:e1:c5:d3:69:2b:db:1c:bd:d2:a0:
                    16:7f:70:c1:4e:42:a8:86:44:2f:36:49:a2:3e:9e:
                    c7:bc:5e:7e:75:99:e7:2c:db:2b:b5:29:71:ca:db:
                    ed:f9:89:6e:ca:24:42:3f:db:d7:11:de:a9:bc:05:
                    33:8f:15:79:80:08:b0:fc:9b:d9:f5:1c:a5:20:ea:
                    56:2e:40:52:cd:9c:18:18:0b:cf:10:d5:b1:e8:39:
                    88:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:20:34:3B:10:0A:13:E7:49:EE:FF:4D:CC:34:FA:E5:E8:06:D3:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/69e87c00-0cad-3458-9588-f379f5244f10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.7.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:7e:23:e2:e2:32:a4:27:52:e6:c9:a7:56:5e:bc:43:16:e6:
         bb:e1:a2:fb:09:20:c0:ba:3f:e7:7b:1a:11:a9:8c:17:9d:e6:
         2b:a3:13:c3:5a:0c:44:57:08:8d:a5:46:c1:f1:ca:ec:1b:6c:
         e5:16:76:7a:ff:87:de:03:41:bc:4f:e0:ac:ec:da:64:76:25:
         10:5c:85:ec:3e:61:e5:6a:28:40:7d:30:2f:5f:dc:40:22:98:
         25:80:2d:50:a2:97:47:a5:30:f2:6a:e3:2d:f0:bf:5f:a8:05:
         a5:54:5f:8a:1a:6e:ca:be:4a:04:19:7e:a6:78:48:85:a7:8c:
         f5:d7:15:56:bf:fa:9e:65:17:88:c5:1a:24:41:47:c3:18:e3:
         24:cb:63:c1:63:6f:92:8b:ba:0c:5d:56:d4:90:b6:89:92:aa:
         2e:e2:10:c6:cd:bf:91:cb:f0:58:54:a2:8b:f7:42:52:ad:f1:
         9e:75:76:44:a2:56:3a:a6:00:8c:86:7a:67:67:fc:28:4a:bb:
         91:ff:c5:4d:bb:c0:db:15:ed:56:ef:bf:73:e5:0a:28:bb:25:
         41:05:db:24:a5:65:42:32:00:10:db:ce:c4:a8:df:07:fb:f1:
         a9:eb:19:ca:4e:1c:81:82:c6:bf:cb:96:ae:92:22:23:3e:5a:
         f8:90:be:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 23:19:28 2025 by rpki-client