Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d5f36f3-fd96-3b66-9d16-f7276d5f2645.roa
File:                     8d5f36f3-fd96-3b66-9d16-f7276d5f2645.roa (raw, json)
Hash identifier:          dEliFrmrinZOHbMnfiJwfuSo7TXdZCc1VG3J+ggbLpU=
Subject key identifier:   C6:14:4B:CD:89:99:A4:58:D6:4D:57:13:25:F5:55:86:A9:E5:0F:96
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847455170AF8AB1945F1FAAAE80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d5f36f3-fd96-3b66-9d16-f7276d5f2645.roa
Signing time:             Thu 19 Sep 2024 23:14:49 +0000
ROA not before:           Thu 19 Sep 2024 23:14:49 +0000
ROA not after:            Thu 19 Dec 2024 00:14:49 +0000
asID:                     7029
IP address blocks:        174.130.80.0/25 maxlen: 25
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:51:70:af:8a:b1:94:5f:1f:aa:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Sep 19 23:14:49 2024 GMT
            Not After : Dec 19 00:14:49 2024 GMT
        Subject: CN=f21b62a5-dc41-42c9-bddc-5bbaaecac736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:61:e7:16:77:4c:65:ae:c7:c7:14:c0:37:
                    43:42:99:dc:74:9f:5c:23:3e:72:f3:34:5b:5b:89:
                    a0:d3:74:4d:67:21:f3:2a:cd:99:45:87:5f:3f:59:
                    96:c5:4e:65:a9:f5:d9:c4:a3:68:a3:17:2d:7f:e0:
                    c8:2f:c7:e2:63:46:59:b6:ea:ba:32:69:ec:5d:87:
                    23:82:b7:82:ca:76:cf:ce:5e:54:22:a0:0f:1c:e3:
                    c3:94:f7:85:9a:d9:ee:ec:11:2f:d3:a3:7e:d1:c5:
                    de:d2:71:92:d0:2d:76:f7:0c:ee:df:a1:91:2d:40:
                    45:b1:94:02:31:0c:4a:e0:d2:c3:5b:47:de:c2:7f:
                    80:7d:3e:e8:6a:63:24:d9:9b:e1:97:07:0e:1d:84:
                    7b:f0:a7:c2:b1:f4:cb:5c:03:04:af:bd:2f:d0:46:
                    4c:10:1a:d3:59:92:48:39:e0:a8:a6:26:c9:5d:5e:
                    52:77:bf:63:c3:37:29:0b:c9:dd:2f:0c:c9:a9:c0:
                    be:3d:94:6c:9d:34:e9:63:6b:b4:2e:04:fa:60:07:
                    5e:e3:ea:28:0f:23:38:4f:3c:18:3a:6f:33:a6:57:
                    59:9f:fd:ce:a9:e8:19:25:38:03:51:79:69:4a:3b:
                    3e:2c:a9:26:a8:e4:bc:49:ac:9f:7c:10:2e:06:a2:
                    78:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:14:4B:CD:89:99:A4:58:D6:4D:57:13:25:F5:55:86:A9:E5:0F:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8d5f36f3-fd96-3b66-9d16-f7276d5f2645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.130.80.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:59:c8:03:d0:4c:81:e9:cb:43:0c:9a:8b:04:ee:82:a7:21:
         7f:17:45:a9:f0:e0:ef:0e:5f:10:b2:fa:bd:4a:53:ce:60:3e:
         60:3a:e2:06:4f:ce:2d:ed:c7:9e:b5:16:65:04:dc:6c:8b:c4:
         5c:ba:80:b8:83:b7:69:ab:b2:33:fe:38:e3:ba:e0:6e:d2:90:
         f3:b6:dc:50:f9:7b:19:20:a2:a0:b4:82:27:ba:27:96:cd:2f:
         5e:68:10:0c:84:28:8d:58:8b:12:2b:ba:e4:5f:75:98:78:90:
         83:a7:19:09:22:8a:79:31:64:5c:da:d0:d4:c5:2a:8c:f5:41:
         3e:66:f8:f9:d8:85:a3:68:60:a4:77:bc:66:6d:4a:37:90:19:
         12:67:b4:98:19:c1:50:36:b3:d6:a9:cd:52:c8:1c:3d:dd:47:
         c4:76:5b:18:5b:86:d5:df:92:33:5c:57:d6:14:58:8f:0c:ba:
         02:ad:0f:06:c9:3b:86:15:ca:c2:05:4a:20:e0:83:2f:0c:b2:
         2e:d2:ca:7a:d9:3b:28:7c:58:ad:67:2b:4c:23:8b:7f:4f:13:
         66:c3:01:57:a7:81:ab:a4:d5:46:f2:52:02:79:3a:77:b6:44:
         66:f2:02:52:d9:86:b9:eb:94:f2:3c:40:ef:0e:d9:93:6b:67:
         c1:6c:0f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:53 2025 by rpki-client