Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/68d1a04d-7145-3852-909c-6b0cf1a7b16c.roa
File:                     68d1a04d-7145-3852-909c-6b0cf1a7b16c.roa (raw, json)
Hash identifier:          /bWSqyepEItwnCgzPIPKm+EFp6BC0zFivLJPmD98yxU=
Subject key identifier:   9A:64:84:E5:4F:13:8E:AB:D3:A1:05:CF:98:D7:C0:C6:E2:9E:06:CE
Certificate issuer:       /CN=c6830b98-b6ce-461c-8849-244186a13d62
Certificate serial:       010D0C9F432858485E35B65BF21D1F147A359380
Authority key identifier: F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/68d1a04d-7145-3852-909c-6b0cf1a7b16c.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     54702
IP address blocks:        199.58.92.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:b6:5b:f2:1d:1f:14:7a:35:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6830b98-b6ce-461c-8849-244186a13d62
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=f8a91f99-e0f7-458e-acc0-cbdc00460de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:63:ae:96:38:b6:9d:4e:37:95:7e:47:7d:
                    b7:22:3a:d7:bf:3d:8d:63:73:d0:63:d2:df:c0:d1:
                    ae:f4:5a:46:3e:6e:58:50:81:ef:cd:cb:97:01:a2:
                    2b:1f:c9:30:52:e4:b4:fc:ac:11:c0:29:10:59:cc:
                    3a:9c:18:c2:9c:41:37:5c:c6:51:50:fb:9f:63:b2:
                    ec:d6:6c:0c:a3:1a:ec:25:1b:e4:e5:b0:4f:a4:fe:
                    f9:33:62:8b:ef:db:56:af:a7:50:60:bb:a9:73:de:
                    d5:ce:7f:4e:b3:67:21:8a:aa:2b:d4:1a:5a:36:73:
                    45:6b:a5:6d:a2:3b:64:9c:30:23:0c:ad:d2:d6:d9:
                    fc:8a:82:e4:40:3e:b6:cf:53:2e:a6:7d:07:a2:c3:
                    a5:6f:0b:43:da:ce:cf:9c:e8:aa:0a:ef:7c:43:a8:
                    c8:47:94:91:64:33:39:e2:dc:27:ff:f0:08:1e:54:
                    94:0a:ad:54:2a:24:7f:48:c4:6a:ae:ce:3b:5a:cf:
                    12:80:58:85:74:29:40:82:14:c7:c6:3f:66:c1:58:
                    3c:85:82:6a:48:d2:22:ae:45:7e:af:f0:1e:aa:f9:
                    8b:bb:ef:0d:ef:ec:b4:05:30:8c:63:17:f0:8e:e6:
                    60:1b:35:07:a1:cc:35:96:41:1b:ce:fa:83:c5:cb:
                    10:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:64:84:E5:4F:13:8E:AB:D3:A1:05:CF:98:D7:C0:C6:E2:9E:06:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/68d1a04d-7145-3852-909c-6b0cf1a7b16c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.crl

            X509v3 Authority Key Identifier:
                keyid:F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:d6:14:23:e5:56:37:1e:a5:6f:16:b0:e4:c6:c3:d8:1c:5c:
         54:ba:f6:10:c6:f0:42:2a:2b:39:b2:05:02:e2:db:ce:f0:09:
         48:ab:ac:9b:4f:4c:06:c8:bd:bf:6f:99:c4:68:5c:5f:43:79:
         1c:4f:d2:b9:f4:c9:79:27:04:55:75:38:1f:78:22:4e:61:3e:
         61:bd:a2:ae:db:34:9a:cd:14:5d:62:be:ea:6f:ed:85:d2:21:
         fc:59:b3:d1:02:e7:3c:0a:62:22:03:af:67:af:d5:d1:c4:25:
         e5:c7:14:ed:22:62:fe:a7:3f:81:e4:38:bb:cf:93:80:12:b9:
         c0:ed:7c:2e:9d:d2:00:c9:75:65:18:59:3b:1a:36:34:2f:ee:
         86:80:cb:1b:60:0d:a1:7e:9e:ff:9b:af:09:eb:5b:af:11:e4:
         42:c5:35:00:df:57:df:fd:b6:3c:e8:a6:97:d9:e7:5c:3f:f7:
         29:3b:0f:a6:26:a7:a4:f4:db:90:c8:7a:70:d4:6d:90:dd:5f:
         61:cb:04:bc:86:4c:f2:b9:0e:ef:97:25:a5:66:d1:87:2c:5a:
         2e:bd:71:cd:f3:2c:76:96:32:0f:4d:6c:f2:c3:48:07:0f:2a:
         ae:21:e4:34:2e:a3:05:02:2f:98:ee:7f:84:9b:70:59:ee:d5:
         1c:83:47:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:09:13 2025 by rpki-client