Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/14a27737-d436-3fc5-9064-bb21da12c740.roa
File:                     14a27737-d436-3fc5-9064-bb21da12c740.roa (raw, json)
Hash identifier:          okg+47l4GZbbq97ZvVXktqZCfJrN/uGXWZAVTtoW/PM=
Subject key identifier:   58:9B:81:EB:6C:10:C4:CF:64:78:B2:05:BC:35:4D:B9:DD:07:D9:58
Certificate issuer:       /CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
Certificate serial:       010D0C9F4328584763ADD261653E7A512F650780
Authority key identifier: D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/14a27737-d436-3fc5-9064-bb21da12c740.roa
Signing time:             Mon 30 Sep 2024 20:15:12 +0000
ROA not before:           Mon 30 Sep 2024 20:15:12 +0000
ROA not after:            Sun 29 Dec 2024 21:15:12 +0000
asID:                     35280
IP address blocks:        204.13.138.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:63:ad:d2:61:65:3e:7a:51:2f:65:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
        Validity
            Not Before: Sep 30 20:15:12 2024 GMT
            Not After : Dec 29 21:15:12 2024 GMT
        Subject: CN=fcc40226-4442-4946-b951-37801007827c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4c:9d:11:4d:85:af:53:6d:3e:6e:4c:a6:98:
                    ff:ae:4c:d6:c2:3d:9c:8a:10:c7:dc:10:9e:e5:b0:
                    2e:da:b0:0d:a5:68:46:20:9c:c2:75:68:0f:71:6e:
                    d3:1d:cf:a5:9b:7a:0f:9c:6e:f1:6f:93:1b:3c:1d:
                    46:f0:27:0f:7f:15:8b:70:76:a9:de:71:ab:17:7a:
                    a4:74:1a:d5:55:9d:3d:37:ad:19:36:c0:65:3f:48:
                    0f:9e:b2:a7:8a:f6:30:ba:40:1a:f0:19:bc:cf:ff:
                    4d:be:e4:8f:2e:f3:e1:6b:9d:04:5a:0c:d6:25:e2:
                    17:d6:be:43:70:e2:e2:0b:0a:bd:81:e2:1d:86:07:
                    16:d8:1a:a6:da:6c:db:04:c1:fb:5e:5a:0e:67:64:
                    72:77:ef:1d:db:93:0d:88:01:51:1b:f3:85:a8:22:
                    f1:e1:38:83:68:d5:75:51:47:5f:ca:67:08:bc:1c:
                    b9:96:0c:f1:53:1c:d5:64:5b:95:13:01:5d:1b:b7:
                    05:c6:c0:18:24:f2:f3:31:59:ad:35:17:56:2e:11:
                    60:79:72:16:98:99:80:66:6e:21:5e:cc:3c:2c:2a:
                    cd:4c:41:3d:66:1e:0f:10:09:8e:44:f2:27:77:69:
                    c2:f4:9e:91:11:13:10:d0:3f:d9:d5:47:3b:6f:22:
                    f7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9B:81:EB:6C:10:C4:CF:64:78:B2:05:BC:35:4D:B9:DD:07:D9:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/14a27737-d436-3fc5-9064-bb21da12c740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.crl

            X509v3 Authority Key Identifier:
                keyid:D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:7b:a8:fe:07:94:66:c5:59:aa:37:98:29:7c:ab:ca:14:b9:
         a9:3c:2e:af:9d:c6:fd:81:a3:19:09:37:53:d9:75:98:3c:4e:
         d4:16:96:3b:f0:8e:e9:8c:c8:12:2e:b4:fa:c4:f5:1f:08:25:
         1e:75:13:85:e6:ce:86:43:e9:56:96:85:62:b7:14:ca:73:b3:
         54:01:e2:75:9a:b0:73:d8:31:6f:5f:45:60:83:d6:05:e4:f5:
         7a:35:40:42:9f:c2:72:1e:79:9c:b5:45:98:5b:18:64:b8:7f:
         74:c5:f6:bc:f5:e2:42:d8:37:84:3c:00:69:b5:44:27:6f:e6:
         17:b9:07:f1:81:49:a1:4a:ec:dc:a3:f5:a7:6a:dd:c9:8a:2f:
         9c:f8:00:90:b9:0e:7b:c3:72:b0:50:89:44:18:17:97:b1:e8:
         0d:32:b5:c9:89:e1:3f:92:46:20:8e:67:60:2d:74:7e:98:21:
         1f:86:7d:48:02:32:86:ca:d3:f1:7d:8b:03:96:df:37:86:e2:
         89:ca:e4:e1:09:c0:4e:bb:4a:c7:24:08:a0:76:2f:df:1c:40:
         eb:c5:55:28:a3:58:c0:94:38:04:cb:7c:f6:37:92:2e:ac:32:
         9c:a0:39:0c:f2:c9:f9:af:2c:11:f4:25:6a:8c:c1:3a:7d:10:
         c9:d3:49:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:26 2025 by rpki-client