Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0471c85b-35a4-3670-b1ed-d14fb9fd4493.roa
File:                     0471c85b-35a4-3670-b1ed-d14fb9fd4493.roa (raw, json)
Hash identifier:          Acm/DqcLiNR29DJ/UUU/gQeSsLfflFhSYIRV193FXuI=
Subject key identifier:   AB:3B:F3:8E:95:AE:E6:FC:69:D1:1B:47:D3:59:84:BE:15:FF:FF:F2
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABBFEF1958310EBB118F80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0471c85b-35a4-3670-b1ed-d14fb9fd4493.roa
Signing time:             Wed 16 Oct 2024 14:26:36 +0000
ROA not before:           Wed 16 Oct 2024 14:26:36 +0000
ROA not after:            Tue 14 Jan 2025 15:26:36 +0000
asID:                     81
IP address blocks:        192.101.22.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:bf:ef:19:58:31:0e:bb:11:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:36 2024 GMT
            Not After : Jan 14 15:26:36 2025 GMT
        Subject: CN=6fb3c252-65b8-4155-8aaf-02cd64d4192d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:1e:b1:7b:73:0b:50:1e:ad:0a:f9:4d:c5:
                    8c:2d:9e:16:6f:90:a0:0c:20:ff:21:d3:bd:90:1a:
                    86:24:0c:16:c4:7e:b1:ed:bd:c0:96:74:d0:fb:66:
                    dd:b8:fb:2f:da:53:6a:77:d9:bc:6a:03:bb:6d:7e:
                    ba:32:a2:c4:92:44:b3:61:58:96:a1:f3:2d:12:20:
                    90:fd:07:b4:9c:44:0a:ae:41:b8:a8:1e:12:b6:f6:
                    6c:52:4f:b1:a1:ed:63:6f:d8:3e:1a:3d:a3:c2:d1:
                    61:91:38:82:b7:58:5c:53:1a:c5:75:d7:ef:1a:1e:
                    ec:9e:dd:eb:a9:dd:cb:ab:6f:79:ef:32:2e:ab:29:
                    e9:80:2e:38:9e:66:77:17:f4:46:fb:77:45:95:55:
                    cd:63:8e:c0:1e:57:87:98:fd:9a:c7:4c:92:26:eb:
                    9d:6c:8e:68:1c:12:7d:8f:9a:2e:6c:fb:ca:fa:e9:
                    90:b9:4e:19:6c:15:82:68:d1:3d:3f:e1:62:3c:62:
                    69:62:26:02:1d:7f:ce:90:88:c8:17:83:43:14:57:
                    e4:6f:44:c0:80:de:e5:23:6e:8c:58:18:17:43:67:
                    ab:fb:93:9e:8b:e3:14:55:99:b3:b8:81:e4:af:25:
                    71:81:72:a2:20:ec:07:ec:9e:81:7b:fe:23:a3:41:
                    38:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3B:F3:8E:95:AE:E6:FC:69:D1:1B:47:D3:59:84:BE:15:FF:FF:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0471c85b-35a4-3670-b1ed-d14fb9fd4493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:11:b3:d7:e4:4d:37:2a:a5:78:17:af:b5:dd:19:b4:11:7d:
         40:dc:e4:05:52:dd:dc:b5:a5:ad:85:7d:bb:93:be:50:7c:56:
         0d:cd:e5:5a:6d:c8:91:26:1f:08:44:d6:64:42:89:44:9b:fd:
         c7:99:52:75:15:f0:96:db:f5:d3:10:2e:83:1a:04:ad:3d:3c:
         7e:f0:46:99:d8:81:fd:76:b5:32:6d:bf:88:89:5e:f4:09:63:
         98:93:25:49:b8:1f:ba:a4:f2:1e:2c:c2:8b:81:1d:be:1e:6a:
         cb:8b:ed:1f:ac:da:6f:da:3a:f0:26:f3:9f:e8:f8:eb:e4:44:
         7e:43:4f:94:ab:42:03:bc:b9:74:ab:6b:d5:0f:d3:8a:2d:74:
         f9:52:a9:8a:e4:cc:4c:ee:b3:2e:70:04:a4:a6:4a:7c:27:fe:
         50:2a:9e:ad:b9:e1:5b:3e:27:a3:12:dc:20:5e:c5:20:db:d0:
         56:ee:a5:dd:87:dd:bc:43:12:36:09:d4:ac:39:b5:54:84:fe:
         c4:c4:b2:07:e0:3c:36:d8:7f:80:9e:72:50:fb:c0:53:10:cf:
         5d:65:e7:0c:de:62:e7:03:c1:b9:07:5b:9b:21:d2:4c:ce:be:
         53:b8:5a:e2:33:d2:86:89:ea:cc:82:67:ef:de:04:b1:d8:6f:
         5e:f0:82:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:39:04 2025 by rpki-client