Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/30928980-e3f7-3ff6-9eb6-141a09e0da38.roa
File:                     30928980-e3f7-3ff6-9eb6-141a09e0da38.roa (raw, json)
Hash identifier:          YB/SzjV3FIjfKS6BgBi15TEP+IIvzlOqJzMsVY29+zI=
Subject key identifier:   B7:DB:E3:81:98:D7:22:3A:49:B1:54:F4:CD:00:71:3B:A9:EF:94:16
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABBAC68FAAC0F6EA02A980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/30928980-e3f7-3ff6-9eb6-141a09e0da38.roa
Signing time:             Wed 16 Oct 2024 14:26:33 +0000
ROA not before:           Wed 16 Oct 2024 14:26:33 +0000
ROA not after:            Tue 14 Jan 2025 15:26:33 +0000
asID:                     81
IP address blocks:        152.26.194.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:ba:c6:8f:aa:c0:f6:ea:02:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:33 2024 GMT
            Not After : Jan 14 15:26:33 2025 GMT
        Subject: CN=c27e562e-24f5-4e92-8247-bb0a9deaf297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:26:a6:ad:2b:bf:2a:63:95:57:a8:09:e0:
                    4f:5a:41:6c:4e:1d:0e:2d:30:74:4a:98:c3:3d:80:
                    b8:80:07:f2:da:57:1e:1e:d2:46:05:aa:19:c2:63:
                    83:04:5d:76:23:bf:f2:9e:0e:18:26:69:f8:93:7f:
                    8e:db:41:a7:30:02:fb:a0:18:40:3f:e5:83:d9:30:
                    d4:4a:5b:80:26:80:64:0f:f2:32:1c:fc:1c:44:b4:
                    70:c9:b1:66:c9:82:34:80:ee:4c:c5:ec:1f:07:c3:
                    54:8e:3d:2d:3e:e7:aa:79:26:99:b1:74:34:f8:3b:
                    6a:1d:bc:8e:99:c8:a5:cb:9a:31:50:1c:0b:2a:34:
                    e9:95:d3:76:c3:f0:bc:e6:f2:fc:63:68:30:78:bd:
                    72:84:15:82:c1:86:7e:2e:6e:91:99:92:fc:08:b1:
                    04:94:50:15:61:18:aa:33:4e:43:18:4f:d2:33:96:
                    5e:54:c4:30:77:f0:8f:4d:d3:2a:9a:8e:2d:57:e9:
                    13:d7:f5:d7:36:12:59:c1:39:38:d0:ec:2c:e0:ce:
                    dd:40:9b:20:6d:93:e3:8c:91:d4:b7:92:d2:49:72:
                    65:25:4f:dc:68:87:cc:60:07:82:ad:45:fa:1a:4f:
                    4c:b2:5b:ea:30:60:57:0e:8d:04:a6:8f:95:f8:03:
                    be:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DB:E3:81:98:D7:22:3A:49:B1:54:F4:CD:00:71:3B:A9:EF:94:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/30928980-e3f7-3ff6-9eb6-141a09e0da38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:7e:84:f2:38:b8:70:0a:dc:ad:54:2c:9a:12:0b:db:1c:21:
         00:f2:82:ce:06:d0:c8:9b:14:aa:b8:c4:6f:89:91:f6:f0:10:
         a6:62:d8:c3:4e:43:e1:6d:75:3d:e8:3a:72:47:f7:a7:9d:c0:
         39:55:99:42:60:88:2d:2d:79:f0:82:e0:36:5a:fa:58:89:54:
         3f:f0:84:0d:2b:ad:f0:51:8b:a4:a9:c2:b2:9c:a9:39:3c:a1:
         65:0c:48:7c:73:81:96:d4:eb:e3:66:6b:b5:47:25:30:cb:af:
         07:8a:4a:a4:3a:8b:28:5f:b3:4a:7d:39:49:37:9c:e9:21:20:
         a7:6e:05:b0:ee:11:53:56:b7:dd:84:c3:d5:92:48:bd:a5:61:
         29:ee:74:41:ed:db:f8:c0:4a:6c:1f:71:0e:6f:46:f2:f2:35:
         bd:16:a6:87:ad:bb:b3:b8:2b:63:16:4b:cb:db:d7:dd:53:f4:
         96:7f:b5:f7:71:6e:e2:82:b7:35:a3:98:2c:7d:34:99:ef:5f:
         bc:87:34:80:55:32:b5:e5:8f:b5:d5:7e:49:aa:e8:ae:22:1b:
         13:70:75:af:83:40:9d:e3:d3:e9:57:82:08:7c:8e:1a:21:05:
         2b:10:e9:00:b5:7a:7f:4c:99:42:19:9c:3b:b1:e4:bb:40:3c:
         c3:ce:64:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:07 2025 by rpki-client