Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5fff3bb2-d6d7-374c-800c-869ec9c0cd01.roa
File:                     5fff3bb2-d6d7-374c-800c-869ec9c0cd01.roa (raw, json)
Hash identifier:          Ha+RIRXawd5Zt87USzDJqqxX7012qgpz/Gi1RUhgfQs=
Subject key identifier:   20:CB:E0:6B:46:14:D8:EE:D2:4A:58:8D:0D:61:42:30:6A:03:12:28
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABB8FB5EC948072A2F9E20
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5fff3bb2-d6d7-374c-800c-869ec9c0cd01.roa
Signing time:             Wed 16 Oct 2024 14:26:33 +0000
ROA not before:           Wed 16 Oct 2024 14:26:33 +0000
ROA not after:            Tue 14 Jan 2025 15:26:33 +0000
asID:                     81
IP address blocks:        192.101.24.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:b8:fb:5e:c9:48:07:2a:2f:9e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:33 2024 GMT
            Not After : Jan 14 15:26:33 2025 GMT
        Subject: CN=92e61bc4-4f71-4075-843a-a0dd36c095dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:49:59:0a:bd:a7:15:27:a7:44:9c:42:71:bd:
                    97:20:bc:cb:0f:b1:6a:dc:55:b8:1d:dd:ca:91:2c:
                    1e:9c:1c:bc:6a:05:57:c2:9c:d5:fb:f5:52:9d:95:
                    20:6f:76:de:f4:0e:ff:36:64:ff:eb:f2:a7:80:0a:
                    bd:63:66:f1:77:3e:d2:ba:6c:13:bd:8c:c4:ff:50:
                    15:73:2f:28:d9:16:28:36:5e:31:b7:b6:7d:b0:60:
                    8c:e0:17:9b:91:af:b6:ba:47:d4:f0:45:17:86:1d:
                    eb:ff:ad:a6:ad:cf:18:ad:fd:70:5d:32:f5:3d:9f:
                    4f:4f:74:d3:48:e9:4c:bd:fe:10:f4:13:cd:a1:6c:
                    31:e7:10:f8:a4:21:5f:ae:2b:fd:be:9c:b1:e9:7b:
                    ae:3a:11:51:b2:09:9f:af:6e:48:ed:6b:a6:ef:6e:
                    87:2f:13:bf:ef:f5:4d:93:8e:df:ab:fb:0e:a8:4d:
                    17:82:60:77:f9:88:b1:8d:f9:ce:f7:17:3a:36:b2:
                    96:6e:eb:fe:51:45:b8:35:3c:ec:63:54:81:9f:ab:
                    f9:02:fb:fc:62:94:cb:95:b1:01:e0:da:8c:15:4a:
                    21:fe:b5:22:34:04:df:f3:37:1d:bd:ea:16:65:a4:
                    b0:20:c8:24:2d:1d:f7:40:bc:b5:76:a2:b6:92:f0:
                    6b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CB:E0:6B:46:14:D8:EE:D2:4A:58:8D:0D:61:42:30:6A:03:12:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5fff3bb2-d6d7-374c-800c-869ec9c0cd01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1b:72:be:83:d3:23:be:58:0d:df:5b:38:60:85:52:8f:85:
         4c:0a:aa:21:a3:b6:ed:87:2b:ec:05:cc:27:4c:52:75:20:dd:
         79:80:8a:a2:b3:1f:a3:f3:55:7f:a1:bd:af:37:5e:68:9e:ee:
         44:5b:85:ba:a3:84:a8:09:47:d8:c4:72:06:db:9a:cb:ce:32:
         74:d4:53:69:7c:b0:74:35:24:60:f7:0f:86:05:45:16:4b:61:
         5f:88:ed:58:ff:db:ee:c7:a2:3b:2b:5e:75:f9:66:1d:c3:13:
         36:30:d9:6d:15:7d:36:f0:d7:4e:6f:f6:a0:a4:49:06:7a:a1:
         44:66:be:ce:f1:7d:03:4d:1d:8a:9c:96:7f:b9:e8:fe:56:3f:
         0d:3b:4b:04:9c:6b:3a:54:00:54:22:ae:20:54:31:22:01:17:
         cd:03:e5:84:94:f9:da:73:fa:14:85:26:fc:50:97:a9:c1:73:
         cd:7e:5c:76:53:63:95:83:f0:82:8d:9d:e5:01:ff:28:58:8d:
         70:71:eb:de:f9:0e:29:74:36:0b:96:11:cb:f2:98:a1:f5:16:
         0f:20:39:38:a8:a6:7d:6a:bf:36:27:fa:cb:37:d3:a4:3a:3e:
         21:dc:ce:a5:4d:6d:ad:92:f8:bd:f4:e0:c7:4f:e4:a6:5e:e1:
         ec:6c:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:09:43 2025 by rpki-client