Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a94b9d95-1443-3a45-9181-dc7750d74c92.roa
File:                     a94b9d95-1443-3a45-9181-dc7750d74c92.roa (raw, json)
Hash identifier:          Bq46/SYrxmJX+7GURI6yeUHM+9kvRm9OMzH0Enpk1Wk=
Subject key identifier:   9A:23:33:34:39:2E:78:43:63:D3:0D:71:61:66:07:1C:7C:FB:B4:8C
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABB84653C9DB233C2B9FC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a94b9d95-1443-3a45-9181-dc7750d74c92.roa
Signing time:             Wed 16 Oct 2024 14:26:32 +0000
ROA not before:           Wed 16 Oct 2024 14:26:32 +0000
ROA not after:            Tue 14 Jan 2025 15:26:32 +0000
asID:                     81
IP address blocks:        152.34.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:b8:46:53:c9:db:23:3c:2b:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:32 2024 GMT
            Not After : Jan 14 15:26:32 2025 GMT
        Subject: CN=875e84cb-5849-4a57-bdf1-5450986fdbb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:08:a1:e3:78:7a:07:b3:ca:58:b1:37:ad:
                    4f:cc:c5:c4:6f:84:38:81:33:be:68:fd:0c:e7:40:
                    3f:7f:d1:99:49:bb:f4:55:1f:0e:62:77:e1:59:9e:
                    59:ff:d9:04:ae:47:5f:67:9e:df:37:ae:2d:5b:11:
                    42:3f:e8:79:92:a5:60:49:f0:e8:8e:35:4d:e0:90:
                    6e:a9:15:4e:b5:fb:6b:3e:14:10:c3:79:a5:55:9e:
                    1a:31:9c:13:a6:c3:f4:cf:bf:92:23:80:9e:ee:69:
                    61:e9:ea:0e:eb:ca:ca:cb:5e:73:3f:f2:5c:44:3c:
                    bb:ce:66:c4:50:cb:83:f8:c4:6e:79:2f:8b:98:73:
                    0e:70:24:65:c6:82:83:bc:b2:14:53:f3:0c:2d:df:
                    79:ff:07:0c:d7:9d:84:14:b3:86:af:ae:b4:9c:54:
                    4d:0f:a1:03:c7:0c:04:87:1c:c8:2d:d8:2e:cf:4d:
                    17:27:5c:94:39:44:ae:1a:8a:b8:60:35:c3:c7:32:
                    33:b4:cd:86:9d:31:07:61:9b:8f:f0:8e:a6:fa:7a:
                    8b:9f:a4:08:8b:8d:4d:a4:64:89:53:01:fe:19:29:
                    19:99:bd:4a:b7:3b:62:2c:15:e4:cf:36:65:64:c1:
                    38:1f:52:c8:57:e2:19:08:53:0d:08:69:08:f8:c0:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:23:33:34:39:2E:78:43:63:D3:0D:71:61:66:07:1C:7C:FB:B4:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a94b9d95-1443-3a45-9181-dc7750d74c92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.34.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:d5:b6:d3:82:bb:1b:84:54:84:46:6e:ed:de:9e:29:8f:61:
         bd:5b:0d:a6:64:a6:85:30:d7:75:57:c7:15:ef:3f:9c:8d:52:
         03:fe:58:e4:2d:8e:e7:aa:85:3c:d0:36:b1:6c:0a:75:b5:85:
         84:e1:6c:c2:a1:4d:f5:52:b4:e1:11:0c:c1:bf:4c:26:2c:16:
         32:b6:c9:8a:e8:70:7f:f3:27:36:a9:a2:88:7d:64:00:3c:60:
         bd:e1:f5:52:31:a6:b9:07:ed:c6:f5:6a:63:22:fe:6c:77:89:
         20:e3:f4:90:ed:c8:0d:8d:d4:50:36:40:55:d8:b2:9d:a8:43:
         b5:12:fa:5e:15:c8:ca:d4:e6:f9:20:7d:86:c3:c6:88:3f:a0:
         82:8e:a7:de:6b:61:65:16:68:4a:bc:41:46:28:80:7c:ec:73:
         62:8d:4c:d6:bf:f0:4b:59:5b:5c:22:6b:88:ca:66:0f:ff:66:
         8c:da:54:b7:71:e5:2b:d3:78:6f:e2:41:4d:e9:ab:52:8a:92:
         8c:8c:f2:0f:44:cd:8f:8e:d8:14:77:5c:f3:1f:39:61:42:86:
         d7:51:41:80:15:97:3c:b0:3c:bf:9f:71:83:94:89:35:6e:80:
         c5:f7:bc:d2:48:5b:77:6e:bf:3f:8d:03:08:b9:23:42:b8:c5:
         f0:e3:28:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----