Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fd2823aa-56e8-3d46-b917-a2edbe451c0c.roa
File:                     fd2823aa-56e8-3d46-b917-a2edbe451c0c.roa (raw, json)
Hash identifier:          LACD46g5OEsq5kJFUCtDWpx4wlnKas8rP9oxoTPGiVk=
Subject key identifier:   E6:EF:56:4C:37:1F:09:DE:7F:1B:F1:C0:B3:E5:94:8D:D5:AD:50:6F
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285847CFF4822E2EED5BCD8A4A5E80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fd2823aa-56e8-3d46-b917-a2edbe451c0c.roa
Signing time:             Fri 08 Nov 2024 15:04:56 +0000
ROA not before:           Fri 08 Nov 2024 15:04:56 +0000
ROA not after:            Thu 06 Feb 2025 15:04:56 +0000
asID:                     81
IP address blocks:        192.154.55.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:f4:82:2e:2e:ed:5b:cd:8a:4a:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Nov  8 15:04:56 2024 GMT
            Not After : Feb  6 15:04:56 2025 GMT
        Subject: CN=85818e91-6da2-4457-9229-a6de7ffc4868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:7e:c3:22:c8:65:85:6b:50:5e:da:8c:ec:
                    1f:27:be:3f:2e:a2:5a:69:42:a7:cf:c6:56:35:2a:
                    c1:99:3f:e8:bd:a8:f6:5e:19:1d:03:e4:d7:47:cd:
                    46:69:dd:72:bb:7b:4e:82:e8:57:3c:f0:c1:c1:40:
                    7c:71:83:9d:06:cc:b4:47:92:f5:22:c8:5f:3c:b0:
                    09:06:ac:29:58:94:13:3f:86:f1:1e:1a:4e:d4:63:
                    0c:35:31:af:0b:05:b0:ce:d4:8a:fa:fe:49:71:d1:
                    be:f5:27:fd:db:0c:82:83:1f:a7:9a:ea:ea:07:e9:
                    76:e9:82:b7:a5:5a:ff:06:be:2c:fb:4e:18:7e:15:
                    a7:44:c8:ed:d6:69:b1:25:b4:cd:ec:54:90:bc:5a:
                    62:45:d4:e5:92:2b:0e:60:55:a6:d6:6c:a9:29:d3:
                    08:35:99:fb:d1:a2:0f:6f:9a:de:2c:31:b6:7c:d8:
                    d0:91:f9:d4:97:2a:2a:3e:81:61:31:69:c1:c9:04:
                    a9:0c:70:ad:cd:85:87:28:6a:6c:2a:4a:00:7a:13:
                    3e:15:76:4f:4c:f5:b0:27:cd:2a:99:a5:4f:49:26:
                    e1:ec:06:8d:bd:7d:2e:80:3d:f5:d1:6b:bb:27:bf:
                    53:fc:0d:9a:3f:e9:6b:22:8c:93:b9:bd:25:d1:02:
                    a6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EF:56:4C:37:1F:09:DE:7F:1B:F1:C0:B3:E5:94:8D:D5:AD:50:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fd2823aa-56e8-3d46-b917-a2edbe451c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:ce:fb:ad:0d:d5:14:0e:8d:29:e3:76:b0:6c:66:57:7d:9b:
         f6:dc:fc:50:c8:ae:3f:02:44:ba:43:5a:dc:5d:27:c9:49:4f:
         64:b2:bc:ea:e4:f4:31:4b:3e:3a:1e:4c:b0:db:e8:b9:e3:63:
         70:b9:e4:ae:f3:ba:fa:17:f2:f4:37:29:6a:83:0c:a4:31:16:
         99:1e:91:8b:26:0b:94:43:98:29:db:cd:cd:53:73:ef:24:b4:
         7e:00:73:b0:c9:9f:a2:c7:5d:2c:86:06:8e:29:f3:46:f6:db:
         ef:0b:6a:87:3c:1b:e8:d8:ce:ee:b0:d4:06:00:80:11:e1:45:
         b0:f8:7e:50:9e:b3:f7:58:68:13:a3:90:a7:24:bb:b3:f8:07:
         fd:c7:b2:16:95:dd:30:65:03:47:fc:ba:42:2f:9d:74:ab:13:
         f6:1a:b0:18:26:cd:46:91:26:f1:8b:7b:1c:31:53:cc:b6:89:
         db:8c:e4:31:72:4b:26:db:7e:28:07:ab:fe:49:b4:74:6e:b6:
         7b:4c:63:28:b4:ae:39:b4:5a:5a:b7:6a:b6:d5:31:b1:83:59:
         7c:19:95:62:f6:07:6b:58:42:43:02:85:58:86:62:26:cf:77:
         2d:be:3c:f1:c2:cc:b3:69:33:c2:10:5f:3f:bb:2c:e7:76:69:
         3c:01:f7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:06 2025 by rpki-client