Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/5565ba6e-527e-3861-af49-7b2bf258bede.roa
File:                     5565ba6e-527e-3861-af49-7b2bf258bede.roa (raw, json)
Hash identifier:          nef2UksvbzEZ6LEVSjw9+ggh+iNdXMgHub4DF1I47do=
Subject key identifier:   BC:03:91:C8:DF:11:3F:8A:F6:07:16:92:BE:E7:0F:DB:46:01:38:A0
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584824FA7FC8027EAFAB5B1AC080
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/5565ba6e-527e-3861-af49-7b2bf258bede.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     19901
IP address blocks:        146.135.64.0/19 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:7f:c8:02:7e:af:ab:5b:1a:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=97b8a5e6-9fd4-40af-876e-b95b971862d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:3b:cc:17:16:f9:5d:1c:72:47:dc:bb:25:
                    ec:1f:a5:7c:67:1f:bb:76:2e:c4:cd:c2:59:fe:52:
                    d3:86:17:e8:0b:f4:00:78:3e:e4:f2:eb:0c:66:20:
                    df:01:d5:64:45:01:a2:47:9c:5d:82:fb:7d:2f:17:
                    79:c4:e2:71:15:1c:d6:2c:19:8e:ee:a4:d4:87:e3:
                    cb:4c:a5:0c:c6:12:b4:34:c1:7b:7a:c9:75:c9:0d:
                    85:7c:ac:9f:56:21:05:7e:4a:31:15:02:8f:39:ea:
                    56:60:25:50:db:12:5b:5d:77:ad:9f:ff:21:dd:c8:
                    22:72:45:16:57:2e:8b:06:7d:cb:33:44:69:4e:61:
                    c1:b8:c0:26:02:56:3e:63:87:42:28:b9:e5:a0:88:
                    87:92:59:57:1c:e1:f0:f9:2e:61:af:d5:60:3f:90:
                    a2:d9:b8:d3:4d:ab:c0:24:20:0c:9d:be:a2:46:83:
                    89:aa:b4:ce:89:cb:3f:e8:1d:7b:96:0d:ea:ad:3a:
                    2c:85:31:d2:52:e7:0f:5d:d0:1e:0b:77:55:86:b4:
                    46:c7:ad:7f:f9:fe:a0:31:05:fd:c9:4b:7a:7b:79:
                    20:d6:5d:25:1a:55:94:75:98:e9:80:e6:e2:7c:1a:
                    c2:77:c9:bb:fd:81:94:61:90:0d:3a:e7:9e:17:98:
                    3d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:03:91:C8:DF:11:3F:8A:F6:07:16:92:BE:E7:0F:DB:46:01:38:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/5565ba6e-527e-3861-af49-7b2bf258bede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.135.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e7:56:08:68:0c:1c:60:f0:f1:2f:95:21:d4:6f:f6:0e:ae:
         0c:a3:e9:7b:98:7b:82:b0:75:fb:1c:b7:ca:d6:25:67:c3:b5:
         4a:ea:6b:ee:35:8b:40:7e:00:28:f6:35:e0:5c:0d:93:48:4a:
         59:9a:bf:c9:f3:73:a8:af:ab:3f:10:69:0c:a8:b3:13:bc:61:
         e9:ad:26:e5:68:78:4a:88:04:ae:e5:c3:07:8d:fb:ed:a5:de:
         2d:01:ee:6b:5a:6e:6e:15:ad:a4:27:85:f3:b9:a5:d2:09:c2:
         d8:08:32:2b:ea:1e:dd:af:e3:be:e2:cc:72:9f:28:52:8c:c6:
         9a:03:7e:21:a8:15:38:65:86:6d:d9:6f:15:9d:38:97:0f:bc:
         66:bb:1f:fa:e7:7d:81:a4:c8:e7:41:65:3b:fd:fc:5d:c0:19:
         29:24:54:5c:df:c6:78:52:2a:03:74:b8:a0:e3:9e:06:4b:14:
         1d:3a:8a:3d:26:d9:7a:2b:5d:5c:d3:e4:b8:85:1b:71:91:4b:
         31:ef:a5:6f:1e:78:47:09:23:8a:48:92:eb:35:65:12:34:7d:
         49:ce:65:dd:5a:0e:5a:a5:dd:d0:89:2a:a4:7c:34:0f:e0:ed:
         b9:ec:74:12:d2:77:d4:76:9d:ae:6f:81:0b:4d:79:c1:49:61:
         d4:6b:20:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:47 2025 by rpki-client