Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d6fed3a3-3cbf-36ee-a0a2-05830677506a.roa
File:                     d6fed3a3-3cbf-36ee-a0a2-05830677506a.roa (raw, json)
Hash identifier:          sDHcZOeicAZoi+kk1ITU0u/twpcAq92VSIs4PDP0ftk=
Subject key identifier:   8C:36:28:46:BE:7D:C3:8A:2A:9B:73:29:BB:02:71:72:0F:60:FE:24
Certificate issuer:       /CN=19039935-462a-4b14-8e96-78798283eeff
Certificate serial:       010D0C9F43285846F30A63220487A1A301B28A00
Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d6fed3a3-3cbf-36ee-a0a2-05830677506a.roa
Signing time:             Wed 21 Aug 2024 11:55:22 +0000
ROA not before:           Wed 21 Aug 2024 11:55:22 +0000
ROA not after:            Tue 19 Nov 2024 12:55:22 +0000
asID:                     53356
IP address blocks:        167.253.36.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f3:0a:63:22:04:87:a1:a3:01:b2:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19039935-462a-4b14-8e96-78798283eeff
        Validity
            Not Before: Aug 21 11:55:22 2024 GMT
            Not After : Nov 19 12:55:22 2024 GMT
        Subject: CN=9ff3ea0b-e5f0-4703-b136-9cdcd08d03f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9b:4a:b3:1b:bd:09:3d:55:47:f1:5d:2a:18:
                    62:8d:5c:f0:2f:3d:52:0a:2a:ff:f2:90:0e:ae:98:
                    34:76:fc:39:e0:fb:4b:92:ff:0b:a5:b2:37:63:18:
                    08:50:16:29:df:f9:26:4b:7a:5e:7f:6f:c2:50:96:
                    95:0c:f9:dd:3f:cf:6d:6a:59:31:fa:bb:0b:60:ec:
                    62:31:11:84:74:1c:d6:b8:ef:a8:f3:02:83:46:4e:
                    c7:58:1c:09:b3:d3:a2:4e:ae:ef:f8:60:df:75:06:
                    99:a8:b6:89:d3:4b:a8:85:f9:a4:d0:7e:87:e7:e6:
                    6e:99:05:0b:b4:fa:f2:b1:67:99:a9:82:6b:7e:04:
                    c1:da:a3:9f:4f:7e:6f:da:68:31:15:8b:db:22:de:
                    94:ee:28:3d:b7:16:34:f6:db:8c:fd:01:c9:f4:d6:
                    9a:9a:81:20:0b:7a:c3:69:cb:3d:8e:c1:0b:2c:f3:
                    a8:1e:63:6c:bd:e2:63:38:78:20:90:c9:59:b9:20:
                    03:28:2d:0f:d2:18:78:24:73:19:20:43:7b:1f:f0:
                    77:13:91:15:95:78:ea:33:07:dc:80:40:eb:ec:4e:
                    df:e9:b9:0e:4a:04:e2:74:71:03:3a:8b:c5:3d:bd:
                    d3:4b:a8:58:8e:cd:5a:d9:d3:ff:de:33:82:87:46:
                    3b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:36:28:46:BE:7D:C3:8A:2A:9B:73:29:BB:02:71:72:0F:60:FE:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/d6fed3a3-3cbf-36ee-a0a2-05830677506a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl

            X509v3 Authority Key Identifier:
                keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:7b:7f:81:20:34:d3:9f:d7:49:6b:14:20:c9:fb:ca:80:54:
         c2:b2:c8:8d:0f:3b:f9:d1:99:d2:20:a1:1e:dd:f9:96:c0:47:
         a8:c0:d4:31:4a:c3:2d:1f:eb:68:7a:35:cc:e0:77:07:f8:2b:
         57:af:dd:85:e4:c3:0f:b5:93:d5:15:c5:da:c2:c0:8f:f4:ae:
         24:6b:65:cf:b4:1e:31:93:47:a4:a0:7e:6e:ac:c4:99:db:e5:
         b1:03:a8:85:d4:0a:c7:24:a3:4f:5a:5c:7c:df:c6:d8:9e:6c:
         d0:16:26:85:fc:91:8a:cb:ed:7f:bd:5f:21:25:13:32:fb:6b:
         e3:18:ad:20:b4:b1:3a:98:3d:11:66:f8:23:c1:48:48:cd:e3:
         6a:5c:f3:49:6d:e0:d1:4a:48:4f:a1:22:83:93:eb:47:1d:9a:
         c4:7c:6c:19:8b:cd:0e:3a:f4:88:3c:ee:8b:0e:40:6a:1f:aa:
         99:da:6a:d6:9f:f5:ce:42:53:30:99:a5:32:68:d3:86:ae:8e:
         80:75:f0:08:2c:eb:9d:ff:15:b4:fd:41:93:80:67:6a:ff:84:
         fd:ec:1e:79:66:5c:e3:66:a5:6f:0a:66:92:6e:56:d3:cf:5c:
         bd:85:73:0e:7c:8c:c0:19:f3:71:37:60:fd:74:78:75:9b:8d:
         66:0a:2f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:48 2025 by rpki-client