Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/6c5c4cec-4595-38c0-b45a-ad27163ba881.roa
File:                     6c5c4cec-4595-38c0-b45a-ad27163ba881.roa (raw, json)
Hash identifier:          oorXDjag1r1L+OzK0GldTGQoJa99yA6z+XGkHtFWgEg=
Subject key identifier:   78:7C:A5:DC:5E:5C:6B:98:E3:2D:5C:42:65:C3:72:39:5E:95:02:93
Certificate issuer:       /CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
Certificate serial:       010D0C9F43285847BC2C25B41C77DA91387F1580
Authority key identifier: B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/6c5c4cec-4595-38c0-b45a-ad27163ba881.roa
Signing time:             Fri 01 Nov 2024 13:00:41 +0000
ROA not before:           Fri 01 Nov 2024 13:00:41 +0000
ROA not after:            Thu 30 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        192.25.8.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:2c:25:b4:1c:77:da:91:38:7f:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
        Validity
            Not Before: Nov  1 13:00:41 2024 GMT
            Not After : Jan 30 14:00:41 2025 GMT
        Subject: CN=f6046077-37a9-4a5d-9bb2-903eda7722bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:5a:cf:03:4d:ca:6c:54:22:fb:ca:eb:ff:
                    11:79:79:c4:a6:45:60:52:d6:20:5f:29:41:1b:f3:
                    13:c1:7a:3b:86:98:3b:7c:87:ec:f7:4d:46:b3:74:
                    36:75:b5:19:0c:88:80:d1:2e:13:7a:5f:a0:54:92:
                    7a:7c:32:40:da:a5:08:16:56:40:c4:af:67:b0:e6:
                    8e:27:63:0a:de:10:1f:69:11:d3:6c:d2:e0:ea:ba:
                    a7:f3:b9:9d:cf:24:05:b7:d3:f1:be:c9:68:70:da:
                    93:6b:fe:9f:dd:38:61:90:d9:d0:c9:ab:1d:65:16:
                    47:14:2b:b2:8a:ba:1b:a2:10:8a:98:8b:13:d2:d9:
                    32:fd:f0:81:1b:f0:0c:88:c0:1c:e8:46:72:00:27:
                    05:5f:ea:fb:38:8c:69:48:26:bc:e4:9a:9c:87:1d:
                    b9:f0:f2:2c:1a:fd:06:f5:a5:6e:cc:3e:99:63:30:
                    81:c4:3c:ef:7e:e9:ad:47:04:73:65:39:75:a5:4c:
                    86:bf:18:ab:9b:6f:ab:2f:5e:b3:5e:96:a3:89:a0:
                    7b:47:96:c6:a3:ae:76:ff:ef:65:87:5c:68:77:e3:
                    e7:09:9a:b8:d9:fa:9f:f5:f6:4a:19:23:91:08:83:
                    c1:5c:06:cf:ef:b0:c8:69:00:73:da:e3:a7:98:c4:
                    fe:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7C:A5:DC:5E:5C:6B:98:E3:2D:5C:42:65:C3:72:39:5E:95:02:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/6c5c4cec-4595-38c0-b45a-ad27163ba881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.crl

            X509v3 Authority Key Identifier:
                keyid:B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:63:1d:c0:6b:d7:c3:e7:04:62:e2:44:fe:4c:f6:67:91:88:
         56:a7:4e:b6:cb:0b:64:7b:c5:7c:7f:a1:cd:cd:ed:9e:11:5b:
         d9:c1:d3:04:9c:73:35:a7:aa:7a:e3:7d:6c:8c:2b:4b:b2:fe:
         44:87:c5:4f:da:8a:a2:2b:be:2d:39:3f:b1:e1:b6:1d:91:e6:
         36:2b:6d:47:2a:c0:d7:28:77:f2:d2:c7:9e:74:d7:7a:c1:e4:
         83:5f:7b:fd:87:22:3d:6e:12:e5:da:18:85:d8:cb:28:67:56:
         e9:ee:c5:86:8d:0f:4d:da:1b:d4:5f:33:5b:56:02:b7:42:2f:
         4e:6f:65:7f:9c:17:b3:64:ff:ad:73:8e:71:1a:61:9d:45:8d:
         3a:13:67:4c:20:9c:68:d0:f9:df:b8:bb:4f:cb:da:f9:c2:99:
         ba:4c:b1:27:84:41:53:55:4f:a3:32:b8:b6:ed:75:40:dd:67:
         08:06:fd:ec:96:ed:af:0a:06:a3:e0:87:75:51:f8:ec:0e:5c:
         1b:25:0e:45:11:45:5a:32:f9:9b:5d:c2:e0:2b:d8:9a:d4:86:
         1c:94:21:05:b4:af:48:0b:23:bd:aa:3a:78:e8:5b:f9:cb:a2:
         56:1f:b0:ba:42:20:69:c2:40:a1:22:c9:e4:5b:e1:76:3c:5a:
         40:39:8b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:48:45 2025 by rpki-client