Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/8e3ea1e3-8064-3674-bde8-f62df0f454d7.roa
File:                     8e3ea1e3-8064-3674-bde8-f62df0f454d7.roa (raw, json)
Hash identifier:          /GUR6TaeEqnDeDhf7GpRV25AzAdcGjDTiigKuXLPlNo=
Subject key identifier:   6E:D7:A7:FA:A2:B1:95:17:C9:0F:6C:CC:27:6C:51:9D:1A:5C:C6:F5
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F43285846DFC6F9C6A5FBA5CF7EE09652
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/8e3ea1e3-8064-3674-bde8-f62df0f454d7.roa
Signing time:             Wed 14 Aug 2024 14:19:11 +0000
ROA not before:           Wed 14 Aug 2024 14:19:11 +0000
ROA not after:            Tue 12 Nov 2024 15:19:11 +0000
asID:                     46474
IP address blocks:        74.205.200.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:df:c6:f9:c6:a5:fb:a5:cf:7e:e0:96:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: Aug 14 14:19:11 2024 GMT
            Not After : Nov 12 15:19:11 2024 GMT
        Subject: CN=926c077c-e7b0-452c-b7f6-91e3796a1b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3c:f8:7b:7b:2f:20:dc:35:8a:93:69:ce:b2:
                    ac:c4:b8:14:83:63:48:b1:c2:75:99:49:07:4c:31:
                    a3:55:da:29:b2:8b:aa:e8:a7:0c:40:fd:ba:98:0c:
                    b3:4c:94:68:c2:3a:e3:42:1d:20:08:42:fe:eb:64:
                    03:c7:11:60:97:19:26:5b:0b:83:b7:fc:e6:95:dd:
                    5a:3f:bf:a1:62:fa:c3:c9:e9:08:d5:b9:b6:7c:ed:
                    ea:ee:b7:28:e8:da:11:10:29:18:4b:64:f7:d2:5e:
                    8d:be:c2:28:71:0f:03:53:aa:23:ed:49:90:60:3d:
                    a0:cc:9f:11:38:db:3e:39:81:38:7f:1b:c5:03:50:
                    f9:c0:49:b8:6d:b9:ff:53:d3:ec:8d:11:8e:c9:05:
                    cc:de:08:f9:3a:f4:69:84:e6:eb:a9:da:0b:ad:43:
                    8f:ea:9b:7b:49:68:19:57:01:d4:24:f0:db:fb:e1:
                    88:77:62:a1:fd:14:4b:4c:85:40:a3:c9:f4:27:8a:
                    56:27:d7:47:e0:aa:81:2b:9e:d3:d7:df:be:3f:ce:
                    1e:ca:9a:15:a8:83:4c:98:d6:0f:24:55:51:6f:ec:
                    2d:ec:89:bc:12:27:db:5b:ec:87:73:cf:00:45:0e:
                    2e:85:cc:2c:68:ec:50:31:a5:a5:37:50:17:60:5b:
                    71:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D7:A7:FA:A2:B1:95:17:C9:0F:6C:CC:27:6C:51:9D:1A:5C:C6:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/8e3ea1e3-8064-3674-bde8-f62df0f454d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.205.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:06:cc:ea:b4:dc:64:d9:18:6d:89:e3:1c:b1:5e:31:b6:e2:
         61:15:7e:54:01:fc:0a:a3:27:20:c7:b4:21:82:80:c9:be:0c:
         87:bb:da:7b:6f:a8:66:c2:77:26:97:15:c5:70:d8:e9:d6:13:
         aa:bb:d1:26:43:cc:d6:49:b4:0a:1e:19:51:9a:0c:d9:85:8b:
         a9:ed:a8:37:59:dc:db:8b:1f:f0:bd:95:53:83:b3:c3:43:77:
         db:a7:d9:f7:70:8c:f5:28:5b:7a:e9:a2:9a:d3:45:d6:b2:78:
         c2:d8:30:35:56:cc:05:d6:5d:7f:ea:18:c4:77:f3:7f:01:73:
         0a:72:30:27:13:f7:24:cd:c4:7a:5c:bb:8c:71:d4:0e:f6:a7:
         13:91:7a:4e:ee:3b:0c:cf:58:ea:14:b9:c3:01:78:12:0b:cc:
         ef:1f:2b:c7:2b:54:a7:f0:8d:59:86:9f:57:93:68:99:1e:7b:
         16:f3:b2:cb:7f:37:64:a7:15:8f:99:e8:1b:13:d9:74:a0:31:
         94:08:7c:72:fb:d4:b9:e2:3b:4a:84:60:19:b6:86:ec:8a:48:
         e9:37:cc:89:28:a9:c2:83:48:a2:02:ae:7f:8e:8d:63:06:1e:
         58:02:b6:18:3f:d0:28:70:fb:67:2d:d9:b6:55:47:b3:77:f9:
         88:be:22:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:50 2025 by rpki-client