Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a2ffe670-ffcc-3ddd-8d0d-3e062bcb6810.roa
File:                     a2ffe670-ffcc-3ddd-8d0d-3e062bcb6810.roa (raw, json)
Hash identifier:          LXUZv7BLsdmRKDxXqh+Eu7FAf9CdwTE1OVuRyD76pfE=
Subject key identifier:   71:A4:EB:97:86:24:DA:1E:1C:23:02:5B:38:9C:53:C3:AE:39:CB:F7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285847F6D87331266708F515B7B800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a2ffe670-ffcc-3ddd-8d0d-3e062bcb6810.roa
Signing time:             Fri 22 Nov 2024 13:24:55 +0000
ROA not before:           Fri 22 Nov 2024 13:24:55 +0000
ROA not after:            Thu 20 Feb 2025 13:24:55 +0000
asID:                     400859
IP address blocks:        104.164.13.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f6:d8:73:31:26:67:08:f5:15:b7:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 22 13:24:55 2024 GMT
            Not After : Feb 20 13:24:55 2025 GMT
        Subject: CN=d9d3b8c3-eb9e-4d04-869b-9122ddac8f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d7:0e:44:ce:df:6c:04:dd:7f:4c:6e:0d:40:
                    5a:48:00:9a:5c:d5:0a:24:5c:f4:f4:b9:1a:60:ae:
                    17:6c:b8:dc:8d:51:fe:77:af:a9:df:49:6a:2f:48:
                    6c:90:93:a0:10:0e:e3:46:ba:f6:3b:6f:53:7e:18:
                    ea:8d:ec:cd:29:d8:d7:b6:fa:6b:9e:79:8f:e9:08:
                    ab:46:40:c6:6e:9c:b2:c1:c4:27:1c:e4:46:b3:ce:
                    4f:0e:74:dd:05:6a:84:0f:cf:81:f8:91:dc:ea:fc:
                    bf:ad:51:e3:16:88:59:cb:1b:c6:0e:8b:ef:80:6e:
                    c6:bb:54:ab:d5:25:90:75:91:06:5f:94:d2:94:1e:
                    21:c0:34:71:c8:24:be:b3:c3:e2:ab:0f:59:5c:0c:
                    df:b5:f2:93:7a:8f:b7:55:9d:0b:a2:36:54:ab:be:
                    8f:3e:63:0c:15:1b:de:0d:83:ca:95:bf:ee:5e:ef:
                    53:d5:79:e1:f2:c2:ca:86:be:24:71:fe:6c:a1:29:
                    87:29:1d:e2:bb:75:df:ea:6e:1e:fc:d5:97:d5:74:
                    18:8d:7e:76:b9:35:62:5b:90:ba:1f:88:b3:fa:75:
                    6e:6e:3e:46:a4:2b:76:68:27:28:ba:1b:ee:8b:ba:
                    c2:ab:56:98:a9:6d:48:ca:2b:5f:33:b6:85:41:f6:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A4:EB:97:86:24:DA:1E:1C:23:02:5B:38:9C:53:C3:AE:39:CB:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a2ffe670-ffcc-3ddd-8d0d-3e062bcb6810.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:89:02:fe:3c:34:b7:43:82:47:65:7e:1e:ea:a7:ff:ab:81:
         08:16:92:ce:1f:99:68:ad:71:f8:24:18:97:7d:40:09:2d:2a:
         73:b9:6d:c0:29:1b:a5:22:16:9a:64:66:45:a0:bc:8a:9c:ac:
         4f:cf:88:66:80:92:d9:de:69:e6:10:07:44:44:87:70:dc:08:
         e3:a2:c2:06:4a:7a:6b:4a:31:ba:de:f5:71:fd:d6:5a:1a:93:
         96:4b:12:14:9b:e0:65:d6:dd:69:42:81:5e:a6:63:96:41:75:
         a7:f9:91:d3:14:cc:eb:89:91:69:04:4c:b9:06:46:a5:da:16:
         d9:5f:0b:40:ba:d0:22:e2:72:bb:21:e5:af:be:b8:50:33:18:
         d8:99:2e:a6:5d:2d:d9:d1:d4:b8:0c:3f:5d:19:f0:22:f7:21:
         16:a1:ca:d7:76:81:e7:23:5c:8b:4f:fd:41:35:ed:33:46:d2:
         89:59:e6:41:3e:76:d3:b6:f2:ca:7f:2e:9b:a6:62:b0:d1:0e:
         d8:44:39:8a:9b:2d:9c:da:a1:0c:8f:9b:f1:15:cb:97:f0:3d:
         ae:39:3c:50:74:1a:83:e1:6c:95:08:59:f9:b0:f0:fc:5d:ce:
         d4:d9:4e:00:ac:93:45:bc:29:41:bb:86:dc:91:ca:02:42:e6:
         6e:8c:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:27 2025 by rpki-client