Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/f72632f0-8b8b-3846-a78a-7e8943039464.roa
File:                     f72632f0-8b8b-3846-a78a-7e8943039464.roa (raw, json)
Hash identifier:          0+VYQ5BHqwjlT1pvVmVnO1dXf0nAj5KFFc81BwIQZ0g=
Subject key identifier:   EF:D7:8A:03:F1:94:17:8B:E6:20:BD:6B:4C:79:78:DB:88:E8:12:D3
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F432858421D08420CCDBC09869C25DD00
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/f72632f0-8b8b-3846-a78a-7e8943039464.roa
Signing time:             Mon 05 Jun 2023 01:00:17 +0000
ROA not before:           Mon 05 Jun 2023 01:00:17 +0000
ROA not after:            Sun 03 Sep 2023 01:00:17 +0000
asID:                     7862
IP address blocks:        146.23.4.0/22 maxlen: 22
                          146.23.12.0/22 maxlen: 22
                          146.23.24.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:1d:08:42:0c:cd:bc:09:86:9c:25:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Jun  5 01:00:17 2023 GMT
            Not After : Sep  3 01:00:17 2023 GMT
        Subject: CN=479f2e7f-6bb1-48a7-bf4a-e048fe285e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d2:0c:a2:f7:8e:f6:82:44:32:97:89:03:00:
                    77:64:e0:7d:28:2c:52:e3:f1:9f:2f:b1:4b:66:12:
                    4b:da:46:cb:26:20:1f:a8:f4:81:cd:fc:43:7d:5b:
                    51:1f:ff:67:0c:5d:a8:bc:79:55:32:3c:da:aa:be:
                    9b:e5:db:e0:44:25:62:fa:28:81:c6:2d:3e:65:4d:
                    b6:6a:f6:a0:3a:48:0a:1e:66:07:5c:ba:0f:60:da:
                    da:ff:b3:b9:00:4c:ed:1e:88:39:4b:d0:74:04:a2:
                    f4:40:62:db:1e:86:11:a9:70:5e:b7:d5:e1:b2:52:
                    33:72:f5:9d:37:8d:4a:d5:a2:5c:0b:a4:db:db:fd:
                    c3:83:4e:e1:75:a9:ac:90:27:4c:12:18:11:15:29:
                    6a:fc:f0:08:9e:bf:be:f5:2c:83:59:0b:05:46:42:
                    6d:ed:89:50:5d:6c:33:92:7b:d3:01:db:ef:78:f2:
                    ab:54:89:cf:db:84:b4:84:c5:80:f9:b3:d2:5e:c9:
                    f9:d3:16:f1:e2:d3:ae:3a:b6:97:9f:fa:ad:02:d5:
                    ee:f8:d0:a4:b9:18:5d:5e:d3:23:1e:27:f8:ff:99:
                    d0:7e:2b:68:23:b2:dc:f3:66:ff:c0:de:18:6f:83:
                    88:e0:9e:67:34:60:21:64:c5:32:5b:4b:71:8e:9e:
                    87:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D7:8A:03:F1:94:17:8B:E6:20:BD:6B:4C:79:78:DB:88:E8:12:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/f72632f0-8b8b-3846-a78a-7e8943039464.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.4.0/22
                  146.23.12.0/22
                  146.23.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a6:4e:01:de:cb:90:62:fd:b4:c9:0b:ec:6b:cb:27:cc:81:
         71:13:62:3d:ed:db:cf:4e:63:7e:3d:58:fc:b8:9b:7c:00:b3:
         e2:26:91:7c:26:6e:9c:c2:37:aa:7b:e0:9f:16:e0:ca:bf:c0:
         b3:30:40:48:a4:3f:fc:6e:ae:19:fb:6f:fa:dc:1b:4c:79:f0:
         75:2b:d0:4e:51:b9:aa:14:bd:79:7c:6a:35:14:89:6c:87:01:
         9b:ed:d4:2a:20:41:1a:f6:85:4c:ae:c1:4e:a3:e2:86:51:31:
         8e:87:ef:8a:f0:1b:5a:55:26:21:dd:90:fc:c4:b9:9f:41:8c:
         c0:12:e4:57:b0:c8:4a:1f:f9:b3:ae:87:70:17:3c:22:64:55:
         5c:2a:cf:b1:a7:92:1c:a2:b4:c5:5b:cb:89:6e:41:85:74:d2:
         2f:3f:53:d4:6b:19:43:c0:ae:02:c8:20:18:31:11:02:42:bc:
         ec:a4:9a:49:78:e5:85:1c:29:e3:03:f9:df:ff:fa:e1:c8:21:
         43:c3:7a:28:0d:da:f3:f2:db:ef:a5:da:5e:a1:a0:c7:9c:cf:
         a8:91:ef:09:0c:9a:db:d4:7c:60:f2:b4:c1:a4:fb:ed:89:96:
         12:04:33:66:e2:eb:63:a4:c7:45:40:0f:35:a9:4c:69:0f:5f:
         1b:ee:82:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:18 2025 by rpki-client