Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/052589c4-b554-3f61-a292-acf41e7c4c61.roa
File:                     052589c4-b554-3f61-a292-acf41e7c4c61.roa (raw, json)
Hash identifier:          MHR5+WK/1Tyy2/fvAVYj27weKwnSdjBAhJZGjYQYKXc=
Subject key identifier:   7E:17:F6:19:88:1F:3F:BC:88:5A:F5:EC:0D:8C:E6:52:59:86:36:A8
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858464349A8FBE1A898ACA2A65280
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/052589c4-b554-3f61-a292-acf41e7c4c61.roa
Signing time:             Wed 19 Jun 2024 13:00:34 +0000
ROA not before:           Wed 19 Jun 2024 13:00:34 +0000
ROA not after:            Tue 17 Sep 2024 13:00:34 +0000
asID:                     400785
IP address blocks:        140.228.26.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:43:49:a8:fb:e1:a8:98:ac:a2:a6:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun 19 13:00:34 2024 GMT
            Not After : Sep 17 13:00:34 2024 GMT
        Subject: CN=1514442c-cac3-4eb8-bd51-221dc25a3e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:37:3f:38:85:0d:89:de:79:0f:50:d7:41:af:
                    62:d9:5b:d0:1a:4d:95:8b:98:da:11:d4:ac:cc:15:
                    77:05:40:c1:a0:3e:ae:37:b1:ef:40:51:99:36:39:
                    92:d9:f7:e4:aa:1f:e9:bd:03:0b:d8:78:97:8b:e4:
                    f2:8d:a1:e9:6e:77:a5:e4:69:40:d0:65:b6:4e:4b:
                    60:22:8d:e1:da:89:2e:7d:b7:3c:d7:0e:a6:c5:1f:
                    d5:24:28:75:22:ba:78:8c:77:b8:00:f7:31:72:10:
                    8e:0a:95:c0:5a:69:2b:83:5d:21:f0:e5:21:a4:cc:
                    c1:3c:d2:bb:29:8d:31:76:05:dc:7b:91:7c:e6:88:
                    63:3b:e7:ac:31:b8:51:1e:da:96:37:1b:ec:02:64:
                    e9:23:41:ba:8a:0d:9d:40:f5:d5:09:65:b9:7e:23:
                    cb:0d:eb:8f:1a:19:f8:79:0b:9c:5e:19:1d:43:7c:
                    d9:b0:01:b4:dc:56:8a:74:03:73:6a:36:a2:d3:a9:
                    90:8d:5c:b5:33:aa:62:f7:4f:ea:ba:db:10:08:13:
                    f9:db:7a:1c:51:f8:93:e1:50:f2:49:78:c3:71:10:
                    17:33:f0:53:10:78:e2:38:36:5c:13:a2:31:04:40:
                    db:83:9c:9d:c1:67:9d:0b:48:b0:47:74:ca:23:6b:
                    49:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:17:F6:19:88:1F:3F:BC:88:5A:F5:EC:0D:8C:E6:52:59:86:36:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/052589c4-b554-3f61-a292-acf41e7c4c61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:39:12:c4:db:76:1a:43:bd:47:37:c0:f8:58:4d:4b:64:c4:
         7f:2c:92:12:7d:39:d1:57:6f:e0:53:cb:4c:b7:f6:b4:d1:c4:
         96:15:92:9b:62:3b:c3:23:a3:65:5f:a1:b4:bc:b4:3e:80:dd:
         30:ce:20:78:0d:ca:42:d0:c8:38:89:ac:62:39:4b:85:e4:36:
         d2:20:53:b5:fe:eb:3c:2c:dc:87:d1:df:68:ae:03:f2:d6:e4:
         1a:d6:86:96:87:8d:38:2d:11:8a:3a:4a:78:94:84:5f:e3:87:
         05:eb:59:38:df:1a:70:e3:77:c2:00:a2:f4:98:78:7b:b1:da:
         8a:ab:98:41:91:9e:7a:25:f2:b8:69:76:9e:f8:5f:44:5c:74:
         27:56:93:ee:1b:41:38:3b:51:3b:f2:fd:2e:f3:d4:2e:d9:07:
         9f:18:17:ac:8f:cd:e1:1c:98:22:70:ab:e2:a0:e3:3a:8f:2f:
         97:37:19:1c:f5:44:30:f0:1a:6b:72:79:29:70:ba:30:a0:78:
         84:ca:1f:1f:26:bf:19:75:8d:02:a8:aa:09:03:45:90:f3:bc:
         dd:73:00:be:92:e4:76:0b:14:a1:38:03:3a:45:95:a8:8a:c5:
         a9:47:a2:5b:23:e1:f4:0a:f1:37:80:8d:5a:d6:d8:9f:68:88:
         0d:21:1b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:44:32 2025 by rpki-client