Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/57a6d9be-c2cf-3154-9462-f8726ac7a386.roa
File:                     57a6d9be-c2cf-3154-9462-f8726ac7a386.roa (raw, json)
Hash identifier:          VEKjsW6nH5XkE9n5tJW/aMR6P7OvIGMW2AJvq9WFjXE=
Subject key identifier:   F5:A8:34:08:07:C1:35:0C:6C:7A:4B:A9:9F:8C:65:B3:73:36:C3:12
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584269CE10322C3D52DF571234C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/57a6d9be-c2cf-3154-9462-f8726ac7a386.roa
Signing time:             Sun 02 Jul 2023 13:00:18 +0000
ROA not before:           Sun 02 Jul 2023 13:00:18 +0000
ROA not after:            Sat 30 Sep 2023 13:00:18 +0000
asID:                     6939
IP address blocks:        139.177.158.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:69:ce:10:32:2c:3d:52:df:57:12:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul  2 13:00:18 2023 GMT
            Not After : Sep 30 13:00:18 2023 GMT
        Subject: CN=ae3e03e7-1ab4-4c02-a226-8632b11bb3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:32:1f:f2:76:13:ce:0b:e1:6d:9d:ad:55:
                    8c:50:ec:04:c1:1e:d2:f5:b0:8c:a4:34:9e:ba:1e:
                    79:5c:70:43:46:ae:a3:46:0c:1a:34:25:49:c9:d4:
                    0e:01:ec:3a:4e:fd:e7:be:6f:35:17:04:f4:8d:df:
                    4d:cb:1d:a2:0b:05:48:53:e6:03:5b:37:71:24:de:
                    33:5e:b9:86:68:18:f3:ae:00:2e:e9:b9:c9:6a:02:
                    63:dd:d0:8c:10:07:2b:56:42:80:33:66:7c:a4:15:
                    fd:2b:97:ba:92:b1:62:27:fe:95:a3:26:04:f9:f3:
                    93:e2:2c:0c:5d:87:54:f0:27:b9:3a:d7:f4:d5:c8:
                    92:b3:52:13:60:1a:38:2c:1c:af:40:51:38:e6:4c:
                    88:d0:bc:db:9a:27:af:d6:cf:97:4b:b2:93:d2:09:
                    67:81:ce:fa:2e:47:b3:82:b7:6f:7f:ea:9b:39:16:
                    54:0b:6c:a7:f0:0c:a2:cc:4b:94:3a:cc:23:37:c6:
                    16:28:55:45:e6:db:35:cd:88:cc:16:99:03:e2:1e:
                    f0:18:9a:4d:83:b0:d3:a5:27:e4:56:15:b1:90:04:
                    36:0c:27:78:47:48:86:ba:05:6f:e7:34:03:b0:a5:
                    3e:fc:73:24:39:f5:61:71:e9:5f:55:c1:3f:07:e3:
                    66:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A8:34:08:07:C1:35:0C:6C:7A:4B:A9:9F:8C:65:B3:73:36:C3:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/57a6d9be-c2cf-3154-9462-f8726ac7a386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:cc:4e:ae:82:1c:a0:86:c4:5d:42:89:10:a9:2c:4d:33:90:
         ff:cb:5c:bd:d6:7e:e3:9d:1a:ef:ab:06:14:cf:82:3b:b5:44:
         e6:b5:86:5b:86:98:32:06:32:44:4a:4f:ed:f0:ac:85:61:9e:
         5e:79:27:65:e5:fd:6a:56:e9:c1:4f:91:73:f4:4a:4c:a7:67:
         71:7a:32:5e:5c:b5:93:cf:bf:88:60:80:1e:75:9b:75:3b:dd:
         5d:a8:8c:4b:7e:3c:7c:7e:ff:94:98:c3:8f:ca:a6:e5:4f:73:
         ca:32:cd:7e:c9:31:b1:9b:82:80:60:82:35:95:ba:e7:f9:e6:
         ca:9b:08:8b:07:2f:fe:28:0e:e7:84:e9:78:51:0a:84:27:31:
         10:78:3d:1a:f0:7e:5a:ae:ff:76:23:82:18:12:3c:30:1e:ba:
         43:b0:e1:13:99:c5:74:f2:d4:35:5a:a1:30:2f:9d:7d:09:9e:
         b5:03:6a:e8:0a:b8:08:58:07:2f:8c:fa:3e:6c:37:23:25:2e:
         ed:ff:e5:9f:12:15:ae:6b:32:67:44:04:da:d8:3c:22:d5:db:
         a8:c9:b5:d3:41:6a:03:8b:f0:56:11:65:e3:d3:99:57:1c:b2:
         67:ab:8b:a1:15:a2:a3:36:97:e1:7b:21:75:9c:3b:92:14:f6:
         b8:a6:af:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:37 2025 by rpki-client