Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/eaba1192-41a3-3fe2-ae05-5594eb83a24b.roa
File:                     eaba1192-41a3-3fe2-ae05-5594eb83a24b.roa (raw, json)
Hash identifier:          zRm6g+rpgQczFxBun52IqBTe1CUf+8oCtUyyVkPOeGM=
Subject key identifier:   E6:B5:C2:4C:A2:9D:23:76:90:C7:FD:6C:A0:73:A8:7F:C8:76:A5:A9
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285843BD002EE83F1A0B7922AFE4C0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/eaba1192-41a3-3fe2-ae05-5594eb83a24b.roa
Signing time:             Wed 01 Nov 2023 01:00:15 +0000
ROA not before:           Wed 01 Nov 2023 01:00:15 +0000
ROA not after:            Tue 30 Jan 2024 02:00:15 +0000
asID:                     32181
IP address blocks:        216.24.223.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:bd:00:2e:e8:3f:1a:0b:79:22:af:e4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Nov  1 01:00:15 2023 GMT
            Not After : Jan 30 02:00:15 2024 GMT
        Subject: CN=ea3f74f3-9d37-42ea-90a4-e9a3c1f1127f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:3f:9f:e2:eb:f9:d1:c5:ae:bf:31:7d:96:
                    f9:af:1e:14:66:91:f7:21:b3:61:f6:01:7e:2a:71:
                    f0:f5:12:ee:45:01:8b:db:e7:f1:07:4a:34:33:fa:
                    84:ab:38:42:f1:49:1a:06:fd:9a:4f:8c:19:44:26:
                    c5:67:da:9c:39:49:59:f1:3e:7b:70:10:01:3e:d8:
                    dd:78:4d:e9:23:f2:b4:c3:13:a5:c0:d0:79:c2:5f:
                    bc:ea:46:18:35:b0:5b:dd:84:73:72:37:9e:35:96:
                    69:0f:d7:97:16:02:a3:fd:45:3f:59:48:ae:3f:59:
                    e6:b2:c6:8a:fd:75:33:02:ba:99:bc:54:d0:96:01:
                    05:90:83:9f:50:c6:b8:88:37:c3:6d:35:5d:22:04:
                    7d:17:43:06:88:6d:7e:e7:3c:03:b4:13:d8:0b:b6:
                    29:83:57:1e:e6:63:c9:02:42:28:cf:f8:5d:98:47:
                    f9:f4:9d:fd:5c:78:33:ae:de:14:51:26:a2:a2:0f:
                    be:da:b1:4b:62:6c:fd:8b:b8:f8:6b:67:86:20:59:
                    35:f6:2f:f5:b3:05:72:e0:8d:5d:20:5e:1c:c3:7c:
                    b9:d3:e5:42:27:a2:cc:87:97:26:34:e2:fe:d6:21:
                    12:30:6a:ec:03:42:3b:44:d9:3d:27:17:0c:74:10:
                    86:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B5:C2:4C:A2:9D:23:76:90:C7:FD:6C:A0:73:A8:7F:C8:76:A5:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/eaba1192-41a3-3fe2-ae05-5594eb83a24b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:49:60:5c:24:9f:31:23:18:b0:2a:f3:92:00:16:d4:6d:80:
         91:65:b9:c7:ee:9c:1d:77:bc:a9:b3:c5:e0:ce:7d:88:64:95:
         5b:55:4a:c0:45:b7:57:06:d6:4a:87:1f:86:56:53:1f:73:46:
         f7:4d:c4:50:75:1d:ae:2f:49:2a:13:02:5b:1e:e7:7b:ce:ce:
         2a:d9:c2:c7:56:7f:a5:9e:07:0a:96:69:57:e6:79:66:b7:0b:
         d5:78:88:8c:e5:47:6e:71:6f:e7:65:26:13:eb:e0:78:ef:89:
         88:3a:9e:b5:55:b9:9a:66:a7:42:f8:6c:f4:8b:0d:8d:d5:32:
         58:1b:b6:a2:76:7b:f7:49:0f:f8:d5:36:be:0f:34:9a:5e:41:
         51:e3:0b:76:d8:a6:d5:3b:47:35:f9:af:6c:7c:04:75:6f:26:
         ef:04:a6:04:c3:a6:41:c0:49:b6:ab:e8:34:20:fa:02:37:ad:
         a8:a1:42:e7:90:b9:d1:d1:ba:e3:6b:bb:0e:31:bd:4d:c6:96:
         44:07:fd:99:61:bf:a7:66:37:1a:1c:20:a6:7b:b4:2a:41:bc:
         51:79:1f:b4:5b:9d:9a:a4:7d:8a:ac:62:87:63:b4:54:6a:85:
         5a:b9:da:08:b4:51:ed:55:c0:73:45:90:7a:27:f0:29:66:3e:
         c1:7a:03:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:16 2025 by rpki-client