Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/f57c206f-eb41-36ef-ac40-5bb614a14ab9.roa
File:                     f57c206f-eb41-36ef-ac40-5bb614a14ab9.roa (raw, json)
Hash identifier:          4sSfDYzQQXjokDsYQgMJ+OFJzlqPGpWSUAKuCLP1mzQ=
Subject key identifier:   04:0F:CE:F4:88:34:73:D5:D0:46:17:BD:EA:E9:8C:E5:80:56:36:3B
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F432858482EC00F63689373D4760B5900
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/f57c206f-eb41-36ef-ac40-5bb614a14ab9.roa
Signing time:             Thu 12 Dec 2024 14:00:51 +0000
ROA not before:           Thu 12 Dec 2024 14:00:51 +0000
ROA not after:            Wed 12 Mar 2025 13:00:51 +0000
asID:                     199925
IP address blocks:        74.115.2.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2e:c0:0f:63:68:93:73:d4:76:0b:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Dec 12 14:00:51 2024 GMT
            Not After : Mar 12 13:00:51 2025 GMT
        Subject: CN=8b229ab4-116d-4a97-a95c-6935aa4ebd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:aa:1a:69:0c:27:5f:86:69:1d:c5:49:95:f4:
                    38:5e:2f:4a:2f:bd:87:43:29:c1:ef:72:3d:b6:50:
                    86:d5:fd:88:22:fa:1a:81:7f:c3:66:53:c7:8c:cf:
                    12:9d:83:ed:48:83:db:d6:45:cc:ec:fc:b0:29:10:
                    b7:d0:10:aa:6c:b2:26:b0:62:c0:33:4a:27:dc:8a:
                    03:0b:03:b3:38:24:09:1e:f2:6c:fc:7f:f0:7a:88:
                    0a:4e:59:87:a8:69:53:9b:ae:c9:29:1e:10:63:4a:
                    1c:4d:c1:8d:29:7c:3b:77:a9:3f:cf:b3:4a:5b:87:
                    25:77:a9:67:c2:74:f7:c0:da:41:c0:d9:57:fe:b1:
                    9f:f5:8c:08:98:ff:b9:fd:ec:1b:ed:d0:45:e1:c8:
                    46:89:28:a5:69:7d:4e:b3:ed:c4:5e:0c:d1:b3:2f:
                    95:b2:0d:85:25:47:14:dc:4e:52:9e:a5:ad:58:65:
                    21:ba:3d:68:0f:74:7d:6e:69:ab:a5:63:d5:9e:00:
                    a8:ba:10:83:51:1b:eb:51:fb:14:c5:d3:52:64:5f:
                    e5:8d:99:39:3a:5b:62:8c:f7:44:83:b2:5d:13:ce:
                    45:c9:ad:c4:d1:d8:28:64:6a:d4:7b:92:e8:bf:d6:
                    de:5a:9b:11:84:0e:4d:fb:a9:59:f2:db:12:ed:c9:
                    1b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0F:CE:F4:88:34:73:D5:D0:46:17:BD:EA:E9:8C:E5:80:56:36:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/f57c206f-eb41-36ef-ac40-5bb614a14ab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.115.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:87:fe:97:56:7a:92:9b:ae:0b:88:f6:36:32:e9:04:5f:ab:
         e9:17:da:a0:85:6a:99:f9:dd:f1:c6:2a:5c:9c:53:85:6f:94:
         89:dd:05:fe:dc:dd:72:bd:f2:5a:40:27:d4:0f:f0:81:1f:92:
         d7:a6:c2:dc:d2:07:75:04:72:ff:f3:1e:01:ab:06:ed:60:18:
         63:e6:a4:d3:56:8e:48:a9:79:21:28:d0:c0:3f:84:c5:64:a3:
         43:98:c0:7c:d1:a6:90:df:40:95:04:55:8c:eb:59:d2:c7:8b:
         02:7d:c8:2a:36:36:ef:c9:19:c2:6c:71:c7:b3:cb:96:8a:7a:
         fe:f6:be:45:30:d6:8b:4f:ce:8c:ba:26:d1:bf:c4:f3:f5:43:
         28:1f:3e:d0:24:02:f4:11:b5:58:8b:7a:6c:33:6a:7c:81:62:
         55:98:bd:40:4b:43:ef:90:59:40:6f:63:6e:5c:bd:e1:e8:d0:
         9d:bc:cb:7d:ad:58:83:76:40:85:16:c1:30:47:21:c7:10:ac:
         16:04:76:be:3d:6a:7a:ae:fb:70:b5:d8:55:4d:e4:8c:c5:ea:
         ff:d2:a6:e0:b4:62:3f:ef:85:ec:b2:ac:97:74:6d:bb:d3:d2:
         b2:0c:d3:01:6d:f4:32:a7:6a:a9:cb:0e:2c:97:ba:02:6a:6a:
         48:97:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:16:52 2025 by rpki-client