Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d2570367-308a-37dd-9f7b-f285090cd82d.roa
File:                     d2570367-308a-37dd-9f7b-f285090cd82d.roa (raw, json)
Hash identifier:          leZlNASPneOgWbbfvm39o4pjWnECEQJ5QQrnsC1/zjU=
Subject key identifier:   DE:34:B9:C9:C6:0F:A8:6D:80:E1:51:29:D0:00:02:40:AA:03:C8:32
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285847FF4A643FFAA988A70EBB2EB0
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d2570367-308a-37dd-9f7b-f285090cd82d.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     36040
IP address blocks:        207.126.156.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:64:3f:fa:a9:88:a7:0e:bb:2e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=2107a808-1fff-4f21-8fdd-099c12f3c000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:72:1c:26:06:f4:36:95:5c:dc:ff:0a:b1:99:
                    53:08:a8:61:37:76:2e:bf:f6:31:5c:3b:7c:70:3b:
                    ad:72:bd:ae:f6:d3:36:57:f1:53:1f:4d:48:bb:8e:
                    17:3b:43:97:2d:80:89:96:8b:58:de:4b:27:81:aa:
                    9f:c9:44:4f:e7:51:57:74:92:75:34:c7:3b:f6:9b:
                    1b:22:08:bf:80:e1:3d:b9:5e:0b:33:d7:62:e6:e2:
                    02:62:03:4a:be:bf:a4:5e:74:d1:fe:f0:34:0a:43:
                    8f:92:65:1e:57:45:1a:25:30:fa:72:66:1c:bc:7f:
                    20:e2:64:52:4b:0f:69:ee:5a:60:29:72:ad:59:14:
                    69:9f:3b:61:56:03:43:6c:6c:79:50:75:96:44:f6:
                    e5:ff:ad:ce:39:f9:bc:38:97:0c:bf:a1:a4:dd:a3:
                    b6:97:66:b9:42:88:c6:b9:c8:c5:f9:44:57:55:9c:
                    14:08:ec:34:c0:39:67:80:b4:1f:26:11:8b:ff:cb:
                    29:6b:62:10:49:57:6f:ad:22:c6:71:2e:40:4a:5f:
                    fb:0b:ab:34:ea:ef:84:22:1b:90:b5:71:81:1e:7c:
                    da:c7:9e:d0:42:32:a7:58:09:ec:ee:90:cf:e3:63:
                    87:29:fa:2e:46:e9:78:63:75:b0:04:2d:e3:f3:b0:
                    aa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:34:B9:C9:C6:0F:A8:6D:80:E1:51:29:D0:00:02:40:AA:03:C8:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/d2570367-308a-37dd-9f7b-f285090cd82d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f2:0a:77:17:31:a2:c2:cd:7c:6e:7f:13:bd:61:ca:44:35:
         d3:63:3d:ad:f2:53:86:ab:7c:f3:2e:f1:b6:5f:db:a3:cb:c8:
         f2:43:db:ab:b4:a1:ec:ae:f7:7e:4e:e5:8e:42:48:ec:92:73:
         de:66:83:11:f0:ca:cd:2c:1c:e3:69:df:e4:30:ad:3a:e1:47:
         2d:93:65:fc:b2:f2:ea:11:81:39:46:7f:4d:51:95:f0:08:0c:
         ad:dd:9e:18:b6:04:59:9c:7a:d8:24:bf:54:f0:29:28:96:c2:
         ba:31:75:44:61:22:a6:44:9a:60:cc:a7:d6:42:3e:49:bc:16:
         87:b9:df:d9:a2:3d:f2:ee:e0:83:e7:93:7c:19:75:78:41:50:
         fa:a4:ce:3a:0a:1f:4c:91:31:d4:0a:05:3c:48:81:5b:cd:61:
         ed:5b:e0:15:66:37:31:cd:89:53:ae:8e:66:f8:c4:b6:e6:9f:
         33:69:e5:45:67:e4:cb:28:b5:02:92:2a:ed:23:48:ef:1b:71:
         db:5e:25:69:34:47:f6:6d:04:e9:d7:a0:f0:43:9a:92:5d:3c:
         23:1d:60:a0:19:7a:21:ae:fc:7c:a3:cc:4c:3c:f6:e9:c2:46:
         b8:d6:fd:43:3d:fd:ea:c9:23:ad:48:57:63:f2:19:ec:b0:72:
         ff:cb:2a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:57:36 2025 by rpki-client