Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/a1e53d69-24b2-3c36-9acc-a150c9df538a.roa
File:                     a1e53d69-24b2-3c36-9acc-a150c9df538a.roa (raw, json)
Hash identifier:          t8wOEnooGZ2plHsqifuF4xpmM1WAXEdsEGXmPmJi1YE=
Subject key identifier:   E1:C3:72:87:CB:40:AE:5E:66:AC:41:78:3F:EC:89:75:57:8E:F2:8C
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F43285846A29D5F80DA9649BE80C07440
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/a1e53d69-24b2-3c36-9acc-a150c9df538a.roa
Signing time:             Tue 23 Jul 2024 16:31:03 +0000
ROA not before:           Tue 23 Jul 2024 16:31:03 +0000
ROA not after:            Mon 21 Oct 2024 16:31:03 +0000
asID:                     212027
IP address blocks:        165.140.11.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a2:9d:5f:80:da:96:49:be:80:c0:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: Jul 23 16:31:03 2024 GMT
            Not After : Oct 21 16:31:03 2024 GMT
        Subject: CN=e7d47f48-597b-430f-8a80-c5b828112766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:fc:ce:d5:0d:89:de:5a:20:55:67:c0:35:
                    46:2f:46:6b:a1:a5:48:76:5e:40:b4:95:dd:2b:7c:
                    ca:6b:cf:6e:f7:b1:91:96:63:c8:2c:67:63:a9:23:
                    64:33:4d:3f:51:12:10:d3:f7:89:63:f3:de:15:5b:
                    f8:8e:04:c5:79:da:ea:e4:86:77:0d:71:07:c7:77:
                    fc:e3:e6:05:4e:e5:d7:4f:a2:50:87:09:da:43:56:
                    95:1b:30:63:60:cd:39:8b:c1:a4:dc:f3:62:51:6b:
                    3a:9d:6e:3b:7a:46:8f:e4:fa:8b:53:16:7d:5d:fa:
                    75:bb:9a:8d:90:27:18:5b:d4:ee:b5:52:d1:e8:e7:
                    6c:d1:c3:4d:0b:52:3c:dc:6e:91:9d:7b:d8:a0:b8:
                    aa:fc:6b:a7:40:3e:ea:52:48:cc:56:10:9b:d7:99:
                    0b:a0:70:0d:9d:55:a9:44:0b:d7:b1:ec:bc:9d:cc:
                    7a:03:f4:05:ae:f2:e8:2a:61:fd:b9:d7:4b:8d:cc:
                    bf:22:16:39:ad:fb:34:48:a6:e2:82:c7:3f:7e:6e:
                    16:d1:94:57:6d:64:fa:16:14:0a:94:a0:4c:3b:73:
                    2c:65:b4:22:c7:dc:a0:fc:a2:8b:62:94:c0:7b:68:
                    28:11:f4:25:7d:6e:b7:87:58:b0:29:a1:35:dd:72:
                    1b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C3:72:87:CB:40:AE:5E:66:AC:41:78:3F:EC:89:75:57:8E:F2:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/a1e53d69-24b2-3c36-9acc-a150c9df538a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:37:58:24:c5:0f:e8:b0:44:ce:a2:55:29:6d:2e:89:bd:fc:
         f6:4f:17:50:ac:b6:7c:16:29:1f:a7:6e:3c:93:05:33:0d:4d:
         f4:4a:65:06:12:af:dd:ef:98:ac:b2:f2:9d:40:a9:53:a8:d6:
         47:06:af:5d:3a:97:8c:25:3b:88:9a:b6:2c:bf:ad:89:36:5f:
         d6:f4:67:99:1f:91:58:ca:3b:17:53:4c:39:5f:62:e3:85:64:
         a3:01:e1:71:d2:cf:da:e6:51:e0:48:7e:f1:ab:21:65:73:ef:
         ba:d1:81:ba:02:f5:0d:4b:d0:fe:08:27:82:db:02:f0:9e:43:
         7e:e6:10:9c:43:a9:b3:d4:7d:e9:66:78:15:57:46:bd:50:8e:
         02:78:fb:1d:13:af:5f:34:b2:bd:79:01:73:b6:8d:ea:4e:fe:
         34:d0:65:76:d8:2f:8b:96:e7:7c:2e:5d:44:90:53:f5:a0:0f:
         74:74:11:26:f0:a8:d0:42:33:19:a2:a8:da:7e:67:8a:b4:92:
         7d:e3:52:f9:93:f3:3a:2f:31:24:1d:c0:7c:a7:7e:7e:9c:b9:
         80:9f:af:ac:e3:c2:54:22:d7:6e:f0:91:69:c6:60:84:97:ad:
         6f:6f:8c:2e:fb:99:ec:0a:09:22:f8:92:bd:c3:95:de:3e:e7:
         1c:cc:a6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:23 2025 by rpki-client