Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/b546d1c0-55aa-3e14-8953-d33844f1201b.roa
File:                     b546d1c0-55aa-3e14-8953-d33844f1201b.roa (raw, json)
Hash identifier:          ZsH9L6t3K34keLRLQ/N7JLXAWRt5uOjCrz1IAfk1u14=
Subject key identifier:   2A:43:60:F1:9F:30:8C:C7:90:AB:41:88:25:D1:C5:20:0E:3A:85:2A
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F432858462CF43F4A93A91589D709EB80
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/b546d1c0-55aa-3e14-8953-d33844f1201b.roa
Signing time:             Tue 11 Jun 2024 13:00:33 +0000
ROA not before:           Tue 11 Jun 2024 13:00:33 +0000
ROA not after:            Mon 09 Sep 2024 13:00:33 +0000
asID:                     396073
IP address blocks:        165.140.9.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2c:f4:3f:4a:93:a9:15:89:d7:09:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: Jun 11 13:00:33 2024 GMT
            Not After : Sep  9 13:00:33 2024 GMT
        Subject: CN=095b4bbc-5836-491c-b979-ef5c4837352b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3e:c8:45:c6:76:2b:6a:5d:bd:5d:91:88:0a:
                    d9:b9:0e:61:e7:39:77:e0:e5:05:2a:d3:fa:99:56:
                    f9:85:48:26:22:3d:25:8e:23:15:4e:61:58:b0:b1:
                    a5:8d:b4:84:53:ce:7f:88:86:05:bd:79:d5:59:d6:
                    a6:79:4d:73:dd:91:a6:a7:a3:e7:70:10:35:7f:2e:
                    fb:41:a5:09:f9:7f:c1:e6:67:ed:8d:e1:89:3d:33:
                    e1:4c:bb:01:20:c3:e0:f6:73:fb:29:d5:40:b8:cc:
                    17:6f:de:02:c3:dd:75:b6:b9:47:04:3b:8a:63:0f:
                    9e:35:17:ca:d8:57:08:35:72:77:18:7f:d2:52:f5:
                    ac:7f:90:ea:78:0a:d8:df:d2:c5:d7:12:78:89:26:
                    b7:07:a7:0c:c8:f2:f8:a3:a4:d3:53:01:3c:9f:2f:
                    ef:93:d0:69:77:e6:44:42:b5:f4:a7:b2:4c:5e:24:
                    1c:d2:ab:6e:26:92:b1:c0:0e:80:c1:87:0f:74:45:
                    82:29:0f:69:57:a9:c6:26:5e:83:bd:6f:1e:26:36:
                    d9:54:fe:6c:25:ee:1f:bb:76:a0:65:1d:c2:c3:74:
                    27:46:7f:09:bc:e2:ba:83:45:4a:97:38:da:48:be:
                    bf:2c:e7:83:21:2b:65:ce:94:47:45:50:80:75:64:
                    1c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:43:60:F1:9F:30:8C:C7:90:AB:41:88:25:D1:C5:20:0E:3A:85:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/b546d1c0-55aa-3e14-8953-d33844f1201b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:48:61:f1:21:ff:90:84:23:70:bb:d4:a6:b0:9c:2c:c8:9a:
         3d:7c:87:1f:77:33:6f:7e:bc:09:a7:a3:38:c1:b1:5b:1e:5c:
         cc:1f:29:51:1d:12:94:3f:9f:05:66:1c:53:b4:ad:e8:85:d9:
         b9:12:f0:2d:ca:81:47:05:47:de:91:de:a6:53:e6:2e:63:36:
         b0:0d:3a:f6:ea:72:91:dc:a6:77:99:05:ac:80:b9:f2:6a:d3:
         27:23:f9:cb:8f:31:28:8b:38:f0:6e:75:ec:9a:05:29:7c:19:
         40:b4:09:a5:ee:ac:de:af:19:ae:8b:e4:dc:1d:af:cc:c2:01:
         b0:cd:ac:50:c1:96:05:ec:a4:31:74:71:b6:cb:e4:4c:57:e9:
         6b:3c:00:00:b3:ef:98:d2:11:18:f3:c2:ba:97:88:ab:d6:68:
         6a:0b:e3:40:69:ba:45:62:03:c3:ef:16:e9:24:30:fb:6e:7a:
         30:6a:9e:14:cb:1e:80:38:86:a4:1f:4b:33:c9:ad:22:fb:1e:
         ec:f9:57:f0:23:05:38:f9:06:bb:f4:a3:e4:e8:7b:3f:68:a9:
         67:2b:0f:f8:26:18:ca:c8:cb:0f:98:df:21:a6:1f:85:e3:37:
         e3:b0:55:e5:05:be:f7:17:3c:f5:97:10:66:74:52:95:a2:21:
         36:52:98:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:25 2025 by rpki-client