Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a8264f91-ff34-3e37-b258-e648975f9cce.roa
File:                     a8264f91-ff34-3e37-b258-e648975f9cce.roa (raw, json)
Hash identifier:          dxS4VFIjHmr9ynm/ACBt1VnSXhRn4blWOEAYs/dwHd8=
Subject key identifier:   EE:7E:D8:E7:FE:AD:C9:7C:90:51:CF:87:BE:63:0E:8F:2B:83:BC:9D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847B2669E0AA392167F1A337CD0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a8264f91-ff34-3e37-b258-e648975f9cce.roa
Signing time:             Tue 29 Oct 2024 01:00:32 +0000
ROA not before:           Tue 29 Oct 2024 01:00:32 +0000
ROA not after:            Mon 27 Jan 2025 02:00:32 +0000
asID:                     1239
IP address blocks:        199.182.168.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b2:66:9e:0a:a3:92:16:7f:1a:33:7c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 29 01:00:32 2024 GMT
            Not After : Jan 27 02:00:32 2025 GMT
        Subject: CN=4dce9f1b-722d-4f5e-8faa-667fb745d8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:1a:c1:37:44:1e:08:c2:e0:0c:1b:f4:0a:
                    21:39:ff:ab:86:70:ee:b2:73:b5:0c:5c:b0:81:a9:
                    59:45:8e:fa:4d:51:84:c8:2d:de:da:b3:b7:d4:60:
                    e0:ca:ce:e2:f0:76:af:8f:70:9f:e3:f6:f4:da:7c:
                    4e:58:d7:57:19:de:4a:e0:c3:5c:29:59:25:cd:bc:
                    11:35:3c:f9:c5:b0:7f:6f:ae:c3:78:16:b5:2a:c6:
                    d8:8f:17:dc:c3:4e:3b:21:6b:68:17:d4:82:0f:fd:
                    66:ee:10:b3:ff:a5:66:c8:89:97:68:5e:95:19:a1:
                    ac:a7:39:e4:fb:35:94:66:ae:ef:66:d3:e3:95:d8:
                    04:fe:12:e4:2f:61:f4:ae:af:88:25:de:d6:54:97:
                    4b:02:84:89:d4:c5:1e:19:f4:ff:32:72:f9:a4:6b:
                    5f:08:db:29:06:52:20:b7:de:2e:27:da:18:81:25:
                    b0:8a:5c:ca:37:70:23:16:c6:28:9c:b6:34:8b:73:
                    9d:45:32:65:e5:e7:13:69:e8:5f:1f:45:9c:08:11:
                    49:c1:cf:2c:3e:1a:4b:d7:97:1a:19:62:15:7c:c6:
                    16:54:2b:d4:14:cc:65:ae:cf:34:d4:a6:f8:7c:4e:
                    66:7e:e6:19:20:61:f6:11:7b:6e:07:87:ac:4d:83:
                    0a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7E:D8:E7:FE:AD:C9:7C:90:51:CF:87:BE:63:0E:8F:2B:83:BC:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a8264f91-ff34-3e37-b258-e648975f9cce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:72:73:ea:4a:bd:35:8f:a4:16:14:e4:52:6b:0e:77:d5:94:
         bc:4b:07:ed:27:9c:2f:89:63:78:39:90:66:be:94:17:ca:76:
         0f:b1:c9:b4:7b:16:3a:b0:de:73:dd:6d:38:02:b2:07:84:2b:
         3e:39:b6:bd:cf:3c:fa:99:52:ef:24:58:df:67:54:43:d0:cf:
         73:a0:8a:d3:c0:fa:2e:b0:ea:b0:02:25:10:59:af:b5:8b:60:
         00:e6:7d:6c:43:dc:9c:ac:24:c5:da:49:85:f2:2f:8b:e3:a1:
         5c:2f:64:1a:e1:37:7f:51:74:bb:b6:e5:7a:cf:ff:53:c8:75:
         44:0c:47:1e:47:ef:b9:6b:f9:63:55:9b:c8:6d:b5:92:fd:3c:
         1f:07:ba:30:71:38:19:ae:4e:53:b9:32:62:ba:c3:7d:5a:54:
         09:6e:67:29:92:3d:96:17:7d:75:0e:da:1a:51:af:ee:d2:79:
         e1:1d:c1:f7:e5:e5:e5:ae:5a:2b:ad:66:5a:e4:42:e8:3b:00:
         6a:8d:08:3d:c3:41:44:60:0f:50:db:c1:c2:af:dd:f9:0a:0a:
         a2:84:fb:45:a0:aa:ee:71:33:be:c6:65:52:13:d5:aa:69:ce:
         c6:dc:08:b7:9d:c6:df:67:c0:a7:11:d5:30:cd:be:4b:f5:62:
         1a:76:41:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:09:46 2025 by rpki-client