Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b55b9033-db13-3404-964c-f8f4ab0ba642.roa
File:                     b55b9033-db13-3404-964c-f8f4ab0ba642.roa (raw, json)
Hash identifier:          YqMHCJs95+zxxB/AtBCv4fcqMVHBpvzBGvyOloif1xY=
Subject key identifier:   32:66:6D:65:01:D1:7E:D1:B5:5E:D5:7F:EB:71:36:AC:F1:F2:E3:87
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285846481EC30741581B417DA2AD00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b55b9033-db13-3404-964c-f8f4ab0ba642.roa
Signing time:             Fri 21 Jun 2024 06:33:12 +0000
ROA not before:           Fri 21 Jun 2024 06:33:12 +0000
ROA not after:            Thu 19 Sep 2024 06:33:12 +0000
asID:                     834
IP address blocks:        66.78.59.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:48:1e:c3:07:41:58:1b:41:7d:a2:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 21 06:33:12 2024 GMT
            Not After : Sep 19 06:33:12 2024 GMT
        Subject: CN=4a75527f-eaf1-443d-9562-2b87ef79d682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:88:d5:6b:62:4c:7f:0d:77:56:27:99:9a:60:
                    c9:62:2e:0f:a8:de:ed:db:70:b4:75:13:97:b7:6f:
                    d6:42:ec:ec:26:e1:33:4e:5e:c4:de:5a:d7:a3:14:
                    ce:26:e1:f3:67:b9:2f:f7:80:ab:9e:61:57:2f:2a:
                    60:28:50:86:31:ff:6b:87:4f:d6:8e:14:88:a4:13:
                    ac:a7:a0:48:40:a9:67:07:50:e8:9f:00:c1:da:fa:
                    7a:a1:d5:24:2e:f9:62:ff:a1:db:31:d1:20:69:df:
                    44:fe:c9:ae:3e:f0:40:86:dc:1e:67:29:b9:a5:1a:
                    8a:0f:cc:cd:70:12:30:b9:d2:0a:1e:7b:6f:9e:a5:
                    ea:a8:0a:c9:f5:fb:b9:ab:da:83:65:83:04:1a:de:
                    35:ab:bd:5a:62:5e:1c:77:5b:16:16:99:77:00:2d:
                    a3:d2:a9:e3:78:a2:cd:c9:0f:61:ac:85:a4:16:ba:
                    13:ca:07:8f:03:b8:ac:e5:b7:a0:87:31:08:38:7f:
                    07:27:87:34:7f:55:17:14:cc:ce:c2:3c:16:36:f3:
                    bc:34:ec:10:ea:5c:83:f7:86:7a:8c:64:0d:3d:dc:
                    e1:1c:01:69:a0:16:d4:4d:85:eb:bd:04:25:25:70:
                    b2:02:69:a9:16:79:c7:ab:ba:59:6d:18:79:8d:4f:
                    37:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:66:6D:65:01:D1:7E:D1:B5:5E:D5:7F:EB:71:36:AC:F1:F2:E3:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b55b9033-db13-3404-964c-f8f4ab0ba642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.78.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:df:d5:2a:e1:91:03:7f:1e:d8:88:93:b4:ae:d6:b4:33:f4:
         7e:2c:83:32:82:1e:f8:ff:f1:b8:7e:e5:04:c2:b1:25:87:97:
         2b:e7:d1:57:35:74:ea:20:d2:20:d2:13:1c:8a:5e:e8:61:ea:
         a9:d9:10:8e:87:a7:b1:b9:7b:63:a5:9a:10:77:b2:52:f4:58:
         2d:38:3d:9c:03:28:1d:52:04:82:06:db:1a:17:a6:a4:3c:3d:
         7c:b6:e3:0f:55:ab:06:8d:bb:f6:1a:e9:6a:71:15:c4:bd:e1:
         8a:7c:ac:66:43:35:68:a0:62:70:5d:8f:f0:ef:e7:c4:a7:25:
         03:7b:da:ae:f4:24:8e:34:ed:73:1f:10:43:eb:6e:d6:23:3f:
         14:6e:4b:c2:0d:14:8c:19:f0:d6:19:24:f6:a0:3e:21:f6:cc:
         5b:ad:78:3e:bb:ca:5b:89:7e:ea:6b:20:ff:9e:e2:0d:7d:1a:
         cd:77:fa:ce:fe:08:fc:12:6f:b9:00:ae:2a:da:8d:3b:1e:af:
         a9:cc:fd:7b:2f:6b:b8:7f:0f:e6:04:9e:34:68:08:a5:0f:50:
         2c:03:61:4d:ad:be:ee:81:cf:63:8b:96:c9:ac:2b:f6:8d:8b:
         88:da:46:c8:ef:2c:fd:44:99:fc:47:69:88:75:a0:63:79:07:
         50:d5:31:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:45 2025 by rpki-client