Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/e52fc028-f48e-367d-92e3-7257101b8dd4.roa
File:                     e52fc028-f48e-367d-92e3-7257101b8dd4.roa (raw, json)
Hash identifier:          igy5dd/Zeq3VaY1anNb++4qK4TZfMq54JR/HDpwPqNg=
Subject key identifier:   F5:AB:FE:C7:0A:5D:51:01:3B:35:30:BB:8D:13:2E:75:7B:58:C6:A5
Certificate issuer:       /CN=0675db59-b7a3-47ed-ae85-edcfb590155e
Certificate serial:       010D0C9F4328584717C6CE1AEB39C6055DFE5700
Authority key identifier: D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/e52fc028-f48e-367d-92e3-7257101b8dd4.roa
Signing time:             Tue 03 Sep 2024 15:44:07 +0000
ROA not before:           Tue 03 Sep 2024 15:44:07 +0000
ROA not after:            Mon 02 Dec 2024 16:44:07 +0000
asID:                     216425
IP address blocks:        165.140.20.0/22 maxlen: 24
                          2602:fc5d:fe0::/44 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:c6:ce:1a:eb:39:c6:05:5d:fe:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0675db59-b7a3-47ed-ae85-edcfb590155e
        Validity
            Not Before: Sep  3 15:44:07 2024 GMT
            Not After : Dec  2 16:44:07 2024 GMT
        Subject: CN=94e258d5-30a9-43d5-ac27-b2c9d44877b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:58:73:c3:a9:c2:9d:c6:d3:90:a3:a5:b1:17:
                    b5:08:f9:c8:b2:af:81:4b:02:66:6e:06:d5:bf:a7:
                    a6:fe:b0:b7:21:b5:e5:3a:67:66:bd:3b:32:8c:39:
                    25:16:ca:ab:61:16:77:9a:a8:13:ca:8a:1b:35:b6:
                    1b:ab:84:10:ed:e1:59:ec:a2:65:7c:0c:96:bb:bf:
                    07:1c:5c:7e:d9:45:31:8d:78:c1:ed:f2:09:97:49:
                    61:dd:d1:0e:b7:19:f8:78:88:2d:a5:27:b8:0a:f5:
                    d6:5f:63:90:18:64:72:b7:1b:ae:79:33:39:79:76:
                    cf:09:35:29:7e:5e:db:92:21:e4:cb:c7:b0:47:34:
                    ba:f9:d3:1f:20:42:54:53:fa:dd:60:66:d4:64:3e:
                    a3:4c:38:28:db:5c:ed:35:c4:e6:30:fd:a1:6e:49:
                    13:56:9b:b7:57:b0:6a:f4:cf:b7:b0:8b:9f:1d:98:
                    d1:9c:d1:1f:ea:c8:41:27:92:4c:29:a7:44:55:5d:
                    67:7f:25:b9:b6:07:fb:47:d6:3c:88:d3:d3:b0:8d:
                    46:6f:56:ca:dc:67:0c:c9:27:60:b7:6a:e4:de:80:
                    5f:a8:54:d1:ac:fa:b9:4a:bb:44:05:9c:cc:9b:dc:
                    9c:b9:73:e5:b3:ed:62:fb:80:9d:aa:37:f3:9e:b4:
                    a6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AB:FE:C7:0A:5D:51:01:3B:35:30:BB:8D:13:2E:75:7B:58:C6:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/e52fc028-f48e-367d-92e3-7257101b8dd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.20.0/22
                IPv6:
                  2602:fc5d:fe0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:0b:c0:f8:85:ef:99:64:13:38:a2:a0:ef:cf:91:cb:e3:90:
         8c:d2:cc:c1:2e:4d:77:ca:35:c2:8d:c2:67:b3:29:e1:6e:49:
         db:01:aa:53:06:dd:e6:c7:59:c0:4e:2b:b3:1c:cd:0c:bc:62:
         08:23:a8:4a:77:2a:cd:54:30:33:a8:93:0d:05:01:76:e0:cc:
         43:90:ab:4e:17:95:aa:09:fd:10:3a:c6:87:86:6b:9c:a2:8a:
         d4:39:19:03:40:27:26:75:bf:de:36:32:ca:15:eb:63:44:c6:
         ac:a8:9c:76:ce:bc:2b:62:b7:0c:f6:80:e9:8c:e5:5e:70:9a:
         a9:fc:f3:79:b7:88:ff:7e:e7:93:83:c6:85:ab:8a:76:65:87:
         48:89:e7:99:c4:90:91:34:50:25:3e:2e:a0:8f:ba:d5:0e:83:
         2b:cc:21:9a:37:46:46:f9:11:9a:ce:63:42:5a:4a:4e:fa:67:
         b6:cc:94:df:3c:bb:c2:52:af:c1:68:97:da:bc:07:64:1a:e9:
         08:cd:7b:b2:67:26:19:c2:f6:29:fe:63:4f:cc:75:df:a8:a0:
         0b:e3:ff:82:58:cc:47:d1:81:17:3c:30:69:ca:7e:0e:43:2a:
         d0:bf:a9:49:85:37:ad:8d:97:1f:5b:a9:fa:ad:26:d6:c1:53:
         44:38:1d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:06 2025 by rpki-client