Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/49773a31-4df3-3534-8cc6-f44224e4fcf0.roa
File:                     49773a31-4df3-3534-8cc6-f44224e4fcf0.roa (raw, json)
Hash identifier:          TeA2Jzi3gXGfKh10mEY9LSitx/GqyBmyrEgxsCCTM8M=
Subject key identifier:   82:B2:4F:B4:01:D2:BF:85:96:C4:77:B3:D6:1B:56:0E:D4:41:04:36
Certificate issuer:       /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
Certificate serial:       010D0C9F432858442424B866432BBACD2F9949E0
Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/49773a31-4df3-3534-8cc6-f44224e4fcf0.roa
Signing time:             Thu 07 Dec 2023 23:42:13 +0000
ROA not before:           Thu 07 Dec 2023 23:42:13 +0000
ROA not after:            Wed 06 Mar 2024 23:42:13 +0000
asID:                     16509
IP address blocks:        170.200.184.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:24:24:b8:66:43:2b:ba:cd:2f:99:49:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
        Validity
            Not Before: Dec  7 23:42:13 2023 GMT
            Not After : Mar  6 23:42:13 2024 GMT
        Subject: CN=270ac725-dce4-4635-9f9e-268cbecbaf25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5e:d4:4b:02:b1:a4:71:43:bc:19:3a:bb:8a:
                    af:ee:e7:ff:fa:50:e2:f1:03:94:ca:31:3a:fe:db:
                    6a:cb:27:b3:77:ca:13:f0:7c:c6:0a:c0:98:23:0b:
                    07:1d:91:6c:78:0a:08:30:0f:ff:14:40:50:8b:61:
                    1e:ec:ba:29:c1:ee:69:22:b6:8e:e0:39:36:7f:76:
                    99:be:6f:07:d9:73:5b:3b:7a:d4:7d:f5:5b:f4:26:
                    9b:cd:6e:7e:5a:6f:fa:fe:32:b4:a1:2e:c2:df:3d:
                    98:83:25:cc:6b:7f:72:64:7e:a0:51:5d:ba:8d:d2:
                    b2:c3:f4:20:40:9e:d1:d5:53:e8:31:f8:47:70:13:
                    9c:8e:46:3f:cc:d6:58:44:44:7b:10:90:1c:5a:a7:
                    7b:c0:58:4e:27:f1:d9:86:29:db:e2:21:e8:63:e8:
                    ae:ad:17:07:e7:c9:14:3c:4c:71:f7:a6:47:9b:9c:
                    1f:e0:9c:d0:41:f4:9f:c6:d6:50:c6:2b:73:80:61:
                    e5:2b:f2:c6:af:99:93:cb:32:18:52:15:17:b7:44:
                    a6:52:ea:77:0b:fe:86:8b:36:24:07:34:33:16:57:
                    4c:be:5c:b5:2a:08:cf:ad:0c:8c:09:15:7d:fc:04:
                    ee:94:54:65:24:f0:cc:e9:8d:f4:f2:f0:5f:f1:2d:
                    84:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B2:4F:B4:01:D2:BF:85:96:C4:77:B3:D6:1B:56:0E:D4:41:04:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/49773a31-4df3-3534-8cc6-f44224e4fcf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl

            X509v3 Authority Key Identifier:
                keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.200.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:57:fb:88:76:81:60:7b:40:8c:f6:1a:35:a7:21:05:f1:ce:
         22:36:4f:1c:4c:c3:3f:fc:9d:12:39:e2:32:d4:ea:e3:68:f3:
         6b:e5:6c:38:03:fa:54:b5:2f:77:e6:bf:c5:85:1f:ed:82:23:
         8d:17:39:af:b7:62:59:f3:17:12:f5:83:b1:36:18:1a:c5:f2:
         ac:70:aa:14:72:49:4e:51:b5:ad:84:c6:b1:e2:12:e9:87:37:
         cc:fc:a9:9f:96:25:02:7c:d0:08:13:f8:a2:84:ca:0a:c7:ba:
         cf:20:a7:a9:d9:8c:ea:8f:6e:e8:e1:65:77:fa:93:f2:37:b7:
         65:57:09:67:43:26:cf:46:a5:b1:38:7d:64:88:71:63:17:81:
         42:db:8c:69:f2:ae:4c:a5:e0:8f:43:a0:e5:1e:73:96:19:c1:
         de:67:c0:5a:24:18:fa:6a:59:32:a1:c5:21:5b:c2:67:96:84:
         b6:d1:e3:d2:22:2f:87:17:6e:c5:dd:fe:54:b9:de:30:40:bd:
         b6:8b:8f:9e:d9:ca:67:89:5a:e4:e3:51:39:fa:7d:5f:98:88:
         4f:38:e7:fb:33:4e:fa:8b:b7:8e:8e:e6:3b:57:d7:0e:56:06:
         2e:11:bd:c9:97:10:db:c5:19:79:4a:d0:dc:0b:6d:3f:bd:6b:
         02:67:46:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:53 2025 by rpki-client