Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/3448cb12-82b4-338e-9b10-5bae013a5e8b.roa
File:                     3448cb12-82b4-338e-9b10-5bae013a5e8b.roa (raw, json)
Hash identifier:          cwJ64/5eMrXwhD/CYzhEXUJlmveDYBG8vHAz9tV6HSU=
Subject key identifier:   97:78:12:CF:0C:B5:6B:B4:A7:3E:CB:2B:0A:9D:31:5A:2C:E9:19:A7
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F432858481C9A979D2DDE5016097DF6C0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/3448cb12-82b4-338e-9b10-5bae013a5e8b.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     262287
IP address blocks:        198.145.79.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:97:9d:2d:de:50:16:09:7d:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=3c37707c-110e-4b11-8004-8edc45aceffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c6:25:58:58:95:9b:56:a2:dc:48:01:2a:83:
                    09:73:69:88:4a:43:c6:ce:95:4e:fb:0d:37:2b:75:
                    dd:04:ae:97:64:d2:45:83:6e:d7:c7:80:85:15:b5:
                    43:5c:a0:77:a7:d7:3b:47:0e:e7:1f:13:36:da:23:
                    ed:97:40:0f:bb:e8:0e:c5:35:3e:04:95:c7:3d:2a:
                    b4:02:34:91:de:1f:d8:d9:ab:34:f1:43:df:07:89:
                    a3:d1:1d:02:74:00:23:b1:be:46:df:30:37:41:2c:
                    d6:5f:00:16:1b:38:30:53:64:d8:a5:c5:b7:da:9f:
                    84:0e:41:74:b5:51:fb:1d:1a:99:e1:12:76:b9:4c:
                    ff:d2:49:f7:1e:3e:16:e6:34:29:98:34:7c:36:20:
                    6c:7f:7e:17:41:11:c0:b4:93:ff:94:01:d2:5e:0d:
                    fc:fa:13:42:19:31:54:73:92:ee:e2:a6:4b:b7:07:
                    5c:da:c2:98:80:9c:ac:10:f6:63:47:85:36:7c:74:
                    c9:d0:8c:90:03:3b:84:f0:ea:cf:54:e8:23:14:6f:
                    c2:f8:52:db:62:24:73:d7:1a:6d:c0:74:7d:7d:0c:
                    b0:20:f8:82:24:c1:04:b7:c7:d4:62:3a:c8:25:81:
                    be:ff:08:72:2a:53:22:b8:f3:27:0d:26:6f:dc:45:
                    85:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:78:12:CF:0C:B5:6B:B4:A7:3E:CB:2B:0A:9D:31:5A:2C:E9:19:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/3448cb12-82b4-338e-9b10-5bae013a5e8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:c1:eb:61:c7:36:4e:d9:ec:c5:71:d9:0d:ca:2d:31:43:2e:
         53:78:4f:77:78:0d:84:76:60:68:76:01:fc:2a:63:6e:be:5a:
         f9:e1:9b:1d:9d:1d:84:94:88:cd:64:6e:d3:0f:3f:ea:0e:ba:
         ec:0e:a4:37:30:8f:f7:f9:56:2c:97:f9:52:d9:50:57:76:80:
         6e:1a:d0:75:a2:57:9e:74:c3:23:3b:f6:67:5c:b0:47:a2:bc:
         fd:b2:d3:a5:11:4e:13:d4:41:b2:79:d7:59:7b:a9:c2:cb:ed:
         3f:77:6b:91:6b:ce:94:7d:7e:dc:88:3c:66:d7:b9:fc:13:13:
         06:21:02:66:36:d2:5d:57:5a:eb:76:eb:a5:6c:85:50:06:2d:
         c8:d2:be:9e:5b:1d:03:55:92:99:4f:b0:08:bc:96:13:e0:9a:
         9c:10:df:0a:3c:fe:9e:93:53:84:34:0e:95:f2:de:87:08:01:
         2d:07:c7:79:43:29:30:46:c3:3c:ea:fe:46:6b:dc:c5:5f:f5:
         78:c3:65:7d:ae:20:9b:5f:32:af:8b:98:de:b9:a8:7c:10:c6:
         ab:2d:70:3f:86:43:ea:4e:8c:df:8b:e1:fd:1c:ac:e0:bf:24:
         41:20:67:31:2b:e8:ea:f7:b7:8d:c5:03:1b:61:b3:08:11:dc:
         c4:3c:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:51:32 2025 by rpki-client