Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/bcbe867b-bbaa-3ecf-a22d-f841619e6123.roa
File:                     bcbe867b-bbaa-3ecf-a22d-f841619e6123.roa (raw, json)
Hash identifier:          vqeh2AJ1U7/qCaC2oyiloB1R7SzfYktwM1xkSCt2yCg=
Subject key identifier:   C6:42:85:46:1F:00:02:02:2F:AE:5B:57:16:01:24:18:BA:65:20:A4
Certificate issuer:       /CN=a278da28-82b3-48fe-bc76-7859a82f5651
Certificate serial:       010D0C9F43285845CAD6D7FBB5AAFAFDFD5FDA00
Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/bcbe867b-bbaa-3ecf-a22d-f841619e6123.roa
Signing time:             Tue 07 May 2024 09:32:15 +0000
ROA not before:           Tue 07 May 2024 09:32:15 +0000
ROA not after:            Mon 05 Aug 2024 09:32:15 +0000
asID:                     135391
IP address blocks:        209.209.84.0/24 maxlen: 24
                          209.209.86.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ca:d6:d7:fb:b5:aa:fa:fd:fd:5f:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651
        Validity
            Not Before: May  7 09:32:15 2024 GMT
            Not After : Aug  5 09:32:15 2024 GMT
        Subject: CN=35b4e897-2d7a-475c-bcdc-1d7d417b10af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f0:b7:15:63:ea:f6:90:ba:00:a7:60:4e:57:
                    8a:68:33:d7:23:fc:39:2e:ac:e1:8c:58:b3:56:4d:
                    58:65:22:8e:10:05:0c:2e:19:18:ad:5c:bc:08:2c:
                    05:40:35:77:2f:12:b9:18:fd:98:4e:31:08:94:62:
                    57:60:6d:0c:d3:ca:06:d5:65:b0:e9:71:cf:ab:e0:
                    7f:f1:61:af:fb:fb:1e:48:7b:57:fc:6f:c7:f1:61:
                    30:85:20:16:95:49:07:24:37:57:9b:d5:24:50:0c:
                    cc:f2:0b:48:aa:0e:ea:26:c2:06:6f:c5:44:65:fe:
                    42:f6:f0:d8:f2:8b:f5:4c:e7:f5:02:9a:1f:52:f3:
                    46:36:12:19:20:06:16:b5:be:bd:cb:7b:74:39:ee:
                    b3:12:f3:e9:78:ce:76:3b:9f:6b:22:f7:93:bc:08:
                    74:a6:37:30:67:56:c8:30:e7:ee:1d:1f:64:f1:d3:
                    81:00:53:84:dc:7a:20:30:86:87:95:81:a9:15:84:
                    96:b0:3f:fc:3c:16:1d:9a:84:c1:74:4f:5b:ef:ba:
                    62:c5:b6:22:9d:18:c1:e6:dd:f4:a0:00:24:d3:e2:
                    ae:af:dc:63:56:17:cd:74:0b:e8:4c:e0:89:99:71:
                    53:b0:77:ee:27:98:bb:79:d4:14:a7:e7:cf:57:74:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:42:85:46:1F:00:02:02:2F:AE:5B:57:16:01:24:18:BA:65:20:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/bcbe867b-bbaa-3ecf-a22d-f841619e6123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl

            X509v3 Authority Key Identifier:
                keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.84.0/24
                  209.209.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d9:df:32:b6:8a:cd:9c:06:d4:a8:71:bb:31:a7:b4:2e:58:
         56:be:4c:f8:33:2e:b0:b9:8d:43:bb:1c:5b:01:e3:10:8f:4f:
         05:fc:03:16:cf:d1:4c:16:59:3e:98:cb:f9:f6:3a:77:c2:47:
         85:d4:4e:fe:cd:00:3f:71:9f:93:3e:68:55:25:6b:00:6c:62:
         fd:91:51:85:50:32:85:06:bc:cb:95:48:9a:22:5a:2f:1f:df:
         ac:10:cb:68:f2:d0:24:3c:d6:1b:84:70:7a:eb:f2:b6:ec:a2:
         59:77:d3:d6:9c:6d:bf:c6:13:e0:e0:7c:06:77:c5:ff:18:86:
         ac:b5:c3:02:ec:a4:57:b5:11:bc:97:3b:c1:1e:5d:75:09:fd:
         0d:fd:8a:bb:a8:02:40:b4:d0:bb:6a:f4:7e:0d:f0:4e:b2:2e:
         a0:61:38:ed:2f:07:78:85:97:9d:1b:71:61:56:e0:38:81:2a:
         54:61:6b:4f:3c:93:9c:73:b1:f6:63:47:ba:ea:14:58:ee:cd:
         27:87:75:7b:a4:a4:b0:58:bb:0f:06:e8:a1:31:4d:4a:da:4a:
         f9:79:37:6f:32:fd:06:90:44:2e:aa:5f:91:1f:c7:62:f6:d5:
         29:f0:18:ea:f2:20:53:54:e9:89:42:1b:28:39:0f:72:55:64:
         7e:2d:55:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:27 2025 by rpki-client