Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/4ddef62c-963d-3402-90ad-20926f79da06.roa
File:                     4ddef62c-963d-3402-90ad-20926f79da06.roa (raw, json)
Hash identifier:          qojzQl1/P/z1nwNUEl5et/SRg70Sa+2XkMI47QDL/5o=
Subject key identifier:   A1:F1:A8:70:7A:58:0E:23:3B:74:17:F1:8B:4D:A1:A0:63:F5:99:9E
Certificate issuer:       /CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
Certificate serial:       010D0C9F4328584663647B8BF4B87EB0E2924D00
Authority key identifier: 03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/4ddef62c-963d-3402-90ad-20926f79da06.roa
Signing time:             Mon 01 Jul 2024 01:00:25 +0000
ROA not before:           Mon 01 Jul 2024 01:00:25 +0000
ROA not after:            Sun 29 Sep 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        66.129.228.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:63:64:7b:8b:f4:b8:7e:b0:e2:92:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6c7f6b-8168-4429-94d5-cfb14e57dd2e
        Validity
            Not Before: Jul  1 01:00:25 2024 GMT
            Not After : Sep 29 01:00:25 2024 GMT
        Subject: CN=23e1f524-cf91-45eb-825d-b502a2eb48f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:50:02:8e:8e:e1:5f:6f:96:bb:d1:2e:26:f7:
                    69:08:13:94:27:36:a4:12:93:77:b9:08:a8:41:f1:
                    b8:73:59:72:59:9e:eb:92:1a:0b:ae:65:0c:39:04:
                    6c:9e:c2:91:f2:82:50:4a:74:74:94:07:bf:43:f7:
                    8e:6c:9c:be:c7:34:95:ec:e7:20:5a:5b:36:15:db:
                    43:1c:fc:54:22:44:66:36:ce:b6:d6:89:3c:39:74:
                    49:96:9a:93:69:a4:bf:24:e6:cc:f1:ce:57:ca:2e:
                    13:b7:71:8f:85:29:da:55:e8:8d:ee:8c:63:2e:2a:
                    5d:f5:91:c4:5b:28:17:b4:78:d4:2a:c9:ff:29:a1:
                    c1:73:8c:c7:fc:4b:b0:3b:91:af:df:ac:d9:15:2a:
                    da:09:a7:1c:9b:42:df:d6:6f:45:c5:61:b3:13:31:
                    9b:22:a1:71:a8:0d:0f:4f:43:cf:70:51:00:da:63:
                    99:ac:f6:b6:02:42:a6:9d:33:83:cd:fe:a4:75:e2:
                    bb:65:ce:b8:6f:3b:c7:6f:0a:04:c9:2c:dc:50:a2:
                    1a:16:bf:59:3d:68:97:ad:b2:73:fd:8d:54:96:ba:
                    00:e8:98:d1:70:17:68:76:a2:e9:4e:21:55:f2:db:
                    a5:cf:25:2f:25:67:77:0c:3c:c8:21:e4:3a:d9:b7:
                    3d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F1:A8:70:7A:58:0E:23:3B:74:17:F1:8B:4D:A1:A0:63:F5:99:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/4ddef62c-963d-3402-90ad-20926f79da06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.crl

            X509v3 Authority Key Identifier:
                keyid:03:79:34:AC:2E:FC:50:D4:22:E4:D6:C3:93:5D:CE:4C:69:C4:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/da6c7f6b-8168-4429-94d5-cfb14e57dd2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:0b:40:46:72:a9:fe:8b:e9:a4:44:98:76:b0:d9:c8:d4:bd:
         47:16:b3:55:6b:3c:f7:94:c3:45:12:03:27:39:32:97:01:ea:
         4c:d4:20:bb:7e:de:73:30:a7:19:35:83:73:a1:62:7c:17:20:
         cf:7a:50:76:f3:07:b1:83:e0:54:42:63:b5:bd:21:6b:b6:40:
         95:08:c8:67:95:be:46:13:9e:b7:d0:71:88:be:91:50:8c:57:
         1a:94:23:ba:5b:d3:38:5f:05:4b:22:62:e3:00:0a:b3:8d:28:
         08:40:db:5c:bf:3e:08:b4:fb:39:15:4e:c9:c8:4b:3a:5d:37:
         aa:58:67:f1:1e:33:88:c4:99:0f:cf:49:ac:6a:f9:06:11:0c:
         99:1c:22:a2:d0:88:b2:3d:10:09:d0:4d:1d:22:1e:60:93:cf:
         44:3b:6d:00:18:67:fb:d2:64:b2:b9:79:c2:d2:79:cf:a4:96:
         57:dc:49:e8:d5:24:bc:72:15:18:ad:17:37:53:f6:d6:d1:5f:
         dc:14:2a:05:f9:5f:9f:1f:3d:9d:8b:08:0c:1d:6a:78:47:e6:
         25:34:6e:65:37:1e:7d:cd:b5:c9:26:70:f2:1f:f0:f8:bb:dc:
         90:2f:f2:f4:82:7d:ae:2b:45:86:3e:1f:5e:9e:32:ff:52:23:
         ac:92:03:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:32 2025 by rpki-client