Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d92a8b5b-a0e6-3b23-a2b9-c355add286f5.roa
File:                     d92a8b5b-a0e6-3b23-a2b9-c355add286f5.roa (raw, json)
Hash identifier:          oqpQpiR0uSKuFqsIct6UGDh9rExk0xNSVcMtHoaiNfI=
Subject key identifier:   26:D0:4C:9E:53:D0:D7:C4:D5:DE:4D:4F:8E:3E:0A:C8:D9:D0:CA:FA
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858480513F2CD376DC918C61BE9C0
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d92a8b5b-a0e6-3b23-a2b9-c355add286f5.roa
Signing time:             Wed 27 Nov 2024 15:46:07 +0000
ROA not before:           Wed 27 Nov 2024 15:46:07 +0000
ROA not after:            Tue 25 Feb 2025 15:46:07 +0000
asID:                     16591
IP address blocks:        99.198.128.0/17 maxlen: 17
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:05:13:f2:cd:37:6d:c9:18:c6:1b:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Nov 27 15:46:07 2024 GMT
            Not After : Feb 25 15:46:07 2025 GMT
        Subject: CN=c15f6b6a-f812-49bd-9c05-05e223833812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8d:f1:c1:45:cf:26:a8:26:e9:bf:d1:ce:8c:
                    69:ef:9a:99:53:62:94:a0:59:ee:40:62:bb:d6:d3:
                    4c:fd:58:be:dc:f7:34:b1:74:ec:bd:30:44:6d:04:
                    48:83:df:78:0a:70:d8:d1:29:8f:9c:84:c7:36:76:
                    c2:80:c4:e5:a3:48:1a:85:be:94:cc:7d:f6:0f:16:
                    a9:09:c6:17:0b:dd:11:20:6e:cc:8f:bd:8e:07:23:
                    70:33:59:50:59:8f:b0:b6:78:a6:bf:ef:73:32:51:
                    e3:f7:b3:b1:fb:eb:eb:37:b5:db:6e:2f:a8:b3:92:
                    af:e0:81:6f:ea:97:c3:5a:74:63:8f:aa:e9:33:ed:
                    22:03:49:72:61:7b:ff:c4:cc:a4:46:ca:cb:ed:fd:
                    f9:0b:e2:c8:da:30:86:0b:78:dd:4a:5a:92:5c:81:
                    fb:a3:e0:1c:c6:ca:2a:89:6f:ac:21:2c:00:e4:10:
                    3f:92:a7:29:d8:9c:c5:28:b3:ac:91:1e:27:fe:04:
                    a5:d0:2b:3a:bb:5a:48:72:9e:66:89:d2:b3:de:2c:
                    4d:75:e4:31:fe:77:38:0b:07:f2:99:e8:45:78:a9:
                    d4:fb:46:5d:09:77:71:1c:54:47:8f:a6:de:35:95:
                    ad:0f:b5:59:ae:e1:86:a3:ed:6a:f2:e3:ab:64:a9:
                    1e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D0:4C:9E:53:D0:D7:C4:D5:DE:4D:4F:8E:3E:0A:C8:D9:D0:CA:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d92a8b5b-a0e6-3b23-a2b9-c355add286f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.198.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:0c:c2:5a:04:2d:e6:52:33:0f:97:ad:54:ca:b2:51:5a:48:
         28:b4:f3:47:6d:46:66:17:ab:e1:f6:b9:66:a3:fb:d5:86:be:
         78:77:65:82:78:58:db:d7:2d:d5:e7:25:22:a4:fb:16:f0:38:
         a5:b8:62:6c:80:be:58:40:97:b8:72:b1:ec:c3:72:ea:d5:57:
         5b:78:58:0b:c8:c9:4f:31:80:2a:16:fe:5f:6f:77:10:c3:70:
         e6:92:53:23:07:68:ef:22:98:bf:a2:de:37:37:88:04:f0:26:
         f1:d7:e7:0d:be:5c:b4:77:b2:bc:70:41:a0:30:26:91:ac:88:
         fc:a0:ce:d9:73:66:6d:c1:75:c5:41:37:f5:1a:f9:45:06:a2:
         10:c4:da:01:6d:f5:93:60:06:23:7a:59:62:34:ae:54:aa:09:
         9b:b2:ab:7f:7c:3e:6d:c7:0d:41:6a:88:0b:6f:cf:03:b8:d7:
         a9:16:4c:96:90:b4:64:be:3f:be:9e:4d:9d:d1:81:3d:ed:42:
         d7:f0:f9:0d:6e:ab:d4:24:59:be:e8:1f:ea:e0:33:7b:d6:02:
         2c:56:5e:df:5d:1c:8d:8e:6a:d5:7a:52:76:ff:48:7c:2d:4b:
         80:bc:11:c6:86:23:3d:cc:e2:c8:9a:a9:a1:62:b0:01:98:01:
         70:34:7f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:34 2025 by rpki-client