Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ed631938-d08b-377b-a379-8be8827ab4a6.roa
File:                     ed631938-d08b-377b-a379-8be8827ab4a6.roa (raw, json)
Hash identifier:          bAk50fvvRBtMCA9ov5iF1dkJr5cAdNE8pv4OxSmyyqc=
Subject key identifier:   F2:21:C2:26:39:E9:0A:B8:54:86:84:00:4F:44:CE:57:AD:3F:E4:29
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285847DBC88F480FCE9E810DA57C00
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ed631938-d08b-377b-a379-8be8827ab4a6.roa
Signing time:             Tue 12 Nov 2024 20:46:05 +0000
ROA not before:           Tue 12 Nov 2024 20:46:05 +0000
ROA not after:            Mon 10 Feb 2025 20:46:05 +0000
asID:                     7018
IP address blocks:        69.73.151.0/24 maxlen: 24
                          72.9.234.0/24 maxlen: 24
                          72.9.236.0/24 maxlen: 24
                          72.9.243.0/24 maxlen: 24
                          75.127.73.0/24 maxlen: 24
                          75.127.76.0/24 maxlen: 24
                          207.210.109.0/24 maxlen: 24
                          207.210.125.0/24 maxlen: 24
                          216.180.244.0/24 maxlen: 24
                          216.180.246.0/24 maxlen: 24
                          216.180.252.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:db:c8:8f:48:0f:ce:9e:81:0d:a5:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Nov 12 20:46:05 2024 GMT
            Not After : Feb 10 20:46:05 2025 GMT
        Subject: CN=b1b5b475-7df3-41b9-85c2-188d1067f937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cf:c9:1d:2f:96:3e:5c:24:b0:51:dc:7c:da:
                    c3:db:39:05:31:02:f5:02:25:4c:e2:32:d8:98:e6:
                    25:9b:a2:b2:32:56:60:45:5a:32:fa:de:dd:a2:a1:
                    53:fd:a6:4e:e4:1b:d4:39:aa:45:6b:e6:47:78:df:
                    30:58:ae:42:ef:b9:40:fb:e2:70:87:48:d2:4c:1c:
                    f4:2a:19:83:c8:52:67:4b:0a:e2:4d:b0:ce:d4:20:
                    7e:1a:a3:5b:1b:38:5c:71:f1:91:90:a1:6d:b9:55:
                    c0:9b:8b:a8:0b:d6:87:4d:59:bf:e1:a4:2a:e8:c4:
                    99:11:d3:93:15:a6:98:1a:56:cd:a6:9a:68:6f:8b:
                    7d:70:3b:4c:df:8b:04:3c:a4:fe:1c:34:e7:8d:7e:
                    54:5c:be:95:99:db:68:51:19:01:20:d6:74:9f:c3:
                    d2:ee:0d:b3:61:64:75:a5:b4:eb:ee:66:e7:6b:5f:
                    0e:12:15:1b:59:ed:bc:23:f7:59:85:68:98:67:48:
                    76:d3:01:b8:78:3d:da:b0:5f:ec:5e:c1:aa:95:7c:
                    fb:a8:7d:31:25:af:a1:cc:af:8d:23:db:d8:fa:6b:
                    91:0e:6e:48:1c:8c:88:81:f0:c8:f1:25:e2:a2:78:
                    4b:f2:30:f3:b9:df:2b:c1:df:a9:ae:85:7d:78:d4:
                    06:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:21:C2:26:39:E9:0A:B8:54:86:84:00:4F:44:CE:57:AD:3F:E4:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/ed631938-d08b-377b-a379-8be8827ab4a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.151.0/24
                  72.9.234.0/24
                  72.9.236.0/24
                  72.9.243.0/24
                  75.127.73.0/24
                  75.127.76.0/24
                  207.210.109.0/24
                  207.210.125.0/24
                  216.180.244.0/24
                  216.180.246.0/24
                  216.180.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:8f:3a:6f:0a:4e:03:0a:82:37:ba:11:c3:b2:e1:94:31:fc:
         0a:99:5c:a8:78:be:d8:b8:ee:b3:a6:fa:5c:f3:c3:93:e5:95:
         70:c5:25:f6:76:f8:d2:e5:38:86:56:96:6d:a8:27:21:6c:78:
         92:56:44:bc:44:cc:ee:28:66:53:d8:a7:b0:d3:39:f9:36:b5:
         eb:a3:de:42:2b:7f:fc:00:c2:3a:11:ec:a8:c6:fc:f4:b7:64:
         77:74:a4:4d:d1:d5:5c:93:ee:79:f2:21:95:37:fe:fb:9b:3f:
         c6:2b:6e:40:23:07:5d:bf:a2:44:70:66:0a:ff:ff:1a:87:e1:
         28:f4:e3:10:de:6d:0b:7c:3e:60:02:dd:fa:b4:c5:7a:bf:ab:
         b9:f2:57:b0:10:c0:6a:fb:f5:40:ef:f4:4a:bc:67:89:7b:5c:
         f1:28:8f:9e:df:32:02:ca:df:72:b2:2e:9a:bd:cc:fa:fd:32:
         2e:4b:50:df:f4:54:d9:3c:ce:f5:d5:c2:9c:26:73:d0:24:a8:
         af:63:f5:c0:83:46:87:1e:35:dd:61:dc:90:29:2d:b2:f1:1d:
         1d:08:66:67:93:65:37:82:91:39:b5:dd:4d:f5:fe:41:0a:28:
         c3:c9:06:b4:8e:b6:fa:61:bc:86:c4:aa:04:fe:db:3f:40:cf:
         48:13:01:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:30 2025 by rpki-client