Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e9764f44-6bd4-3dec-8fcc-2bbb82f41a4b.roa
File:                     e9764f44-6bd4-3dec-8fcc-2bbb82f41a4b.roa (raw, json)
Hash identifier:          alMy1Xk2auVqNIGZAb+xxiXNwKaHBkhrgyaHvkyLUA4=
Subject key identifier:   13:57:24:6B:90:4F:2B:2A:1B:4F:86:FB:90:A6:8B:E4:E4:65:A5:F9
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F432858455C47EE082A8CE13A72B6EA20
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e9764f44-6bd4-3dec-8fcc-2bbb82f41a4b.roa
Signing time:             Thu 28 Mar 2024 19:05:22 +0000
ROA not before:           Thu 28 Mar 2024 19:05:22 +0000
ROA not after:            Wed 26 Jun 2024 19:05:22 +0000
asID:                     13576
IP address blocks:        66.128.191.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5c:47:ee:08:2a:8c:e1:3a:72:b6:ea:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Mar 28 19:05:22 2024 GMT
            Not After : Jun 26 19:05:22 2024 GMT
        Subject: CN=edcd3a2d-e572-4934-a120-e78c79923e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d1:8f:8e:5e:4b:d0:28:ce:49:2d:ac:73:19:
                    e2:b7:23:74:3e:e4:5f:fb:6e:79:65:7f:20:c0:b5:
                    d9:90:fd:a6:e6:4c:9a:f5:15:32:28:c8:f9:e0:99:
                    08:ab:23:78:b9:5f:45:6c:c6:ab:5c:7b:c1:2b:8e:
                    07:58:a8:7b:0d:95:70:62:4f:d7:ed:ad:11:7a:e5:
                    1b:1e:cc:e0:16:7a:18:e2:09:6f:00:ec:98:ce:a2:
                    12:27:39:01:0e:7d:01:2c:77:f1:88:72:55:21:75:
                    fd:62:56:1b:7d:7d:4b:95:c4:86:4f:5b:d7:05:95:
                    f9:b1:56:0e:88:2f:0f:16:38:53:97:d1:07:86:0a:
                    33:f5:6c:84:24:bd:f4:43:bb:50:e9:6c:b3:ed:a4:
                    de:7e:1b:2c:f0:7f:e0:82:a4:b9:94:9c:94:75:61:
                    4e:6b:f6:d2:e3:94:42:6b:f0:01:d3:c1:75:47:8b:
                    05:f8:f9:d9:81:b2:97:2f:cc:f5:28:84:c7:7d:80:
                    af:0b:7b:65:0b:ef:94:74:c0:d0:93:32:ef:79:c5:
                    1f:81:0f:9a:67:cc:97:ca:80:0a:02:27:3d:9e:97:
                    e4:42:f3:a5:79:bc:9b:87:b0:1a:0e:a4:c2:4d:a2:
                    b6:d6:07:be:58:b0:55:54:7f:29:c2:70:b7:33:14:
                    2a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:57:24:6B:90:4F:2B:2A:1B:4F:86:FB:90:A6:8B:E4:E4:65:A5:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/e9764f44-6bd4-3dec-8fcc-2bbb82f41a4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:0f:22:c9:fd:72:3a:e5:5e:68:f6:1a:d1:a2:4c:dd:11:4a:
         72:16:91:37:de:2f:55:14:80:95:8f:38:ae:5f:e4:d9:58:99:
         3b:c9:2f:00:89:46:09:d8:38:fc:e5:71:c8:ff:a7:ea:21:d9:
         c1:b0:4a:b0:13:0c:1f:01:00:ad:8d:97:da:c0:6f:07:32:62:
         15:77:fb:3a:45:92:6e:2c:04:2a:8e:18:69:b9:85:ac:5e:0e:
         77:88:c7:14:08:d3:a0:ca:94:ff:24:cb:91:0d:0e:ac:67:93:
         bf:d3:59:09:82:51:9c:6d:c2:71:63:5f:7b:6c:21:c2:83:62:
         bd:d5:dc:ea:7e:8a:ac:ef:b8:af:2a:30:2e:8b:3e:bf:1d:41:
         28:76:1d:3b:7b:47:29:09:04:5d:9a:d4:78:17:b1:33:85:97:
         f6:da:16:a7:28:9a:a6:be:f4:01:04:31:13:1b:32:38:66:ad:
         df:96:4e:ce:11:03:f5:f6:f9:15:da:32:80:9f:97:be:68:97:
         ea:71:a5:b3:d1:43:93:10:42:90:49:43:f6:af:a2:16:c8:fd:
         65:62:5f:a7:f7:9d:2c:e6:92:67:0e:64:72:4d:66:63:63:01:
         cc:21:fe:26:b7:8d:1c:0b:72:19:01:34:ca:5e:0b:54:6e:be:
         ba:79:c1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:07 2025 by rpki-client