Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e606d0d3-07f3-3ad4-a4b0-85167e61a6be.roa
File:                     e606d0d3-07f3-3ad4-a4b0-85167e61a6be.roa (raw, json)
Hash identifier:          EMXjHQJnmKS8OHV7iQNwWrqcEkoKTUVO3LhZR7WWPVs=
Subject key identifier:   D7:0C:B0:B4:C7:15:90:22:6A:BA:8F:76:8B:B0:CB:DB:A5:9D:1A:00
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858475646080C8D710DCC1F2CCA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e606d0d3-07f3-3ad4-a4b0-85167e61a6be.roa
Signing time:             Thu 26 Sep 2024 01:00:31 +0000
ROA not before:           Thu 26 Sep 2024 01:00:31 +0000
ROA not after:            Wed 25 Dec 2024 02:00:31 +0000
asID:                     16625
IP address blocks:        184.84.222.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:56:46:08:0c:8d:71:0d:cc:1f:2c:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 26 01:00:31 2024 GMT
            Not After : Dec 25 02:00:31 2024 GMT
        Subject: CN=16710ba5-30e8-44be-981f-8a6d2d250895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:41:be:6f:8b:cd:d2:77:7e:d8:0a:b9:09:9e:
                    ee:36:9b:3a:fe:15:53:95:28:27:92:0d:32:81:02:
                    b3:cb:a9:99:c1:28:f9:d4:8e:44:c2:ca:0b:71:af:
                    12:85:2e:39:af:15:cc:f7:5a:61:16:ba:0d:7f:05:
                    ba:6a:85:62:0c:4d:6a:7c:c5:89:af:c9:fa:5a:9b:
                    c5:d1:8a:2e:b7:30:ce:2e:a0:b6:b7:3d:e1:0b:88:
                    93:41:4c:2c:ad:37:ce:87:21:72:94:17:35:2e:7d:
                    68:6d:a5:71:8e:28:2a:f5:c3:5c:bd:b3:41:43:68:
                    a8:86:94:4f:09:87:27:d6:95:b0:da:30:8c:17:02:
                    09:a1:c2:58:e8:52:f3:da:ec:7a:e3:c1:a7:9e:a1:
                    b1:5a:d0:3b:96:bd:87:8a:cd:7b:c7:c3:23:49:39:
                    68:c9:be:bb:3f:1f:79:8f:5b:2f:f8:25:55:05:a3:
                    15:45:84:72:b1:3b:01:0a:d4:d2:e2:3f:bb:f3:5d:
                    87:59:c6:2e:06:65:06:82:61:f7:72:8e:76:10:c1:
                    b0:66:eb:37:25:d0:4e:87:2f:14:1e:52:b4:b9:8c:
                    29:84:02:77:ea:8b:d1:95:de:9e:96:aa:dd:de:e8:
                    0a:59:da:b4:78:8b:99:59:96:b0:58:29:17:8a:35:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0C:B0:B4:C7:15:90:22:6A:BA:8F:76:8B:B0:CB:DB:A5:9D:1A:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e606d0d3-07f3-3ad4-a4b0-85167e61a6be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.84.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ae:11:ff:50:42:62:d7:b0:69:05:85:15:00:4f:a4:8d:53:
         2c:c1:df:38:9f:9f:36:fa:4f:ff:b3:e5:96:35:ed:83:5d:1e:
         a2:cb:4a:fb:0c:43:e4:f3:a0:6b:82:a9:c2:75:a3:7a:70:e9:
         64:b2:f9:6d:3d:2b:f9:2f:73:12:d1:52:05:60:ac:23:50:32:
         49:77:c1:1c:3b:f9:07:33:21:30:ed:b5:c4:24:84:d8:33:cb:
         14:3f:a0:70:b9:01:73:fe:12:ee:6b:b9:0f:7a:11:b0:ff:2e:
         cc:c4:2b:a9:ce:24:c3:4a:07:33:1d:d1:e3:81:03:72:81:fc:
         b7:10:be:92:24:fa:c7:f9:01:1d:a2:75:7b:32:b5:3c:8c:78:
         43:bd:7e:a9:96:17:9c:fb:ed:05:b4:00:39:fc:f2:38:07:27:
         f7:9f:fd:fa:ad:91:ec:7c:32:15:24:e0:78:25:49:47:c3:2e:
         c6:02:06:de:5d:fc:fa:e8:82:99:21:6d:4f:52:48:04:6b:c5:
         74:e7:c6:ba:5a:27:d8:7e:b9:fb:a7:f4:a4:85:86:96:2f:46:
         eb:c5:f8:1c:1b:ce:07:3c:59:5d:11:62:00:0e:60:f7:df:a3:
         71:84:f2:ba:1d:d6:a4:19:d8:a4:15:3f:b7:1c:47:46:11:0a:
         12:f9:dd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:19:02 2025 by rpki-client