Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619/94189332-36e4-3d8a-abdf-b51bcfefa977.roa
File:                     94189332-36e4-3d8a-abdf-b51bcfefa977.roa (raw, json)
Hash identifier:          RkhFTwtoPk+QCUMKk2yLBIZQ9uimnR8fhpMSoYUAkpY=
Subject key identifier:   0F:59:05:F6:B1:75:07:BF:6B:72:F5:D9:03:0A:4C:FC:54:BC:C7:BB
Certificate issuer:       /CN=634613cd-882c-480b-9819-1d4c1787c619
Certificate serial:       010D0C9F4328583F3AC6550DBA790D08A2B2CCC0
Authority key identifier: 66:98:D7:09:5D:6C:78:8A:23:34:53:FC:0D:67:37:36:16:91:E5:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619/94189332-36e4-3d8a-abdf-b51bcfefa977.roa
Signing time:             Tue 13 Sep 2022 13:36:16 +0000
ROA not before:           Tue 13 Sep 2022 13:36:16 +0000
ROA not after:            Mon 16 Dec 2024 05:00:00 +0000
asID:                     17060
IP address blocks:        70.39.36.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3a:c6:55:0d:ba:79:0d:08:a2:b2:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=634613cd-882c-480b-9819-1d4c1787c619
        Validity
            Not Before: Sep 13 13:36:16 2022 GMT
            Not After : Dec 16 05:00:00 2024 GMT
        Subject: CN=31b22a1f-e456-4e66-9e38-0712e1940217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:53:f4:0e:76:8a:b7:a7:7e:d7:26:9f:d5:
                    c0:2a:ae:c2:af:9c:3c:8e:7b:46:73:4c:46:09:4a:
                    62:20:70:b9:50:46:3c:ba:4c:8f:9e:63:ad:f5:ba:
                    34:9c:60:20:55:cb:cc:48:b2:c5:c3:9c:e2:a5:f9:
                    24:28:72:f4:64:91:5a:52:5b:02:58:97:d4:3c:05:
                    57:e7:d7:82:ab:c2:0e:08:fb:c0:a7:e5:e5:d7:22:
                    57:8b:f3:84:8a:89:3e:71:66:54:de:e8:20:49:8a:
                    8c:f3:c8:4a:d0:27:de:39:34:4d:fa:5a:c2:9f:95:
                    cb:2e:eb:0c:84:b5:24:cd:0a:3c:83:0d:6d:2e:9a:
                    be:da:7b:81:fc:23:29:55:b5:e6:1e:0a:52:39:a5:
                    da:1a:47:f1:63:06:5e:11:61:b0:4f:44:8d:2c:4f:
                    96:36:d3:84:d2:89:ea:bd:00:f4:4c:1e:b5:ff:22:
                    22:25:28:fb:6b:fd:ff:b1:0a:f9:e6:7e:b6:6b:b0:
                    4a:7e:b9:a3:8d:88:35:89:9c:f6:2e:19:f0:fc:03:
                    8f:43:ad:37:c6:06:d0:e1:e0:32:30:8c:0b:2e:bb:
                    21:b9:e6:60:11:3c:e6:f0:6f:df:16:0f:26:b0:1a:
                    29:66:b8:5e:78:3f:73:69:df:01:00:bb:f4:05:65:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:59:05:F6:B1:75:07:BF:6B:72:F5:D9:03:0A:4C:FC:54:BC:C7:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619/94189332-36e4-3d8a-abdf-b51bcfefa977.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619/634613cd-882c-480b-9819-1d4c1787c619.crl

            X509v3 Authority Key Identifier:
                keyid:66:98:D7:09:5D:6C:78:8A:23:34:53:FC:0D:67:37:36:16:91:E5:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/634613cd-882c-480b-9819-1d4c1787c619.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.39.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:19:4a:cb:4b:4f:5e:ff:03:b7:8c:38:fe:d2:ed:35:64:9a:
         2a:2d:10:9d:73:8f:ce:fb:34:0c:4c:4c:ab:3c:58:a8:dc:02:
         b2:ce:35:b6:20:51:d5:1f:b5:25:5d:8b:51:77:c1:e6:5c:32:
         73:2e:1e:8e:68:97:55:c4:b9:3f:7a:72:89:6d:46:2a:0c:b7:
         f6:ba:67:75:cb:59:e2:77:55:3a:75:2f:df:53:d2:e7:1d:9a:
         f0:ea:fe:f5:50:14:86:26:19:d5:ae:f5:14:5f:d7:c8:31:24:
         21:f4:b1:77:40:c7:90:6c:d0:f6:05:ed:5d:9f:7a:35:da:17:
         e7:86:ec:33:38:ff:ca:1d:cd:96:1a:98:0d:ca:6b:1d:c0:07:
         d3:db:1d:62:bc:14:0d:02:2e:2b:83:f9:38:b0:f3:a9:85:ed:
         f5:9f:6a:e2:4b:03:cc:53:33:9b:4d:e3:d7:25:58:49:df:12:
         cc:07:fe:7e:22:0b:08:8f:0d:99:5d:44:0a:d1:d6:ad:fa:bf:
         e6:4d:76:60:53:6c:cd:04:d0:63:75:3f:09:24:10:4e:9f:3a:
         46:3b:ee:ea:b6:07:27:8a:4d:8e:44:1f:8e:c7:16:4a:eb:bd:
         3c:40:90:0e:80:79:f7:8b:bb:93:1c:2c:15:0f:4d:07:65:c4:
         19:9c:4d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:15 2025 by rpki-client