Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/172bc416-c5bc-356f-9581-cd977bff1a40.roa
File:                     172bc416-c5bc-356f-9581-cd977bff1a40.roa (raw, json)
Hash identifier:          7v50uoGtzCqzgnvUtgXjxdN1WMzhjXkPdUYX29ofolE=
Subject key identifier:   AD:15:63:76:64:55:47:0B:F6:71:42:09:3C:B7:DD:E9:DC:DF:B1:C9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584807AA76B262B7060E90487C40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/172bc416-c5bc-356f-9581-cd977bff1a40.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     6167
IP address blocks:        174.250.48.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:76:b2:62:b7:06:0e:90:48:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=9fc22b33-4dd5-4f35-815f-f981461acb7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:45:df:b3:56:2f:24:66:32:d8:de:1a:12:
                    74:aa:d6:0d:dc:2d:b6:5f:32:ac:e8:0a:88:2a:b8:
                    7a:d3:23:69:f8:ef:6b:9e:32:d2:93:11:6e:7d:d9:
                    0b:14:28:4d:f0:64:b4:5e:0d:14:cb:f8:38:cb:11:
                    bf:43:d6:ad:b1:00:01:80:b6:8a:64:81:82:c9:f9:
                    46:ad:49:90:f9:c9:33:3f:bc:ec:e6:86:60:8b:3d:
                    6f:38:9c:7c:bd:ab:d8:03:61:2a:7c:6d:34:5b:cc:
                    dd:3f:3c:47:ff:b1:ca:6e:26:f3:fe:70:56:df:4e:
                    d1:ca:57:69:5c:2e:6b:48:1d:51:63:45:f8:58:08:
                    a9:f2:58:33:b0:d3:bc:f9:11:cc:2f:bc:54:09:71:
                    69:65:8c:e3:8c:e6:12:1e:af:8e:a6:65:7a:4e:03:
                    e1:47:de:cc:7a:b8:13:b3:50:bc:1a:3f:8c:3e:bf:
                    97:37:69:96:2b:8e:cf:1e:04:2f:4d:bd:d9:25:b9:
                    7a:30:eb:d1:62:7c:f6:e0:5f:58:43:4a:6b:6d:f3:
                    d4:ba:a7:5e:1a:11:fb:68:fe:8b:f5:8f:52:73:dc:
                    0b:f8:e2:7f:7c:2c:7e:f4:fc:d5:59:06:99:f1:07:
                    7a:5b:d1:85:ef:50:03:d1:72:54:c2:ac:1f:f5:74:
                    dc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:15:63:76:64:55:47:0B:F6:71:42:09:3C:B7:DD:E9:DC:DF:B1:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/172bc416-c5bc-356f-9581-cd977bff1a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:65:8e:60:28:54:34:aa:1b:26:c6:3c:95:69:94:d0:5f:f1:
         df:2a:c3:be:e6:71:18:69:96:d5:4e:ec:29:a6:64:01:4a:65:
         66:57:eb:1d:26:db:17:ba:06:47:8c:cf:6a:a2:5a:d7:b5:0c:
         81:42:73:0c:da:be:6c:6b:9e:70:cf:ad:bb:7f:5c:d1:d1:56:
         a9:9a:d9:2a:a8:06:6d:ae:f3:48:37:d6:9a:14:32:eb:36:80:
         68:1a:19:f3:d7:c8:65:73:25:9d:46:2e:cf:80:cb:e3:dd:d4:
         ce:f2:31:2a:b2:42:33:2f:e4:2d:1f:0d:5a:93:7f:15:57:1a:
         d2:8d:4d:30:b9:66:1d:a4:4b:f3:3a:f2:fb:8d:58:a6:2f:e1:
         6d:82:25:1b:4c:3b:dc:09:81:b6:b4:fd:40:e4:20:f3:8b:9d:
         bf:15:48:7b:e6:bb:ba:d7:51:6d:bd:5a:8e:1b:51:73:eb:a1:
         f1:ed:eb:a2:63:f5:46:3a:c4:fc:66:df:ce:c5:42:f1:0d:d4:
         e4:63:7f:20:b2:43:05:72:b2:f9:c1:a3:ad:37:02:c3:9c:0e:
         bd:a8:75:57:0c:3b:d6:6e:f2:6e:68:67:26:0e:80:27:4d:e0:
         dc:e3:b2:91:6d:f0:3a:8d:b0:11:8d:1a:6c:a9:53:72:a3:46:
         24:5e:d7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:10:56 2025 by rpki-client