Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbd4d3fb-ecd7-3433-b740-d39c5bfd6ecf.roa
File:                     bbd4d3fb-ecd7-3433-b740-d39c5bfd6ecf.roa (raw, json)
Hash identifier:          cR1sE6tWZgIExfiR1mfn5wCuMGK9HPKEflNfsyf8spA=
Subject key identifier:   48:C7:4B:B2:B0:A8:76:24:04:C4:92:7D:3D:86:0B:FE:69:65:43:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584807AA76E67171623D0CADDD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbd4d3fb-ecd7-3433-b740-d39c5bfd6ecf.roa
Signing time:             Thu 28 Nov 2024 14:00:52 +0000
ROA not before:           Thu 28 Nov 2024 14:00:52 +0000
ROA not after:            Wed 26 Feb 2025 14:00:52 +0000
asID:                     6167
IP address blocks:        174.250.56.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:07:aa:76:e6:71:71:62:3d:0c:ad:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Nov 28 14:00:52 2024 GMT
            Not After : Feb 26 14:00:52 2025 GMT
        Subject: CN=3ed35e45-3f05-4015-9567-9f0ea5bb7361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:f8:0f:1e:28:f7:7f:95:49:e0:9a:92:60:
                    b8:d9:6a:d5:cf:c8:f7:3d:f6:e4:f9:f6:67:e3:f6:
                    d8:8d:a3:94:d9:99:51:77:cd:01:7f:47:12:dd:a6:
                    e1:70:40:2b:49:8b:48:0e:2b:ac:3c:3a:94:7f:89:
                    7d:65:67:12:93:c2:02:ae:14:d6:ca:3c:b0:6e:26:
                    ce:93:71:8c:f5:52:01:f5:0e:a5:47:a6:ea:ed:10:
                    e4:0b:a6:df:06:b1:df:6c:30:8e:de:36:d5:82:a4:
                    41:16:33:4a:5d:6d:35:b4:2f:37:b4:a2:aa:03:15:
                    24:52:b7:96:ef:1a:72:4a:78:05:0c:ec:a5:3d:a5:
                    20:ab:82:33:6b:9d:88:dc:01:c1:90:96:f3:b5:3e:
                    0c:36:76:e7:f1:a5:7b:5b:39:e2:aa:81:0c:8d:d7:
                    60:32:59:48:5e:5f:42:18:37:37:a0:0c:40:fb:ee:
                    cd:07:23:cd:d1:b9:48:9e:a1:0d:71:35:53:a7:f9:
                    34:8b:d9:c9:48:9f:74:5d:02:71:4e:eb:46:2a:ad:
                    2a:7b:9e:ab:98:3a:9f:00:91:1a:5c:c8:46:dd:ab:
                    08:5e:c0:a5:d3:22:02:52:bd:c5:20:86:75:f2:9f:
                    5b:2d:f8:79:58:91:58:30:13:93:fa:da:eb:e2:cc:
                    ac:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C7:4B:B2:B0:A8:76:24:04:C4:92:7D:3D:86:0B:FE:69:65:43:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbd4d3fb-ecd7-3433-b740-d39c5bfd6ecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.250.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:7d:0d:69:ea:a5:b1:f0:34:0f:c4:af:a5:49:eb:b7:42:bd:
         72:41:0f:9c:15:0e:5d:76:c5:6f:7f:27:04:9a:25:c6:23:2b:
         6b:e2:56:95:36:e2:10:8c:f6:6d:fd:1a:41:13:00:60:a9:6b:
         a4:c7:ff:51:9c:c6:a5:f6:8e:65:40:3f:f6:bf:9d:5a:89:09:
         6f:74:c6:13:5d:58:29:11:e7:6f:36:29:fa:93:ed:5e:30:6c:
         5c:c4:58:9a:fc:c1:0f:a4:4c:61:fb:fe:f5:df:ff:58:3b:42:
         1b:f8:56:10:77:1e:50:4a:71:7c:a9:d4:8b:ae:d8:21:ac:64:
         d6:e2:49:de:12:d6:d9:63:ec:92:aa:7a:ac:b4:0a:7d:2d:7d:
         31:67:fa:4c:d0:74:e0:01:65:ad:04:98:65:75:32:d1:82:ff:
         b9:5d:50:6d:db:03:be:0e:46:2f:20:58:6d:87:c5:60:20:bc:
         0b:bf:15:4b:2e:ab:a1:72:c3:5e:aa:43:aa:76:66:0c:cc:4d:
         53:dd:14:1e:fe:13:85:34:49:88:0a:01:c6:82:aa:4c:28:20:
         56:2c:cd:11:51:de:45:be:39:67:e7:0a:06:39:ea:04:a6:7f:
         1d:56:dc:1a:3d:45:50:e9:90:9b:be:42:6b:83:d8:39:aa:6b:
         ba:dd:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:40:56 2025 by rpki-client