Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/0a90178e-275d-30e6-8128-05275ded95d0.roa
File:                     0a90178e-275d-30e6-8128-05275ded95d0.roa (raw, json)
Hash identifier:          i5G1ukJ1wyV105gUyNUnkELWphh/f9wRMPbdtKtXem8=
Subject key identifier:   25:A5:2C:9F:B5:55:8C:62:E4:83:08:4D:21:8E:E1:4B:4A:D6:FB:B9
Certificate issuer:       /CN=778754ac-5240-4fc0-85b4-8e68334c69e2
Certificate serial:       010D0C9F432858480644F88527FDAD45280B5D40
Authority key identifier: 92:27:67:71:6F:20:AC:78:18:51:BD:00:75:85:C4:A4:B0:D3:02:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/0a90178e-275d-30e6-8128-05275ded95d0.roa
Signing time:             Thu 28 Nov 2024 02:00:38 +0000
ROA not before:           Thu 28 Nov 2024 02:00:38 +0000
ROA not after:            Wed 26 Feb 2025 02:00:38 +0000
asID:                     377
IP address blocks:        2620:106:6008::/48 maxlen: 64
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:06:44:f8:85:27:fd:ad:45:28:0b:5d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=778754ac-5240-4fc0-85b4-8e68334c69e2
        Validity
            Not Before: Nov 28 02:00:38 2024 GMT
            Not After : Feb 26 02:00:38 2025 GMT
        Subject: CN=9d895d2d-8d0f-4e18-847a-211aa99c8410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:4b:94:e8:c5:81:71:e5:3d:8d:d5:df:88:
                    63:f7:c6:85:e7:1e:53:5a:10:d1:10:93:a2:05:7c:
                    d6:3e:82:67:a6:17:dd:99:4b:44:42:7f:d4:cc:22:
                    d2:72:2f:9b:80:8f:f2:79:81:55:3c:b8:f9:9f:f6:
                    b4:42:e2:95:35:eb:0c:ba:d7:71:46:f1:de:3b:f2:
                    3e:22:ec:37:b3:ca:0f:d8:91:66:82:2e:aa:db:32:
                    a6:5e:62:ba:3e:61:ce:0b:55:2f:4f:9b:4f:9e:7d:
                    0b:e2:30:1f:b6:98:4f:03:b7:0e:ae:e7:76:d4:f6:
                    ce:bb:c4:0a:af:05:d6:49:66:fc:ff:8c:50:b1:49:
                    cb:75:ea:d3:4f:9f:af:a8:1e:48:0b:f5:6e:0d:36:
                    8a:de:cf:f0:9b:c0:5a:46:ab:25:ef:43:8b:d0:02:
                    b2:0c:31:82:38:cc:6d:50:01:a3:fb:3a:53:55:52:
                    89:54:f1:7a:48:90:84:de:c8:77:df:6c:33:d9:ef:
                    50:8b:42:a6:13:3f:94:41:c5:d5:10:c0:ed:56:c7:
                    42:27:78:58:6f:8b:b5:9e:af:46:b5:31:de:10:14:
                    b9:8d:a4:af:48:95:35:5c:00:25:99:ae:69:3e:88:
                    c6:06:a1:83:6f:e4:2d:5b:6b:00:ab:99:41:88:17:
                    c6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A5:2C:9F:B5:55:8C:62:E4:83:08:4D:21:8E:E1:4B:4A:D6:FB:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/0a90178e-275d-30e6-8128-05275ded95d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2/778754ac-5240-4fc0-85b4-8e68334c69e2.crl

            X509v3 Authority Key Identifier:
                keyid:92:27:67:71:6F:20:AC:78:18:51:BD:00:75:85:C4:A4:B0:D3:02:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/778754ac-5240-4fc0-85b4-8e68334c69e2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:106:6008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:e8:bd:65:c3:21:8f:b1:e9:9f:f6:bd:66:01:33:75:8d:83:
         0e:da:9b:0a:5d:f2:92:0c:bc:82:ff:1e:e1:b4:3f:0e:19:19:
         45:a3:b9:e9:3d:ae:5e:c3:72:98:b6:d7:93:2c:24:43:69:18:
         86:66:93:5f:72:39:ba:a3:03:33:51:f4:f2:00:05:65:49:1f:
         ff:c3:5c:92:9e:99:d6:7c:1b:e4:4d:62:26:80:f2:ec:9f:56:
         9a:81:7b:4d:b7:04:01:61:cb:12:cf:35:1f:de:74:45:03:8a:
         d1:11:74:a7:6f:2c:ef:6c:c1:3d:f9:c2:1d:f0:e6:2d:7f:f3:
         59:df:35:da:81:a0:bc:05:fc:35:86:d3:d1:d1:c5:f8:a5:2b:
         8a:1a:0d:92:09:0f:77:61:80:84:19:9d:bc:a2:60:5c:39:c6:
         69:da:05:3e:41:59:8e:c9:90:43:28:ec:ae:8b:d7:3b:d4:c9:
         79:d6:06:c4:ca:9c:fb:91:e1:8a:13:ce:4a:dd:33:97:a1:e2:
         9d:e6:cd:e0:cf:62:58:67:c7:a3:b2:75:58:70:a3:15:d4:94:
         e0:ac:20:d7:cd:f5:97:71:cb:69:43:94:19:1d:f8:af:53:25:
         af:8e:5e:5f:60:90:b7:df:63:4c:fd:23:de:56:71:2e:7c:27:
         21:81:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:46:02 2025 by rpki-client