Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c749c44-9613-33f0-9fbe-454bdd487f47.roa
File:                     8c749c44-9613-33f0-9fbe-454bdd487f47.roa (raw, json)
Hash identifier:          LXKhFrpTucIwQ/bkXMBAxJJ6AWHM50+uMbyA1pLZj+w=
Subject key identifier:   ED:21:AB:B8:12:D5:48:89:5C:3E:B4:80:12:6D:40:3D:B3:03:E0:81
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C261D94DBFCB9050CA300D4C
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c749c44-9613-33f0-9fbe-454bdd487f47.roa
Signing time:             Mon 03 Feb 2025 11:10:52 +0000
ROA not before:           Mon 03 Feb 2025 11:10:52 +0000
ROA not after:            Sun 04 May 2025 10:10:52 +0000
asID:                     30036
IP address blocks:        173.24.84.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:61:d9:4d:bf:cb:90:50:ca:30:0d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  3 11:10:52 2025 GMT
            Not After : May  4 10:10:52 2025 GMT
        Subject: CN=b2e82438-2972-4b8b-ba2e-11548aed03da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fe:8f:02:ea:57:3b:b4:4d:8e:0b:bb:2e:13:
                    e7:83:42:80:44:35:4d:e3:78:22:32:2e:a5:61:30:
                    6a:5c:1f:a2:78:94:a4:e5:09:75:67:85:08:84:22:
                    fe:e4:fc:e0:76:92:49:c7:e1:7c:4a:a7:b9:66:b9:
                    f2:81:74:45:b1:f6:5b:4a:52:58:a3:68:b7:7f:f4:
                    f0:db:3c:0c:76:a8:d8:e1:bd:d5:7e:af:9f:eb:f2:
                    d6:b6:2c:36:36:9f:1f:53:e0:8c:e2:ca:bc:7b:bb:
                    f5:89:dd:e0:92:6d:e7:2c:e3:e9:75:1a:fe:86:6e:
                    26:a3:d2:ff:89:98:b7:f1:f1:24:3c:71:55:ef:4e:
                    12:a8:00:cf:f2:f8:cd:27:f3:08:93:44:38:22:02:
                    5c:1a:5e:f1:1f:54:f5:56:31:a6:97:9f:06:08:d7:
                    28:67:10:9b:dc:33:78:f8:7a:7f:d7:5c:93:01:7c:
                    f9:48:33:fb:5c:c2:7f:f1:bc:51:10:9c:ac:4b:e2:
                    30:20:7a:b0:9b:15:90:9a:d2:3a:53:0b:ee:18:14:
                    fc:9c:01:52:6c:f3:b3:cf:00:e1:80:fa:62:9c:fb:
                    ae:56:85:9b:5b:72:37:ae:37:34:6e:c2:ab:73:1d:
                    47:a5:83:e7:e8:cb:df:98:f3:04:39:ca:15:3d:87:
                    b1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:21:AB:B8:12:D5:48:89:5C:3E:B4:80:12:6D:40:3D:B3:03:E0:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8c749c44-9613-33f0-9fbe-454bdd487f47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ce:0a:b9:ac:48:07:24:64:07:5b:cc:c5:f0:5c:36:d0:c5:
         19:d6:26:13:9c:3e:f6:ca:ed:3b:d7:93:d6:47:e9:11:ae:36:
         a6:29:5b:d0:52:ca:19:1a:49:88:fc:fa:03:6a:f0:cb:49:9a:
         c6:97:dd:16:e3:1c:b1:bb:5b:0f:2b:8c:99:68:0e:97:79:10:
         1d:c0:fc:f9:2f:5a:7e:9a:7e:75:06:7c:6f:27:11:59:b8:f2:
         1f:9c:88:e0:8b:48:80:fb:dc:e4:b6:a9:fb:31:0f:1d:26:6a:
         82:37:98:a5:7a:5f:d5:66:66:63:0d:fd:ee:11:55:44:9f:d2:
         de:21:46:30:08:9c:70:2f:dd:a9:18:32:14:c7:80:89:53:23:
         e1:88:53:92:7d:f3:be:ea:8c:38:d8:b4:f7:56:5a:b5:24:17:
         e8:d2:e7:33:8c:55:4f:56:0b:b2:32:c1:9f:f7:e2:f3:ce:fd:
         31:fe:2d:2c:cd:3b:5f:43:ef:ff:29:f9:29:f6:bc:46:d0:56:
         94:2c:7e:9c:97:a0:2e:f2:26:20:b6:36:4d:ba:1a:76:85:81:
         a3:bf:52:c9:ac:0e:51:30:ae:9c:4d:96:ec:ed:89:cc:96:81:
         bc:60:f0:9e:31:6f:02:1b:59:e7:b4:d3:33:b3:6c:e0:0e:c8:
         fa:f9:78:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:39:01 2025 by rpki-client