Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/76b990e1-6bf0-3fd3-bcee-20300f652191.roa
File:                     76b990e1-6bf0-3fd3-bcee-20300f652191.roa (raw, json)
Hash identifier:          0Dh8MKzVyNRLOuz7tsysDRN8i3yxqmODCEQRTsQUQE8=
Subject key identifier:   3A:E3:1C:95:D2:99:B7:41:E9:60:A1:18:A3:15:FC:45:E0:D3:66:59
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F432858475D4D8CFFDBF1B16E4F898900
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/76b990e1-6bf0-3fd3-bcee-20300f652191.roa
Signing time:             Sat 28 Sep 2024 13:26:23 +0000
ROA not before:           Sat 28 Sep 2024 13:26:23 +0000
ROA not after:            Fri 27 Dec 2024 14:26:23 +0000
asID:                     19107
IP address blocks:        216.234.78.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5d:4d:8c:ff:db:f1:b1:6e:4f:89:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Sep 28 13:26:23 2024 GMT
            Not After : Dec 27 14:26:23 2024 GMT
        Subject: CN=b2c8cf1a-f111-45db-81dc-6221c6ab5f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9c:ed:27:0d:07:ac:58:cd:0c:4f:e2:74:54:
                    10:d5:e5:1a:97:22:a6:45:f4:3f:d6:c9:9a:ad:06:
                    90:06:6b:82:1b:00:63:36:b9:97:73:28:25:01:f0:
                    1f:94:90:cb:15:4d:4a:fa:6c:31:fa:78:ed:2a:04:
                    85:2f:09:08:18:41:28:cb:82:30:57:40:6f:e9:83:
                    df:ef:40:70:7c:00:94:6f:3a:39:53:4f:40:0b:f5:
                    aa:79:6c:9e:71:16:10:40:57:32:9c:f6:d9:f7:16:
                    da:f0:8e:9f:c5:84:4a:8f:ba:a5:d5:9f:78:d5:f1:
                    1f:63:b0:c5:86:a5:07:ee:6f:70:ab:61:80:92:be:
                    96:50:97:9b:d3:e4:bb:9c:5f:ec:29:c7:cf:3b:90:
                    3f:dc:be:52:cc:62:dc:7f:ea:8c:67:56:88:73:62:
                    f4:6c:1a:6d:f7:00:1b:b4:f4:6a:e2:d1:ed:1e:cc:
                    c8:da:7a:92:55:40:4c:a8:3a:d9:20:4b:04:a3:1f:
                    49:8f:56:a1:8e:46:61:a1:72:8b:c6:93:05:01:1c:
                    22:1b:73:69:34:b4:7c:55:6f:ff:b5:da:33:e2:96:
                    64:dd:5b:94:c3:8f:36:13:85:97:cc:4a:03:da:8a:
                    85:63:52:3f:7a:56:13:c8:46:e0:08:ee:d2:9c:6e:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E3:1C:95:D2:99:B7:41:E9:60:A1:18:A3:15:FC:45:E0:D3:66:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/76b990e1-6bf0-3fd3-bcee-20300f652191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:4a:5b:25:8f:1e:10:77:40:77:dc:22:89:82:24:7f:fb:71:
         c2:02:83:9d:bf:98:90:49:4e:33:7a:e8:73:e8:f7:d8:c7:d4:
         15:63:e4:24:c8:ea:26:f8:9d:ad:13:70:04:2d:e1:7a:ae:af:
         db:a2:63:c1:68:83:b7:e8:80:90:08:be:7a:fd:a4:8c:d5:ad:
         e6:80:7a:79:c8:96:76:98:9b:85:70:e9:90:6c:91:de:34:a6:
         8e:9e:b0:56:6f:7d:37:be:47:28:ee:37:f6:5a:ba:51:fb:c9:
         7c:75:95:9c:82:65:16:5b:7b:f6:17:ae:9f:96:54:27:50:8b:
         72:52:a8:08:6d:b9:fa:20:9e:2a:a0:07:37:4b:30:de:8d:dd:
         3a:cb:53:ba:71:3e:c5:ff:71:f7:3a:f7:46:b5:b9:b8:5a:0a:
         82:91:32:05:8d:1f:ab:f5:34:53:a3:21:2d:92:33:15:13:13:
         e6:e2:e6:80:09:4c:b3:df:e0:f7:4d:22:f2:d5:cc:94:12:a0:
         83:65:61:b9:07:2c:a3:34:c6:9e:28:71:7f:22:d1:14:a3:0c:
         61:d8:18:87:0d:64:20:70:70:a4:4b:07:bb:5d:bb:c2:f4:93:
         e0:60:11:24:92:4a:d9:61:1a:4f:69:72:a2:5b:7c:58:c8:e1:
         f8:dc:49:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----