Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/76b0d879-da02-390a-81b7-40c86227128c.roa
File:                     76b0d879-da02-390a-81b7-40c86227128c.roa (raw, json)
Hash identifier:          s2gBh4EOEcjxb8kBFm34TmqcV3x+9GBnK2HBjg0+glI=
Subject key identifier:   B7:B3:65:B9:C4:7A:1E:BB:AD:8D:C2:3A:DE:D6:80:E3:A6:B9:F1:CF
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F43285848D0FAD174584512085C122800
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/76b0d879-da02-390a-81b7-40c86227128c.roa
Signing time:             Sat 08 Feb 2025 16:40:23 +0000
ROA not before:           Sat 08 Feb 2025 16:40:23 +0000
ROA not after:            Fri 09 May 2025 15:40:23 +0000
asID:                     212780
IP address blocks:        69.42.222.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:fa:d1:74:58:45:12:08:5c:12:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Feb  8 16:40:23 2025 GMT
            Not After : May  9 15:40:23 2025 GMT
        Subject: CN=a7e6c8ab-903d-40e5-a042-26bdbf7eec6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:95:a4:c6:ac:01:5d:26:b6:91:c6:51:98:5f:
                    e8:82:66:88:b8:b3:67:30:f6:64:15:10:c8:26:2b:
                    74:27:81:9f:4d:8b:f9:1c:ba:1c:ff:15:bc:8f:1a:
                    f4:a3:af:3f:28:b5:4d:57:99:3c:13:51:b8:64:17:
                    3b:be:9c:46:9f:c2:d9:1b:eb:0c:46:67:3d:bc:42:
                    92:49:58:60:78:f2:74:45:1d:1e:f3:7b:45:eb:04:
                    c1:f7:09:1f:f3:24:ba:f8:59:13:d6:41:b6:4a:1d:
                    18:84:c2:a1:c8:92:d3:55:a2:04:f6:f7:b8:e7:8f:
                    ec:b8:72:96:2c:d0:ec:39:dc:2c:a6:07:3a:67:e4:
                    32:db:29:91:ec:3f:ff:f4:fd:b1:80:97:e7:2a:9f:
                    3b:2a:3d:6c:59:c5:c3:28:a8:6c:ff:21:6c:9a:9f:
                    1a:21:0a:97:a4:66:63:d0:19:9d:de:03:30:22:6d:
                    47:46:48:88:46:9c:45:b0:29:c5:f5:37:63:1c:8e:
                    3a:67:3f:56:8f:d3:8e:50:84:7f:79:a8:9d:14:3b:
                    88:6c:21:b4:80:53:b1:1a:c3:74:4e:53:18:ed:4d:
                    f5:d6:f3:d0:cf:5b:2a:12:2f:b5:13:e5:9c:37:11:
                    a9:62:fa:87:3e:7b:3d:41:a2:3e:c0:4c:fa:19:90:
                    9b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B3:65:B9:C4:7A:1E:BB:AD:8D:C2:3A:DE:D6:80:E3:A6:B9:F1:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/76b0d879-da02-390a-81b7-40c86227128c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:29:92:7e:a1:d9:84:b4:b8:45:6e:da:56:31:c9:da:97:27:
         7c:dc:2d:90:b1:4b:c1:97:ec:72:52:19:cb:cb:bf:74:31:95:
         a0:95:b3:c2:3e:82:fd:7f:e4:4f:c5:11:8f:33:d4:a0:9b:13:
         42:76:97:5c:69:9f:96:33:af:2b:dd:b8:31:8e:2a:09:66:1e:
         d2:28:d9:f3:93:78:84:8d:4e:e6:ca:67:c4:a5:20:76:44:ac:
         ef:04:73:ce:51:ee:be:3c:f5:88:a8:43:b7:59:66:25:8c:25:
         ba:d6:8a:16:4c:30:d3:bf:58:64:6b:5c:99:82:33:91:bb:da:
         ac:7b:c7:f6:a9:19:f7:ee:b2:18:e4:78:c8:59:f3:aa:c3:d9:
         6d:95:34:a4:88:91:64:6d:da:f8:e9:0b:50:e9:9b:61:2e:16:
         43:24:cc:2c:5a:f0:86:0e:7b:a3:e4:d7:c7:52:05:1c:5f:40:
         e9:b3:6a:b9:f5:b4:ba:16:7a:fa:58:8c:f0:e5:e3:dd:c7:e0:
         fd:71:13:71:6b:b0:e6:11:da:91:56:30:66:cb:7a:54:4a:9f:
         17:0b:75:92:31:8d:df:64:dd:0b:3b:3b:ff:23:ac:cf:a5:84:
         35:9b:4a:de:47:8a:1c:e5:9c:83:5c:36:78:9a:60:be:b8:1b:
         e9:39:13:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 02:02:50 2025 by rpki-client