Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3139392e3232342e37372e302f32342d3234203d3e2033353933.roa
File:                     3139392e3232342e37372e302f32342d3234203d3e2033353933.roa (raw, json)
Hash identifier:          LoSiNuE4FUwv0cucZY816tmzh/rl4B3laXGi2QY0VdU=
Subject key identifier:   66:22:E3:75:4A:58:9C:35:1C:35:8D:CB:53:4F:40:B5:95:A1:35:A1
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       174149CDED249CA6AFDFC6B7007D8334F1881734
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3139392e3232342e37372e302f32342d3234203d3e2033353933.roa
Signing time:             Thu 26 Oct 2023 04:56:10 +0000
ROA not before:           Thu 26 Oct 2023 04:51:10 +0000
ROA not after:            Thu 24 Oct 2024 04:56:10 +0000
asID:                     3593
IP address blocks:        199.224.77.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:41:49:cd:ed:24:9c:a6:af:df:c6:b7:00:7d:83:34:f1:88:17:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Oct 26 04:51:10 2023 GMT
            Not After : Oct 24 04:56:10 2024 GMT
        Subject: CN=6622E3754A589C351C358DCB534F40B595A135A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:74:b5:ac:6d:de:49:78:1d:c6:82:a8:a3:d7:
                    72:6f:42:d8:01:4f:d3:f9:93:cf:7b:1b:9e:7e:aa:
                    19:3f:e3:8c:39:ff:b8:b0:7a:87:02:89:57:ef:e6:
                    70:10:ac:fb:69:ba:3b:b6:fb:46:90:08:3f:44:35:
                    8d:bf:f0:e2:49:b6:8a:62:4b:27:50:83:3a:de:43:
                    be:5d:61:9f:5a:f2:e0:3b:f4:77:32:e8:c8:64:1e:
                    8d:ed:80:50:e3:26:93:53:a4:02:d9:75:32:3a:d9:
                    71:b9:d6:e1:8a:ae:0e:62:f1:7a:23:03:25:fb:df:
                    25:ff:88:5d:c1:10:93:2b:a5:8f:d5:36:90:fb:a4:
                    15:cb:f0:5a:33:8c:80:db:f4:4b:1f:44:ca:8b:06:
                    9d:17:0d:77:d7:fe:af:73:df:d3:f3:ac:4b:fa:bd:
                    9e:9c:14:bc:88:a9:dd:30:60:f3:83:fa:40:1a:b1:
                    34:b2:fc:b0:a3:56:d1:24:e5:26:c2:4f:13:2a:7b:
                    06:55:08:81:c4:81:22:28:52:95:e1:ba:b7:b8:5c:
                    b5:2f:a2:43:34:f1:d2:1d:f1:19:d2:64:69:a2:b2:
                    a3:30:48:ef:ca:5f:87:3e:08:f0:00:6d:73:57:b0:
                    df:06:d9:b1:5a:cd:f0:4a:23:be:ad:d5:81:ae:35:
                    92:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:22:E3:75:4A:58:9C:35:1C:35:8D:CB:53:4F:40:B5:95:A1:35:A1
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/3139392e3232342e37372e302f32342d3234203d3e2033353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.224.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:d2:75:f8:b7:d6:9b:38:89:de:47:bf:f8:0a:5c:2a:a6:d1:
         d4:8b:3d:d8:45:11:60:15:88:46:59:a5:6a:89:48:99:05:3e:
         9e:52:04:c0:d5:23:a0:19:ef:e0:57:79:d5:51:87:2e:7d:38:
         36:3f:12:90:47:b6:aa:90:50:31:12:3c:4a:d8:79:2e:d5:21:
         12:d1:78:79:ed:a6:da:c9:64:60:b9:f6:30:4c:3e:9c:fa:d9:
         e4:e8:04:0a:7c:12:34:87:a2:21:3e:a4:fc:ed:56:f3:41:ed:
         29:d6:70:f8:84:ab:a0:8c:f1:e4:15:a7:91:ff:f5:4f:1b:d9:
         e1:31:6f:c9:32:10:a4:bb:07:9e:b6:10:30:5e:de:98:3e:83:
         3c:64:62:66:ff:9d:b8:8f:30:02:cf:49:d3:a5:d6:5c:14:6b:
         9b:9f:9f:5e:eb:9f:06:9b:97:9c:d4:13:1c:06:6a:0d:93:7b:
         4d:6d:ed:b9:60:35:f3:77:4f:a8:6d:c2:65:06:b3:78:33:1d:
         fc:47:96:99:e6:c1:74:0c:b5:be:02:cf:a4:a4:65:aa:0c:fe:
         b1:9b:9f:fb:00:12:1c:da:b6:17:a5:54:d1:1f:3b:a5:4e:5b:
         be:f1:ca:c5:61:06:4e:d8:af:fb:ae:45:a2:d9:cb:95:2a:c3:
         5e:3b:ea:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:32:17 2025 by rpki-client