Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/a2590ef8-6b92-3419-8ad8-832c96becbbd.roa
File:                     a2590ef8-6b92-3419-8ad8-832c96becbbd.roa (raw, json)
Hash identifier:          i7/NKAOM3+UWnpgd4hPaPkVi/KCrbqKzAenLLcq10nE=
Subject key identifier:   B5:22:D2:EA:C7:66:93:F7:28:7C:0E:1F:63:B6:52:AA:94:48:94:AC
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F43285846B1E9802D7D9EA18720D86200
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/a2590ef8-6b92-3419-8ad8-832c96becbbd.roa
Signing time:             Mon 29 Jul 2024 04:01:34 +0000
ROA not before:           Mon 29 Jul 2024 04:01:34 +0000
ROA not after:            Sun 27 Oct 2024 04:01:34 +0000
asID:                     834
IP address blocks:        65.87.11.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b1:e9:80:2d:7d:9e:a1:87:20:d8:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Jul 29 04:01:34 2024 GMT
            Not After : Oct 27 04:01:34 2024 GMT
        Subject: CN=37d26b1a-a15b-4555-991b-b6a33ea3177b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:e1:73:91:ad:4e:d5:68:fb:de:df:d2:76:
                    bc:28:2b:b8:09:6f:c5:96:76:1b:35:0f:54:39:69:
                    be:f3:80:8d:6f:6a:d2:25:7f:76:39:18:4c:01:21:
                    d9:23:5b:6b:b7:2b:46:81:bf:63:bc:a9:48:c7:da:
                    3b:58:be:36:ce:a7:4a:1a:0a:f6:43:c1:b4:50:9e:
                    ca:d4:ae:86:96:ed:c8:20:ee:2b:cf:6a:63:58:be:
                    9c:91:23:51:6e:f8:11:bf:cb:1d:2f:b3:5b:37:8f:
                    e6:5a:6f:c0:44:ec:19:04:95:10:1f:6e:3a:db:66:
                    15:7d:8d:4f:9f:18:17:89:ae:20:30:a0:29:b7:ed:
                    08:84:7b:a5:f4:d4:19:5d:da:2e:63:b9:a5:c5:b7:
                    f7:dd:de:c1:ac:ee:4d:71:b5:03:6e:9d:54:8f:b8:
                    31:61:5f:2e:30:46:b2:2c:1a:0e:a7:99:14:7c:b4:
                    70:d2:9e:e3:1d:74:d0:4d:2e:35:66:c1:eb:56:98:
                    e3:94:d4:99:dd:14:e0:3e:c7:08:08:a9:37:89:db:
                    e0:3f:89:19:1e:10:ac:74:d3:2e:ab:d9:0f:a7:61:
                    aa:18:8d:ca:a9:81:c8:bd:ad:24:b5:a8:39:f7:97:
                    7e:ea:45:5f:d5:0d:88:3f:5b:de:61:09:ea:0d:c2:
                    bd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:22:D2:EA:C7:66:93:F7:28:7C:0E:1F:63:B6:52:AA:94:48:94:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/a2590ef8-6b92-3419-8ad8-832c96becbbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:13:48:3c:93:3f:0a:b9:ea:1f:43:40:a9:6d:fe:84:df:30:
         7e:b6:a6:3a:4e:56:fe:b6:79:fb:e3:91:16:02:13:3a:42:3a:
         06:87:0c:95:11:c9:1b:73:99:59:94:f3:82:e2:f3:28:30:9c:
         be:01:d4:30:d8:60:6a:00:fa:04:bf:1e:6d:1d:4a:a1:b0:31:
         f6:06:71:4b:b5:74:9f:77:cd:0f:99:1c:dc:c7:53:33:f5:a3:
         05:d1:99:1a:50:33:cf:fd:64:4a:8a:47:f3:ba:95:88:29:27:
         d0:a1:2d:c2:87:28:65:0c:27:c8:d8:5e:ee:6a:8f:ee:8f:67:
         13:1a:bb:be:4f:ae:25:d1:86:9c:9c:dd:8a:61:02:0b:73:47:
         bf:df:7e:d1:9c:8a:57:f2:9c:5b:1a:b7:d9:50:a3:f4:db:33:
         98:2d:45:23:82:43:04:5f:ef:81:fb:e4:53:78:24:8e:77:62:
         1d:1a:81:c4:ca:ce:28:28:fd:59:0f:74:a4:d7:4d:54:50:0e:
         e9:15:25:a2:51:73:b5:ec:e8:c9:e7:65:66:32:9c:a5:f5:02:
         1d:67:0a:5b:82:7f:3d:04:63:cd:de:94:23:8a:09:36:ae:7d:
         a1:31:b7:fc:a3:8a:78:92:34:a3:55:4e:74:19:fc:bc:ff:ba:
         aa:ff:78:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:50 2025 by rpki-client