Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/210efea1-3dac-3036-85d8-e30e35470273.roa
File:                     210efea1-3dac-3036-85d8-e30e35470273.roa (raw, json)
Hash identifier:          bFq4eCmZvp47+9L0rpSavOKvdSPhoN/HTWHG/u6PF5Y=
Subject key identifier:   05:98:E9:8A:3B:4F:DD:FD:56:83:35:58:84:D9:6F:4E:13:F0:66:19
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F432858428363E422336C609B1C778E64
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/210efea1-3dac-3036-85d8-e30e35470273.roa
Signing time:             Tue 11 Jul 2023 16:57:25 +0000
ROA not before:           Tue 11 Jul 2023 16:57:25 +0000
ROA not after:            Mon 09 Oct 2023 16:57:25 +0000
asID:                     11090
IP address blocks:        206.55.104.0/21 maxlen: 21
                          206.55.104.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:83:63:e4:22:33:6c:60:9b:1c:77:8e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jul 11 16:57:25 2023 GMT
            Not After : Oct  9 16:57:25 2023 GMT
        Subject: CN=1618b9cc-12ab-450d-9c40-74608d0743eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:3e:49:84:12:f5:08:5d:95:b6:72:69:f9:
                    0f:b9:c7:98:43:d3:1b:3f:ed:93:d8:00:ce:eb:1a:
                    a9:3d:2b:c8:d0:c7:f0:35:09:88:3a:48:4f:7c:da:
                    8d:93:b8:f9:62:81:2e:db:c1:59:86:c7:4a:e6:ec:
                    cb:ba:2d:f8:cd:6b:1b:84:39:f1:8b:8e:e2:89:09:
                    18:de:8d:74:da:e1:49:d2:70:cd:05:57:c5:6c:35:
                    ee:08:17:bd:a4:2a:55:b2:72:62:b8:eb:dd:78:c1:
                    c6:df:b8:b6:c7:f4:e7:60:59:aa:b1:bd:b0:8f:01:
                    27:01:91:ff:76:2e:bc:34:91:56:63:ba:c4:31:6a:
                    eb:aa:10:64:ca:b8:f6:e8:d0:01:1b:1b:a5:e9:04:
                    2e:a5:37:c7:b9:c9:fa:ed:94:7f:73:af:4f:bb:74:
                    17:5e:cb:c5:34:ec:40:02:f7:89:93:eb:cf:13:4d:
                    5c:36:e5:a2:99:43:65:38:1f:b8:20:c6:29:05:93:
                    a2:3d:c9:01:7d:9e:b6:bc:30:a5:a3:21:fd:c9:72:
                    b2:7e:4c:e2:68:bc:6c:51:e8:5e:f8:66:39:60:62:
                    e5:2e:e9:9f:f2:19:b4:ec:d0:4d:d3:27:f3:11:58:
                    0c:73:b4:09:bf:c3:f9:c4:06:09:ba:06:08:20:9b:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:98:E9:8A:3B:4F:DD:FD:56:83:35:58:84:D9:6F:4E:13:F0:66:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/210efea1-3dac-3036-85d8-e30e35470273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:cf:c0:48:f7:7e:e3:6f:80:42:cc:d4:4b:32:64:a1:9d:7d:
         53:4f:a5:93:58:9b:54:34:50:2d:ed:45:e6:b7:fd:82:7b:da:
         98:22:b7:9f:b8:64:42:d9:c9:9f:b6:6b:8b:33:c8:21:de:1c:
         7b:70:a4:bb:5f:a6:4a:74:a7:82:d7:d3:9b:cd:eb:95:3d:57:
         7f:87:b8:94:5a:f0:f8:37:fd:8f:80:7d:ab:40:a8:78:e7:60:
         d3:41:fe:38:63:ac:91:e2:87:6a:94:b8:87:3b:a1:68:f3:74:
         99:bf:8c:dd:9b:7c:c1:a8:36:4e:04:9a:59:25:bd:32:9e:69:
         89:21:74:29:f5:11:81:e9:c5:5e:18:4a:7d:34:26:5a:4b:3d:
         9a:2a:38:15:1f:ce:13:b8:ea:5e:a8:d7:f4:e2:36:7d:2f:23:
         7a:06:20:f5:c6:55:97:32:f2:e4:d2:fc:a4:22:5b:6d:0a:65:
         e7:81:f2:3e:6f:99:7d:ec:56:ed:8e:b5:41:52:9c:00:3f:4a:
         6e:ff:19:6f:2b:2b:86:81:6a:dc:2b:34:c5:38:64:38:94:b9:
         e8:65:ac:5d:8f:c1:0b:9a:da:4e:86:fa:e7:ed:bd:4b:3a:4b:
         f9:97:48:a6:97:ae:dc:80:bd:12:b5:63:bf:bb:f1:a9:1f:46:
         6c:83:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:36 2025 by rpki-client