Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/203749de-cc54-3eee-a9b2-52e8daad27e3.roa
File:                     203749de-cc54-3eee-a9b2-52e8daad27e3.roa (raw, json)
Hash identifier:          NdD0MQxyNy/eda/eDoFV3u1gS7QyyUIX2Jv415K8lWM=
Subject key identifier:   7C:AA:5E:9C:4C:53:4F:D1:82:BE:8D:92:E0:E9:24:26:21:54:2A:BC
Certificate issuer:       /CN=593f93b4-eea3-4f8b-a272-fca95f2691d2
Certificate serial:       010D0C9F43285842C444D19698B2C9BDF3489720
Authority key identifier: 97:0B:8C:B5:7E:12:DB:A2:F1:49:9A:0D:13:91:5C:1B:B6:3B:C0:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/203749de-cc54-3eee-a9b2-52e8daad27e3.roa
Signing time:             Thu 03 Aug 2023 22:42:22 +0000
ROA not before:           Thu 03 Aug 2023 22:42:22 +0000
ROA not after:            Wed 01 Nov 2023 22:42:22 +0000
asID:                     293
IP address blocks:        2001:400::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c4:44:d1:96:98:b2:c9:bd:f3:48:97:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593f93b4-eea3-4f8b-a272-fca95f2691d2
        Validity
            Not Before: Aug  3 22:42:22 2023 GMT
            Not After : Nov  1 22:42:22 2023 GMT
        Subject: CN=22d0cd2c-90c1-4c30-826c-c45685e56d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:83:e2:d0:73:af:c6:b6:af:ff:b5:8d:00:f1:
                    00:ec:4b:68:f2:73:b7:6b:f8:8c:4d:55:d6:2a:83:
                    ae:92:14:38:d4:9c:e1:47:96:83:be:03:46:41:bd:
                    d6:2f:2f:d2:8f:b5:7d:21:5c:2c:e9:61:53:83:c6:
                    da:90:47:91:68:36:6d:76:93:95:95:15:06:22:d0:
                    3a:9d:67:fe:9d:df:68:bf:6e:89:51:1f:b1:46:b6:
                    b7:a7:43:7a:2a:83:8b:8c:5b:59:4d:af:90:90:da:
                    11:64:6c:f5:0c:5d:a8:d8:c8:24:3a:fb:10:d8:df:
                    31:f3:84:e1:61:3f:e2:a6:3a:d5:c0:53:10:85:5c:
                    d7:39:30:85:8f:b4:c4:2d:99:82:1b:d5:17:c8:4e:
                    c4:81:87:27:5e:c3:4c:dc:45:f1:37:ef:f8:85:bf:
                    06:62:45:df:06:93:4e:c1:c0:e9:64:68:94:97:f8:
                    b7:b7:bf:50:8e:73:3c:94:71:f1:20:19:ae:d1:79:
                    d3:c7:b3:e0:a7:00:8d:02:3f:3c:28:80:f6:b3:a0:
                    fe:0e:69:d0:9b:3b:94:9f:b9:db:7d:58:6d:0b:7b:
                    22:2b:7d:d7:7e:4c:1b:0b:32:ed:d5:95:82:e2:1d:
                    ad:b8:bf:54:cf:4f:71:d2:25:16:45:87:4e:8f:5c:
                    87:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AA:5E:9C:4C:53:4F:D1:82:BE:8D:92:E0:E9:24:26:21:54:2A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/203749de-cc54-3eee-a9b2-52e8daad27e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2/593f93b4-eea3-4f8b-a272-fca95f2691d2.crl

            X509v3 Authority Key Identifier:
                keyid:97:0B:8C:B5:7E:12:DB:A2:F1:49:9A:0D:13:91:5C:1B:B6:3B:C0:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/593f93b4-eea3-4f8b-a272-fca95f2691d2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:71:69:be:71:b5:70:85:84:8f:ac:b3:fd:d4:13:a6:40:2b:
         e3:80:8c:7f:c1:b8:7a:27:ff:a8:ad:1d:dd:a9:1e:f9:60:06:
         b5:ff:2f:db:1f:cd:c8:10:26:bd:5a:89:86:f1:fb:1c:6f:b8:
         8c:b2:57:c1:47:ff:bd:67:9b:a9:81:2f:d4:c7:cc:d4:33:b8:
         4c:34:ca:37:bb:09:ba:70:af:d9:f1:01:64:22:5c:f3:71:b2:
         65:c8:b9:1f:e6:6b:ef:2c:c4:50:9d:19:a9:e3:99:22:dc:e9:
         e9:ad:c4:0f:19:e0:33:7e:87:92:ab:18:c5:2b:a0:eb:ff:3b:
         9b:33:8e:b4:a9:d0:dd:3f:ef:a0:e5:9b:45:b9:24:04:29:79:
         92:4a:36:99:8a:a4:b0:6b:ce:a1:0a:4e:36:96:4f:ea:7a:8d:
         0c:37:09:24:bd:e8:0e:07:77:98:36:52:9b:be:43:50:8a:12:
         70:5c:3f:e3:67:42:23:8f:07:b7:55:05:dd:02:50:0d:e7:a3:
         ee:b2:a8:af:81:fe:88:6a:85:8a:aa:40:e4:22:78:51:c6:87:
         11:50:85:e5:37:b0:f0:13:90:03:df:98:ff:10:d7:9a:ba:25:
         3d:a1:4c:7e:d8:cc:3a:46:2b:7a:ed:c8:e2:6d:b0:4b:dc:d4:
         7a:e9:a3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:40 2025 by rpki-client