Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/308721ae-8161-3d21-a223-5fe0fd3f05d3.roa
File:                     308721ae-8161-3d21-a223-5fe0fd3f05d3.roa (raw, json)
Hash identifier:          wXsNEVBX8Y+dQBsp1cMkCMvGMfNaLu9owvDbeD485WY=
Subject key identifier:   61:E6:AF:17:B5:96:B2:B8:58:10:4B:05:C8:0C:A6:8B:38:89:00:8C
Certificate issuer:       /CN=644bdcac-05fd-4dd5-adbd-9dbd2fb295c4
Certificate serial:       010D0C9F432858439249CFD25C0750D9F6FC50C0
Authority key identifier: 60:17:08:15:3B:F0:7A:BA:18:96:C4:50:13:84:C4:35:25:52:F0:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/308721ae-8161-3d21-a223-5fe0fd3f05d3.roa
Signing time:             Mon 16 Oct 2023 17:48:56 +0000
ROA not before:           Mon 16 Oct 2023 17:48:56 +0000
ROA not after:            Sun 14 Jan 2024 18:48:56 +0000
asID:                     20467
IP address blocks:        205.203.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:92:49:cf:d2:5c:07:50:d9:f6:fc:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=644bdcac-05fd-4dd5-adbd-9dbd2fb295c4
        Validity
            Not Before: Oct 16 17:48:56 2023 GMT
            Not After : Jan 14 18:48:56 2024 GMT
        Subject: CN=160c8588-ae55-4204-bacc-caec05f90a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fe:23:e6:94:5a:37:e3:89:aa:d9:ee:00:92:
                    c8:01:97:8e:e9:ff:b1:97:2b:ee:8e:15:cb:61:b1:
                    cb:88:47:a2:b3:f1:04:94:e2:9d:cf:a8:22:cf:e6:
                    84:4b:1e:d4:d3:12:e0:29:e4:a6:83:bc:9c:6a:8b:
                    4a:92:b1:74:87:79:b4:44:d1:e7:3d:95:e8:74:2a:
                    02:40:0d:3b:51:51:ea:7a:2a:8d:54:0d:74:f1:50:
                    c9:78:3c:4f:64:6d:67:ba:fe:30:ab:75:40:6b:7e:
                    27:79:f7:3a:cb:90:7e:2e:4c:5c:17:aa:4a:4f:52:
                    f0:ca:3e:67:ed:69:2d:bc:ea:6f:50:32:95:f4:a7:
                    7a:46:c4:31:5e:45:66:6d:3e:57:24:c4:cd:35:44:
                    a8:4f:4f:67:6f:40:c4:f4:14:aa:03:d5:9b:c3:28:
                    29:e1:9f:60:1e:54:96:36:f8:6a:d2:2a:c7:de:c8:
                    a1:05:c8:53:e1:c3:5a:e0:70:99:c5:ff:c8:f4:8e:
                    07:1c:2c:2e:44:41:ec:ef:60:10:79:9d:6e:6f:7b:
                    7c:c5:5c:20:5e:96:7b:98:0a:11:67:72:8b:be:16:
                    b9:91:10:ac:c2:c6:1d:e2:f4:b4:78:07:87:25:fd:
                    67:27:7c:96:68:a4:a6:04:23:51:ff:c5:ff:6e:5e:
                    82:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E6:AF:17:B5:96:B2:B8:58:10:4B:05:C8:0C:A6:8B:38:89:00:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/308721ae-8161-3d21-a223-5fe0fd3f05d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.crl

            X509v3 Authority Key Identifier:
                keyid:60:17:08:15:3B:F0:7A:BA:18:96:C4:50:13:84:C4:35:25:52:F0:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/644bdcac-05fd-4dd5-adbd-9dbd2fb295c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.203.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:0e:ec:f3:7d:f9:15:a0:f6:e3:e7:62:25:a1:e6:c0:02:3b:
         79:25:2d:99:ae:9a:77:32:4d:ca:65:93:5a:51:27:fb:79:ef:
         95:8c:22:24:88:86:71:45:89:af:3d:58:ec:64:ac:47:64:30:
         86:ba:91:ce:ff:c4:53:39:3d:13:e3:6c:a9:bc:a6:ab:24:cb:
         13:2a:52:eb:61:2f:7c:4e:f8:90:78:1f:1a:5d:49:eb:ba:a9:
         d9:4e:0c:c9:65:55:55:f5:eb:d0:ac:e2:8f:da:59:14:23:af:
         f5:dd:37:f9:04:c7:b1:02:30:e4:fd:dc:1c:23:9e:6c:55:e0:
         44:85:e1:2e:85:3c:d6:eb:55:fc:b5:2b:6c:38:37:18:c4:59:
         32:58:0d:82:ba:8a:08:24:55:aa:98:98:08:3e:d7:09:7b:42:
         be:eb:7d:66:36:9f:a1:72:a4:8e:4b:79:95:54:05:e7:72:b4:
         f8:6b:e5:97:27:16:b1:6c:a2:30:8e:f7:42:09:83:c5:e9:72:
         5b:a3:cd:e6:86:bf:61:fe:ba:5a:f6:ca:b6:7d:01:ca:01:a7:
         ac:33:4e:0b:dc:d2:0d:8f:b0:b5:39:b4:b3:db:aa:ab:73:ae:
         91:3a:40:79:9b:c7:2c:45:88:ed:b3:b5:2a:d1:21:b6:81:e6:
         db:f5:88:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:30:31 2025 by rpki-client