Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/d57b9fe4-52b4-36de-a5b7-ca6a2226dae5.roa
File:                     d57b9fe4-52b4-36de-a5b7-ca6a2226dae5.roa (raw, json)
Hash identifier:          dIqowfjs06Vy05lYw0hlgcp9i1aAPX8pFGTqCihGBZk=
Subject key identifier:   BC:D1:18:FF:BF:7C:F2:B9:32:21:06:0C:69:0A:2F:CB:0D:B9:5F:91
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328576D51CC73C042CFC17377AAF285
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/d57b9fe4-52b4-36de-a5b7-ca6a2226dae5.roa
Signing time:             Wed 22 Jul 2020 17:55:58 +0000
ROA not before:           Fri 17 Jul 2020 04:00:00 +0000
ROA not after:            Tue 25 Oct 2022 04:00:00 +0000
asID:                     812
IP address blocks:        65.97.192.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:77:aa:f2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Jul 17 04:00:00 2020 GMT
            Not After : Oct 25 04:00:00 2022 GMT
        Subject: CN=df9810c1-b70c-490c-a614-4cd9ba355925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f6:9a:b8:4b:a3:be:30:f9:3c:d3:32:2a:73:
                    2e:7b:d4:5d:8d:10:3e:f4:56:61:fc:e9:aa:fa:09:
                    9b:7b:25:0b:62:7d:6f:84:f0:b0:04:37:41:4a:9e:
                    46:ac:c7:fd:e7:b8:87:b3:b0:7d:7e:43:14:0c:55:
                    b3:fe:99:fe:69:5d:ab:0b:26:8d:99:3f:d4:34:99:
                    8a:85:21:75:e1:25:c6:d9:d1:70:9b:2b:05:bf:70:
                    c8:aa:5a:e0:85:d4:22:2c:9e:d1:95:51:9e:89:ce:
                    b6:f6:2c:43:d3:a2:6a:c3:00:14:03:20:64:07:74:
                    8e:bc:f3:11:23:1b:47:5e:99:18:e9:40:56:b4:b3:
                    aa:26:08:5e:49:f8:a2:f4:f3:62:85:9a:8a:58:fe:
                    b7:38:bc:e2:85:f5:7d:28:ba:de:d4:53:52:35:7f:
                    45:ba:f1:53:e1:90:f9:13:ae:27:a0:6f:b0:f3:c1:
                    d8:52:96:f7:78:06:7b:a4:6a:f0:60:93:ce:32:12:
                    3b:8c:a1:15:22:ce:08:5e:e8:12:cc:e6:e9:12:2b:
                    74:30:d2:d1:75:23:d4:bf:e8:53:f7:e7:10:8c:36:
                    15:d7:7e:03:15:4c:67:ae:76:41:cd:f8:b0:af:4c:
                    4f:49:0a:cd:c6:4d:f4:9d:d6:24:2a:2d:7e:0f:bf:
                    f9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D1:18:FF:BF:7C:F2:B9:32:21:06:0C:69:0A:2F:CB:0D:B9:5F:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/d57b9fe4-52b4-36de-a5b7-ca6a2226dae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.97.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:1e:f4:8d:27:ef:b0:8e:71:2c:0a:cd:76:0f:fd:b7:01:c6:
         c4:eb:1e:50:f3:b0:30:4f:e6:ec:9a:7a:53:f8:a9:ba:f3:94:
         f4:c9:24:af:8b:87:44:b8:b3:e2:78:b5:89:cf:15:68:93:4a:
         ae:78:01:fd:bc:ba:56:42:6c:ea:c3:fb:aa:f2:37:c6:48:f8:
         e1:99:26:be:cb:23:7f:f4:3c:76:c0:07:8b:eb:53:2c:09:03:
         c7:fb:6c:11:61:18:c6:d4:7c:5e:94:8b:04:04:83:fa:f6:60:
         43:d5:97:07:60:b4:5e:a1:92:ac:dc:33:e4:af:2a:52:9c:31:
         b4:b2:51:72:81:2a:3d:77:6c:03:ea:c7:13:1d:df:02:9e:da:
         fb:ff:47:99:d9:93:e8:28:6b:96:ba:67:e8:0d:8d:e0:9a:f0:
         5a:3d:e3:b7:b3:ce:6c:ad:3f:eb:72:b9:96:0a:4b:66:3b:2c:
         b6:dd:84:95:3a:91:30:69:6d:cc:fc:13:1c:91:fd:b3:4e:0e:
         b4:75:ba:e9:fe:ad:ef:6e:72:35:a1:87:91:d8:7a:3d:0e:28:
         a5:0f:0a:32:c4:8d:2e:eb:20:26:d8:0b:28:20:cf:03:96:24:
         b6:e8:fc:68:44:c2:51:02:f7:8b:43:33:c4:82:9c:09:4a:c2:
         1b:07:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:20 2025 by rpki-client