Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e9653c01-65a1-3586-890b-aadd728a2727.roa
File:                     e9653c01-65a1-3586-890b-aadd728a2727.roa (raw, json)
Hash identifier:          olz+UYFp/yOWuC2lEAjBc/TNs9NE25dN9nv0DwL5GCI=
Subject key identifier:   72:5F:BC:2D:14:02:EF:96:0C:DF:EC:2B:28:17:77:64:28:3A:C3:BF
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285837D7013EDACBCB0870F3C7DBB0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e9653c01-65a1-3586-890b-aadd728a2727.roa
Signing time:             Mon 21 Sep 2020 04:00:00 +0000
ROA not before:           Mon 21 Sep 2020 04:00:00 +0000
ROA not after:            Tue 07 Feb 2023 05:00:00 +0000
asID:                     852
IP address blocks:        205.206.161.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:d7:01:3e:da:cb:cb:08:70:f3:c7:db:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 21 04:00:00 2020 GMT
            Not After : Feb  7 05:00:00 2023 GMT
        Subject: CN=3a4dcee4-ebc1-4f59-9243-932f977c059b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c1:e8:3b:e5:49:ec:ef:f2:f8:67:12:3d:02:
                    8b:91:6e:62:f9:e9:79:86:51:94:6c:d4:40:65:75:
                    a1:13:24:d0:a5:51:cc:2c:44:fb:43:e1:3e:b2:54:
                    49:13:e9:4a:43:e0:cd:5c:45:3c:a9:c7:d3:86:c1:
                    72:c3:74:7e:58:c7:77:f0:8b:ec:6e:d4:00:0e:9c:
                    28:5d:5e:62:f2:22:79:c7:a0:07:76:a8:9a:40:59:
                    0d:0c:b2:3d:8f:11:80:02:97:2b:d8:f2:dd:3d:2c:
                    1f:34:c1:1e:5d:ab:56:85:e0:17:d7:6c:3c:78:b3:
                    0e:06:2a:8a:5b:0f:3a:05:82:74:46:7b:de:2e:a2:
                    14:5e:29:e5:5a:96:b7:55:7c:44:f2:32:c7:61:57:
                    2f:f7:94:39:c6:9f:17:34:1e:61:ff:d5:db:ca:c4:
                    38:43:89:d4:08:61:76:cd:3f:71:1b:76:bf:3e:39:
                    45:e5:c2:19:2d:16:48:ea:be:bb:bf:64:07:72:b7:
                    b1:93:7d:9d:24:85:df:1e:fd:b6:11:aa:22:76:61:
                    1b:24:04:6b:c6:29:c6:25:5b:5c:91:09:f8:4c:f6:
                    7e:2d:e2:57:a9:52:f7:02:1a:f9:0f:ef:eb:f7:8d:
                    81:59:79:04:2b:1c:4e:6a:54:16:e7:23:2a:bb:93:
                    57:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5F:BC:2D:14:02:EF:96:0C:DF:EC:2B:28:17:77:64:28:3A:C3:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e9653c01-65a1-3586-890b-aadd728a2727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.206.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:23:ae:2e:c1:f3:73:50:3b:1a:6f:18:4f:9e:d9:fe:03:21:
         d1:4b:1a:aa:2c:e8:af:b1:dc:7a:29:fd:a8:87:8c:a6:11:12:
         ed:53:91:d8:f8:3d:b7:16:9b:fa:ca:eb:7d:3c:be:45:6e:54:
         89:1a:22:ae:56:f2:12:b1:c8:84:5c:85:1c:2b:ba:09:eb:5a:
         7b:7a:bc:cc:3b:fd:7c:4c:e9:7e:34:8b:b1:81:8e:b7:3c:56:
         18:28:84:e3:a7:03:d8:1d:53:b1:de:06:e3:e8:9b:4b:37:7c:
         96:bf:6d:3d:89:3a:ff:f7:0c:8b:80:7f:38:e9:ae:3f:d2:cf:
         49:7f:7e:ec:2a:a0:66:0a:92:f6:d5:82:a1:27:a1:ea:7a:00:
         da:cc:c2:12:c8:08:bc:e4:2e:41:86:a8:ec:f2:6a:2f:42:0f:
         06:f8:71:a6:23:c8:2e:62:3a:27:19:cd:3a:6c:b0:1c:0e:23:
         6a:27:20:cf:aa:7b:ce:72:f9:42:b1:a5:c7:77:5a:d0:bc:a1:
         81:91:c9:24:12:2e:7a:20:f2:b1:dd:38:6c:b9:99:c2:78:80:
         32:0f:14:00:1a:b3:79:4c:96:b1:13:64:e9:81:56:de:cc:d1:
         0c:8c:06:3d:76:f1:ee:ff:16:e7:b1:c0:62:7f:11:11:89:7b:
         f6:49:85:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:09:59 2025 by rpki-client