Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/62008a20-acf2-3380-b35a-f3e59aa5e1cf.roa
File:                     62008a20-acf2-3380-b35a-f3e59aa5e1cf.roa (raw, json)
Hash identifier:          iMahvnFVLETk7vQdSqFoB2As7sjU+JXkGZFYe9GddQs=
Subject key identifier:   2D:F8:2B:CF:E6:84:27:DF:0E:28:9A:4C:2E:FF:04:63:38:46:00:50
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328583AA7BE01010F7982A3D2F0C540
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/62008a20-acf2-3380-b35a-f3e59aa5e1cf.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36040
IP address blocks:        104.237.189.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:be:01:01:0f:79:82:a3:d2:f0:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=a2909b10-08af-4e02-9dc3-4429dac2b2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:98:95:ba:cf:47:36:cb:21:14:f2:8d:4a:bc:
                    70:d9:ef:c3:52:bb:2b:5d:92:15:e6:f2:ac:72:5d:
                    41:43:c9:31:b2:e6:4f:2a:79:22:cf:52:29:ee:39:
                    ef:55:28:35:f6:58:77:41:4f:de:f9:3a:f4:5b:7c:
                    60:b9:27:8e:3b:21:61:89:78:2a:7b:1b:54:95:0f:
                    b9:8c:52:fc:7c:b8:1f:3d:e2:b9:39:bf:45:9d:8b:
                    2c:6e:f2:90:02:9d:cf:d9:4f:97:6f:6a:dd:e5:43:
                    93:b2:e9:e8:0e:9f:ea:3c:c1:34:4e:b7:2c:d4:1c:
                    b4:a9:e5:8d:c9:6f:6d:e8:e4:df:87:97:b8:d4:38:
                    f6:7b:22:c3:f1:d4:61:c7:40:d7:f3:d4:cd:92:ca:
                    b1:c5:3d:97:da:4e:f4:bb:0a:26:95:4f:36:d8:d0:
                    41:3f:aa:b7:0f:2e:0f:45:f7:d2:ff:57:bd:70:bd:
                    8a:8c:72:a2:29:b4:0c:10:99:96:7f:cb:74:ae:09:
                    77:f6:77:63:a2:7c:02:24:3b:bc:4b:6c:e7:df:d5:
                    3d:c9:56:5d:c4:7b:0e:cc:59:ea:25:d3:e7:e1:bd:
                    7b:b3:39:e2:15:aa:70:4b:7d:9e:03:3d:aa:9e:c1:
                    76:6a:6f:b8:97:a5:ef:8f:55:c1:58:5e:c6:59:ae:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F8:2B:CF:E6:84:27:DF:0E:28:9A:4C:2E:FF:04:63:38:46:00:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/62008a20-acf2-3380-b35a-f3e59aa5e1cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:01:0e:59:55:de:46:2a:96:c5:61:20:6a:8b:f5:29:91:79:
         41:30:3a:ca:50:16:fc:0f:89:83:a1:1c:cc:d3:7e:a7:1d:62:
         06:29:0f:46:eb:14:71:30:d4:69:a2:29:0c:67:b9:e6:4b:64:
         d4:7e:88:6e:20:58:d8:a1:41:df:7b:2f:09:18:7e:1b:7c:49:
         08:b6:4e:60:a0:30:55:97:45:40:0f:ac:0e:5e:24:bc:6b:af:
         3b:54:ec:9e:bc:d7:8e:f5:39:a9:d6:23:19:93:9d:94:f3:d3:
         34:2d:db:b7:54:d7:cb:de:0a:f5:5d:8d:38:d5:16:0a:68:ce:
         11:d4:bf:fc:9b:fe:70:bf:65:15:88:93:e0:e0:f8:02:fd:b1:
         c1:2d:c2:c9:5e:b3:16:04:e6:4c:07:00:9d:bc:a5:3b:b7:a1:
         54:a5:b6:95:c7:97:5f:17:86:a5:f0:06:cd:0b:77:b8:17:11:
         ce:21:c0:c5:af:01:40:2d:78:77:08:f6:28:3c:00:d8:14:6a:
         5c:91:67:1a:ba:9c:aa:ea:fa:c7:58:62:64:47:36:28:bd:d1:
         fd:5a:9e:33:9b:c9:02:0e:4c:4e:b9:d9:01:e4:f2:14:88:ba:
         7c:aa:a9:54:7a:fb:5d:1b:46:b8:d7:89:39:65:48:31:be:ae:
         73:23:6c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:22:25 2025 by rpki-client