Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/f8d6b49a-9aad-3777-b83a-30cfb6c876be.roa
File:                     f8d6b49a-9aad-3777-b83a-30cfb6c876be.roa (raw, json)
Hash identifier:          9sFc7VfL+AOD6fZPpQnH1UF+66smyqsfUCabbt7f9LI=
Subject key identifier:   1D:C8:8C:92:C0:C9:60:33:72:01:94:90:75:12:D5:7F:34:BE:DF:D1
Certificate issuer:       /CN=85f6c3f1-956c-47fe-badb-d8e0bd20e47d
Certificate serial:       010D0C9F43285842D81425CB34E0D44EE0F6BE00
Authority key identifier: EE:AA:F6:50:8E:81:06:BD:8F:F3:55:15:64:A8:FF:1C:78:9F:E7:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/f8d6b49a-9aad-3777-b83a-30cfb6c876be.roa
Signing time:             Fri 11 Aug 2023 01:00:22 +0000
ROA not before:           Fri 11 Aug 2023 01:00:22 +0000
ROA not after:            Thu 09 Nov 2023 02:00:22 +0000
asID:                     14618
IP address blocks:        162.246.183.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d8:14:25:cb:34:e0:d4:4e:e0:f6:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f6c3f1-956c-47fe-badb-d8e0bd20e47d
        Validity
            Not Before: Aug 11 01:00:22 2023 GMT
            Not After : Nov  9 02:00:22 2023 GMT
        Subject: CN=c55c4d87-77e6-4cf4-a09d-c4c641ebd2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8e:98:87:43:16:a9:49:b1:f4:e4:2a:23:fc:
                    9c:0b:73:03:e2:52:16:82:86:55:53:4e:50:13:65:
                    29:93:85:30:00:e5:01:1d:59:22:e2:ab:12:c9:dd:
                    86:d8:4b:6b:ff:68:29:47:7a:33:48:52:55:7d:47:
                    e3:ff:27:ec:83:cc:64:59:56:46:80:d5:bb:3c:25:
                    b8:d0:bd:81:e3:36:75:f6:17:f2:ab:c2:42:79:57:
                    ab:54:7b:81:f3:1f:dd:d2:08:5d:80:d7:a6:d8:10:
                    c4:cb:6f:83:80:8b:94:eb:48:ba:ea:44:e7:0c:16:
                    86:04:58:2b:54:d4:f2:92:79:21:67:eb:a4:9a:db:
                    f9:98:6d:93:52:94:68:94:d2:1f:5d:7b:db:17:45:
                    0a:1a:d8:45:74:fa:3a:fe:0d:42:fb:76:e0:1e:19:
                    f2:b8:20:11:b3:42:00:c5:a6:fd:95:01:2f:c1:e6:
                    b2:9e:c3:47:ec:1d:9e:df:06:4a:f6:1e:8a:02:ca:
                    a4:39:70:40:ab:a3:bc:1d:6b:a5:ab:07:56:23:12:
                    65:b4:05:83:e6:7a:9e:3f:d9:13:af:3c:bd:f2:9f:
                    d6:be:c3:cb:1e:8e:48:13:50:11:52:2c:c4:62:41:
                    ed:ef:59:2d:80:7a:de:0f:fa:c6:b8:c3:1b:01:89:
                    1c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C8:8C:92:C0:C9:60:33:72:01:94:90:75:12:D5:7F:34:BE:DF:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/f8d6b49a-9aad-3777-b83a-30cfb6c876be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/85f6c3f1-956c-47fe-badb-d8e0bd20e47d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:AA:F6:50:8E:81:06:BD:8F:F3:55:15:64:A8:FF:1C:78:9F:E7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b7:3e:c5:2b:63:f1:ca:6c:8d:73:b6:8d:55:fb:d8:ca:d4:
         8b:db:a3:77:f4:17:3a:2d:7b:d5:05:13:de:c8:e5:cf:62:30:
         a6:86:f7:55:cf:eb:69:b5:74:cf:44:7a:49:1b:71:91:a1:a5:
         b9:26:ec:f0:e6:a4:96:88:99:14:f9:a0:c5:59:b4:5a:54:96:
         94:ec:7c:de:30:b1:3f:03:20:d1:94:35:18:92:dc:6b:4a:50:
         27:f4:73:19:ea:f7:b2:32:b8:3d:0a:56:fb:0e:19:1b:a3:47:
         cb:47:a6:d1:d6:3f:d9:95:08:06:16:1b:67:60:81:a8:72:3d:
         40:24:93:ef:fd:89:bf:51:76:f3:82:c2:13:27:7d:7f:76:55:
         0e:1a:1b:cd:76:94:55:3f:8f:47:69:af:76:b5:60:b8:34:42:
         e6:dc:7e:bc:6c:15:1e:99:8f:76:bd:04:6a:77:cd:f1:a6:ef:
         d8:cd:48:bf:ab:98:aa:8e:84:72:5a:81:bd:94:5b:69:b2:d0:
         49:e9:b0:3c:4f:da:0a:6e:3a:00:4a:e6:53:f0:ce:f2:ee:29:
         a2:81:4c:d1:7c:c6:ae:b1:ba:8e:fb:3e:df:46:bb:b9:ba:83:
         71:49:d3:50:4a:1e:2d:ad:11:99:ce:9c:67:97:94:e4:12:01:
         b4:b1:58:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELYFCXLNODUTuD2vgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVmNmMzZjEtOTU2Yy00N2ZlLWJhZGItZDhlMGJkMjBl
NDdkMB4XDTIzMDgxMTAxMDAyMloXDTIzMTEwOTAyMDAyMlowLzEtMCsGA1UEAxMk
YzU1YzRkODctNzdlNi00Y2Y0LWEwOWQtYzRjNjQxZWJkMmE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo6Yh0MWqUmx9OQqI/ycC3MD4lIWgoZVU05Q
E2Upk4UwAOUBHVki4qsSyd2G2Etr/2gpR3ozSFJVfUfj/yfsg8xkWVZGgNW7PCW4
0L2B4zZ19hfyq8JCeVerVHuB8x/d0ghdgNem2BDEy2+DgIuU60i66kTnDBaGBFgr
VNTyknkhZ+ukmtv5mG2TUpRolNIfXXvbF0UKGthFdPo6/g1C+3bgHhnyuCARs0IA
xab9lQEvweaynsNH7B2e3wZK9h6KAsqkOXBAq6O8HWulqwdWIxJltAWD5nqeP9kT
rzy98p/WvsPLHo5IE1ARUizEYkHt71ktgHreD/rGuMMbAYkcGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB3IjJLAyWAzcgGUkHUS1X80vt/RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84NWY2
YzNmMS05NTZjLTQ3ZmUtYmFkYi1kOGUwYmQyMGU0N2QvZjhkNmI0OWEtOWFhZC0z
Nzc3LWI4M2EtMzBjZmI2Yzg3NmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODVmNmMzZjEtOTU2Yy00N2ZlLWJh
ZGItZDhlMGJkMjBlNDdkLzg1ZjZjM2YxLTk1NmMtNDdmZS1iYWRiLWQ4ZTBiZDIw
ZTQ3ZC5jcmwwHwYDVR0jBBgwFoAU7qr2UI6BBr2P81UVZKj/HHif5+gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84NWY2YzNmMS05NTZjLTQ3ZmUtYmFkYi1kOGUw
YmQyMGU0N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAova3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGO3PsUrY/HKbI1zto1V+9jK1Ivbo3f0Fzote9UFE97I5c9iMKaG91XP
62m1dM9EekkbcZGhpbkm7PDmpJaImRT5oMVZtFpUlpTsfN4wsT8DINGUNRiS3GtK
UCf0cxnq97IyuD0KVvsOGRujR8tHptHWP9mVCAYWG2dggahyPUAkk+/9ib9RdvOC
whMnfX92VQ4aG812lFU/j0dpr3a1YLg0QubcfrxsFR6Zj3a9BGp3zfGm79jNSL+r
mKqOhHJagb2UW2my0EnpsDxP2gpuOgBK5lPwzvLuKaKBTNF8xq6xuo77Pt9Gu7m6
g3FJ01BKHi2tEZnOnGeXlOQSAbSxWGM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:48 2025 by rpki-client