Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5a3952f8-3993-3e2f-b61d-ac5424b17721.roa
File:                     5a3952f8-3993-3e2f-b61d-ac5424b17721.roa (raw, json)
Hash identifier:          i5lB7f0sufxFTzASnvV4CEUuln0qHm3hyw6bhtniiFY=
Subject key identifier:   F4:7A:2E:EB:5B:A9:AD:5D:40:52:95:E1:66:9E:F8:FA:D1:E9:CD:B4
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584210F41DA39D40214321242500
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5a3952f8-3993-3e2f-b61d-ac5424b17721.roa
Signing time:             Wed 31 May 2023 17:10:04 +0000
ROA not before:           Wed 31 May 2023 17:10:04 +0000
ROA not after:            Tue 29 Aug 2023 17:10:04 +0000
asID:                     61317
IP address blocks:        162.244.210.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:10:f4:1d:a3:9d:40:21:43:21:24:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 31 17:10:04 2023 GMT
            Not After : Aug 29 17:10:04 2023 GMT
        Subject: CN=c82d0900-56f9-4648-a15d-0d3e4d6aeff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:1b:4d:ba:bb:7c:32:48:85:b2:04:3c:ff:
                    dc:6d:29:4d:3b:6b:f4:ae:98:19:77:b0:b0:7d:01:
                    cc:01:85:5c:48:ff:d4:50:c5:16:c2:2b:d4:ad:74:
                    68:dd:ac:ac:4b:5d:e7:e0:88:b0:65:5e:a1:5e:10:
                    7c:5e:ab:65:5f:74:9d:16:6a:c1:c4:bc:06:2c:99:
                    a0:9c:0d:1f:db:7c:06:fe:40:fd:75:87:72:cf:15:
                    0b:d1:3e:0b:9a:c7:b6:d7:b5:75:19:69:39:59:b5:
                    ec:d6:06:8e:f3:7a:10:a1:e0:70:a2:56:0d:14:1d:
                    7f:75:b2:40:9e:ba:31:7b:6b:34:ae:17:76:d7:e4:
                    7a:9d:77:7c:5b:39:7c:ea:f6:b1:d6:a4:d8:67:ae:
                    e5:58:f8:cd:27:ae:57:03:db:0a:d5:36:9e:77:66:
                    53:0b:50:5c:74:57:29:b0:6f:82:7f:38:15:77:7b:
                    bc:6d:f7:a5:b5:7a:cf:b9:1f:42:36:10:c1:98:d2:
                    ee:2c:a3:99:c7:7c:9a:cf:a5:37:99:b4:22:cc:fb:
                    ab:a8:99:80:7b:6f:13:37:88:d1:a0:01:9a:bf:4f:
                    d3:f4:63:06:6c:94:29:b1:08:da:bb:71:68:63:54:
                    2c:d2:91:8d:9b:bb:8c:3b:09:08:7a:ba:68:98:ea:
                    d5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7A:2E:EB:5B:A9:AD:5D:40:52:95:E1:66:9E:F8:FA:D1:E9:CD:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5a3952f8-3993-3e2f-b61d-ac5424b17721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:b6:9a:bf:8f:e1:7e:5d:3d:a9:0b:76:4d:3e:71:a8:27:0b:
         6e:de:39:ae:39:37:26:90:43:cf:64:f3:ce:a1:64:0f:57:a4:
         3d:95:1c:38:2c:93:a8:d3:a2:f0:99:22:35:9a:ed:42:95:4b:
         f5:51:b3:b9:60:c0:41:ac:0a:f6:b4:9a:10:6f:f1:9c:ad:36:
         49:70:91:60:a6:cc:6d:33:b1:bb:ac:16:c9:21:5b:bb:4d:98:
         d4:86:d4:15:2e:64:f9:29:bf:d7:38:83:71:15:24:27:57:fb:
         36:90:4c:9e:e3:b6:21:34:53:98:86:34:45:37:2e:7f:ae:b2:
         44:10:ae:aa:d0:ec:f0:d2:b0:84:42:a0:6e:3b:e5:c5:75:98:
         27:f0:b9:14:b1:71:85:42:76:ab:ef:37:8a:4b:03:10:9d:88:
         0b:63:80:21:7b:b6:87:52:c1:27:b9:17:e5:6f:07:8c:e7:6e:
         7a:29:c3:c0:e9:25:8c:e7:fe:15:c8:bb:b8:b7:15:80:b1:71:
         c9:bc:1f:9d:41:94:d6:26:56:e2:1c:7d:69:a9:be:80:5d:2b:
         b7:c3:d5:ce:20:61:2b:cd:d4:b7:aa:3c:36:b2:63:fc:a8:eb:
         d2:b1:29:16:82:0e:04:32:4e:20:80:72:98:bb:1a:b6:a8:5e:
         4a:ca:ba:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:24 2025 by rpki-client