Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/01367aac-d2fe-3f0f-b353-3adb61cca610.roa
File:                     01367aac-d2fe-3f0f-b353-3adb61cca610.roa (raw, json)
Hash identifier:          2u6S+r9LOZwcGfobc9T68V7YSLKXcIZYbbQ3TUTnHUo=
Subject key identifier:   DC:79:4C:D3:E0:78:2B:A3:99:6E:74:36:4D:97:52:74:C5:33:2E:5D
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F43285837DA9CE634F66167B30E1AC150
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/01367aac-d2fe-3f0f-b353-3adb61cca610.roa
Signing time:             Wed 30 Sep 2020 04:00:00 +0000
ROA not before:           Wed 30 Sep 2020 04:00:00 +0000
ROA not after:            Sat 07 Jan 2023 05:00:00 +0000
asID:                     198949
IP address blocks:        68.65.255.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:da:9c:e6:34:f6:61:67:b3:0e:1a:c1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Sep 30 04:00:00 2020 GMT
            Not After : Jan  7 05:00:00 2023 GMT
        Subject: CN=fe9d035b-1643-4699-a87f-b5cabf638128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:96:92:6f:0a:ae:3b:36:b8:86:62:b8:53:59:
                    fe:da:85:b3:9c:ae:33:36:8d:b4:3e:e0:40:e8:b4:
                    7c:b9:69:30:1f:36:d7:26:d4:82:8e:90:c5:b6:bd:
                    b3:dc:54:98:ca:3d:82:e0:a4:6a:8f:e8:50:4a:a1:
                    eb:2c:7b:f2:ac:1e:64:4e:7a:2c:5a:35:51:2c:da:
                    e1:3d:ad:7c:d7:82:10:fb:e9:08:42:c8:e3:9f:77:
                    06:02:0e:c3:c0:3f:76:c5:f1:ec:1f:84:5d:06:36:
                    88:9f:c6:48:6a:61:b8:f7:ee:a9:b1:3a:d0:4c:c6:
                    14:50:db:b0:02:17:c6:a3:81:a4:f2:8e:6d:2b:1e:
                    17:2e:ed:eb:c7:8a:27:2e:65:22:47:42:cd:f4:8f:
                    8c:35:2c:02:b8:26:ee:0d:68:c9:1d:d7:c3:fc:cc:
                    53:ac:3e:b9:1f:9d:c0:24:d2:bb:d6:43:80:23:95:
                    76:d8:b9:f5:39:f1:c3:ca:4e:ba:e9:90:0b:04:5a:
                    52:0c:ef:9f:9d:6a:a1:3e:eb:6e:65:b9:b5:64:01:
                    00:57:dd:86:6a:76:47:df:a5:ff:5d:1e:e3:24:15:
                    9e:68:c9:f8:84:0f:b4:43:5a:dc:55:bb:36:61:f5:
                    55:cd:80:ea:b5:2a:4d:76:42:b0:a0:ce:fd:51:4f:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:79:4C:D3:E0:78:2B:A3:99:6E:74:36:4D:97:52:74:C5:33:2E:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/01367aac-d2fe-3f0f-b353-3adb61cca610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.65.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:57:46:2a:60:6f:0c:e5:6a:47:51:f3:22:78:3f:f6:0c:e2:
         1e:3f:ed:20:e5:c2:fb:0e:fa:f9:c4:c3:a4:b5:d4:f0:3b:0b:
         df:2a:c7:c4:a7:2d:c8:25:a2:6a:5f:d5:09:e4:4a:a9:81:6e:
         1f:10:01:de:20:58:f5:26:2e:35:27:56:4b:68:1f:0e:04:2d:
         45:75:5e:68:a6:03:e2:76:b1:0f:f6:a2:72:ff:b9:30:dc:19:
         63:28:58:68:01:b0:d5:7c:b2:49:af:af:3d:36:d8:8a:42:da:
         fd:71:cd:c0:79:fd:86:30:7b:05:2d:0e:8d:cb:91:e1:1d:c8:
         53:f9:d2:a8:72:b7:0d:85:5a:9b:7d:19:31:c2:bc:eb:ad:12:
         75:cb:d9:2f:85:41:b7:67:95:c2:56:15:36:41:6e:75:2a:cf:
         36:0c:2e:f7:c6:4d:93:5d:58:6c:06:d3:9b:f6:30:b0:9f:9e:
         72:cf:ef:f9:60:bd:1f:74:db:1b:e0:70:09:0c:de:6b:d1:76:
         79:8e:20:54:dc:e1:e2:82:14:7f:58:21:cd:3b:70:fb:77:9c:
         fc:65:6e:bb:37:fd:70:91:12:35:3a:31:10:36:37:04:67:91:
         dd:21:13:d2:70:29:37:d0:4f:13:34:e2:f9:2d:17:f3:c8:1e:
         75:f0:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:55 2025 by rpki-client