Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6cae4c4b-b876-3bd2-8316-9c1e9e7c25b3.roa
File:                     6cae4c4b-b876-3bd2-8316-9c1e9e7c25b3.roa (raw, json)
Hash identifier:          zedR8bYEnImyqvmV2SYRPL3jHIhk/X6j3zqb8TsxhqY=
Subject key identifier:   9D:77:6D:18:14:28:32:18:37:57:01:62:8D:1A:82:EF:D0:98:F7:F8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285846A664DF5346C8AEFD1E639C40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6cae4c4b-b876-3bd2-8316-9c1e9e7c25b3.roa
Signing time:             Thu 25 Jul 2024 01:00:25 +0000
ROA not before:           Thu 25 Jul 2024 01:00:25 +0000
ROA not after:            Wed 23 Oct 2024 01:00:25 +0000
asID:                     5650
IP address blocks:        216.74.84.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a6:64:df:53:46:c8:ae:fd:1e:63:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 25 01:00:25 2024 GMT
            Not After : Oct 23 01:00:25 2024 GMT
        Subject: CN=466157a8-b92e-4da1-a4cd-b18988e84827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0b:0e:eb:66:d0:82:7e:2a:f6:74:f5:d7:32:
                    68:15:f6:f9:2a:fe:e8:76:ce:6b:2e:17:a7:e0:63:
                    27:00:b9:c1:c1:d7:6e:83:68:2f:8d:07:9f:de:a9:
                    b9:43:f5:a7:46:1a:00:cb:0e:44:f1:76:11:3b:e9:
                    76:ff:2d:6a:b1:58:54:83:ee:c2:34:86:4e:a5:0e:
                    20:97:6d:cc:9d:20:10:0d:d4:ba:2e:a4:ef:88:9e:
                    c5:c9:a7:1a:e7:f9:91:b6:6f:90:ca:d2:e6:bd:96:
                    0f:dc:02:49:27:5e:99:a1:ce:3a:8b:98:5d:77:e8:
                    b0:ed:a1:26:e0:60:92:e7:4c:a1:17:0f:c6:82:30:
                    76:ce:76:07:fd:52:8e:f0:b4:95:a2:4d:26:9d:ee:
                    59:87:c4:e7:6f:25:ea:90:a7:a6:96:48:8e:be:44:
                    b9:c1:b9:5b:cb:d0:14:5f:cd:0c:db:9c:3a:6d:fb:
                    29:c8:c5:33:d4:84:4c:be:60:47:0a:59:0a:6f:59:
                    d1:a5:27:e1:95:90:bf:d6:1e:c4:fb:c7:9c:1b:ee:
                    cd:fb:cb:4f:d8:e8:83:3f:cf:69:d1:a3:1c:a7:a0:
                    81:18:d3:96:04:8e:d3:b9:c2:6f:6a:2f:cb:16:2b:
                    bb:e0:19:c9:10:5c:01:31:6e:66:aa:3e:7a:52:9c:
                    a5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:77:6D:18:14:28:32:18:37:57:01:62:8D:1A:82:EF:D0:98:F7:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6cae4c4b-b876-3bd2-8316-9c1e9e7c25b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:bf:e2:79:b5:b8:6e:dc:42:ec:0a:a2:f7:ee:33:d2:aa:12:
         a9:32:47:51:29:dc:a2:dc:47:bd:af:71:f5:29:95:38:58:df:
         ab:34:e0:08:ff:5a:08:3d:32:f8:b4:eb:6a:8a:80:cd:d6:58:
         12:05:2b:13:da:47:f1:cb:ab:69:0e:67:49:9f:8e:21:56:92:
         9c:ea:dc:89:18:74:5d:bc:d7:33:ee:09:25:ef:fd:9c:8d:12:
         b4:dd:f1:e7:8a:6e:52:0e:54:98:e8:1a:a2:9d:a4:3c:7f:1e:
         f8:9e:9d:e4:fc:71:c9:ff:48:17:d1:3c:86:ee:31:39:0f:98:
         13:cd:a8:8c:64:cb:13:08:e0:80:ff:31:69:a3:a6:19:2c:5e:
         6a:6d:03:69:00:bb:65:f4:45:9e:b0:66:42:89:b3:97:3d:b2:
         15:32:ad:cf:59:c8:76:3a:aa:94:1e:b6:54:74:df:85:e9:fa:
         b9:90:31:f7:8d:c6:9f:46:db:c3:06:75:f7:63:14:3c:ca:62:
         df:4f:ad:13:2a:4b:fd:f0:35:6c:19:b7:29:35:b5:ec:56:4b:
         9b:af:0c:25:66:c1:f1:2b:ba:7a:9a:1f:b0:f1:67:dd:7f:64:
         79:65:67:9f:90:ed:e2:d8:ad:70:38:21:1c:bd:14:e1:70:77:
         90:e8:ca:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:11:08 2025 by rpki-client