Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/30315a39-789a-33f9-b29d-c8d262b719fb.roa
File:                     30315a39-789a-33f9-b29d-c8d262b719fb.roa (raw, json)
Hash identifier:          T6KCIudLaFntnDMHk4XzpAq4lr04UuwvhkRf4w2OgZ8=
Subject key identifier:   A3:A6:0F:CD:A8:A8:3C:3A:3C:05:D8:D7:9D:48:6F:9C:1B:9E:17:1B
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328583AA7A00C79DF2F3E680CA81240
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/30315a39-789a-33f9-b29d-c8d262b719fb.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        209.107.188.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:a0:0c:79:df:2f:3e:68:0c:a8:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=31d6303c-ec64-4a0c-b0cb-ad3af895f15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:99:68:e5:7b:fc:1d:8e:fb:b7:26:ed:dd:
                    a6:bf:ec:29:3e:b7:64:93:34:0b:f2:02:69:13:94:
                    96:04:b3:01:94:8c:59:e3:f4:4e:c5:80:43:5c:5b:
                    cf:90:ac:6e:53:61:2a:43:bd:e1:6f:33:dd:a8:3b:
                    2e:8a:73:68:c9:f3:4a:ec:5d:c1:1f:09:2b:92:a9:
                    0f:e3:a0:ef:81:c6:71:3e:59:63:39:3a:8c:f6:4a:
                    24:d0:cd:62:58:c4:44:1e:1c:2b:1f:70:f5:e2:03:
                    21:12:14:0d:81:51:76:09:6c:3d:73:38:34:d0:e9:
                    d7:23:c4:6d:9a:4b:ce:8c:7a:40:54:15:39:e5:00:
                    3e:cd:e2:8a:06:55:04:34:1e:d2:c3:14:05:95:30:
                    3f:cf:7a:77:96:7b:5e:e8:33:35:b3:1d:9a:37:41:
                    b2:3e:b6:eb:85:df:cb:92:48:35:19:7a:b9:2f:f5:
                    1b:0c:e4:66:52:3c:d5:e8:28:c6:a1:b9:65:d5:34:
                    6e:b7:b3:27:53:4a:c0:70:63:ff:a0:a3:7a:98:23:
                    30:3b:40:82:30:5e:a6:09:2d:f7:29:11:37:0f:b5:
                    f6:b1:26:b4:7a:48:5f:67:3b:ad:3a:e7:62:c3:a1:
                    74:c9:44:c0:95:c3:31:c5:00:30:8d:21:9e:ae:11:
                    4e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A6:0F:CD:A8:A8:3C:3A:3C:05:D8:D7:9D:48:6F:9C:1B:9E:17:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/30315a39-789a-33f9-b29d-c8d262b719fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5b:df:55:e6:c4:10:a5:4a:c8:a9:75:ee:b2:44:90:0a:47:
         d5:58:49:f5:e0:fd:b8:01:14:d5:85:20:1f:f3:12:9c:85:ee:
         19:bb:09:b8:b1:f7:06:cb:10:68:ea:da:fd:87:0e:e5:3b:64:
         2a:34:09:1a:f6:2c:08:4d:82:10:fb:80:74:b1:8d:b4:13:53:
         3c:90:b8:97:02:28:bf:b4:a8:6f:7e:a6:ab:3e:c0:36:3f:75:
         07:1b:42:13:a3:06:f2:d1:7c:8d:2b:8b:9b:86:34:79:11:09:
         2f:b6:98:f8:ef:8e:81:00:97:fe:88:8c:ed:db:78:88:ec:f3:
         3e:35:f1:6f:f0:de:56:ac:d7:a9:43:ff:71:35:4b:59:1a:b0:
         1d:2d:fc:92:ce:8b:65:85:46:57:0b:66:be:34:b3:5b:93:04:
         8c:c6:dd:dd:f6:42:7c:b9:0d:b4:14:cb:c5:ee:e4:c9:56:5e:
         04:d1:85:33:57:18:48:45:6f:82:96:99:91:a9:69:2a:d6:e0:
         af:39:92:af:4e:cb:36:4b:2b:e5:6f:27:f0:ba:66:9e:ac:68:
         e1:3d:be:6a:9e:c4:f9:26:1e:3a:f3:c2:ae:90:29:6c:5b:f2:
         44:e2:83:26:fe:35:b1:ee:c1:28:0e:ad:86:e1:d8:32:a6:e6:
         c5:ba:ec:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:46 2025 by rpki-client