Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/4f9f3f93-dd39-3113-8af0-020f4ebd6556.roa
File:                     4f9f3f93-dd39-3113-8af0-020f4ebd6556.roa (raw, json)
Hash identifier:          UD9qnWjoU8lLWdgmSJu3HRpQ0vsIjI/Ym4OS4pO05qk=
Subject key identifier:   40:68:F0:E5:0A:95:45:62:9C:4F:E3:5F:DA:4C:D3:72:15:14:78:DB
Certificate issuer:       /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Certificate serial:       010D0C9F43285847537B7FED8269E9A5951DA180
Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/4f9f3f93-dd39-3113-8af0-020f4ebd6556.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     63902
IP address blocks:        65.181.180.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:7f:ed:82:69:e9:a5:95:1d:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=5e17b03a-2ba0-4868-87e0-0d4fe5448c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:13:61:9b:b0:30:9b:cc:cc:1b:16:cc:22:
                    56:5e:9d:a8:09:ed:bb:52:8e:06:47:99:cb:db:f8:
                    5e:eb:af:10:75:72:7a:ff:4b:e7:5b:d4:fa:ff:1c:
                    ee:f5:18:7e:06:bd:01:88:6c:d4:a1:e1:08:35:d9:
                    37:70:81:76:e5:31:b9:f2:45:d1:23:3a:15:1b:76:
                    f9:e7:8e:00:fd:6a:f0:2c:ab:d4:08:14:e9:93:de:
                    71:4f:4e:b4:f7:c9:50:cf:cf:ef:10:33:4e:22:35:
                    cc:11:1b:28:df:cb:37:7a:6b:82:84:a3:76:29:20:
                    c4:94:6f:4b:a2:7d:57:eb:22:cd:c4:89:e6:6c:8e:
                    2a:e6:cd:2a:63:7c:8d:6c:06:82:f4:ac:78:6a:2a:
                    14:98:d8:b7:d6:2f:26:c6:2c:81:c1:f7:01:88:ad:
                    e5:12:72:3e:75:78:99:f3:f6:90:d2:6d:7e:20:65:
                    36:ad:dd:84:aa:83:3a:74:ba:2d:32:2f:a9:14:05:
                    66:69:d5:99:1a:fb:77:5d:3f:fd:74:0e:fb:93:8d:
                    d1:45:ec:aa:91:93:b8:7c:21:ea:cf:14:56:d7:83:
                    4d:6c:c3:24:7d:a5:16:37:28:f5:7a:e5:5d:03:7f:
                    7f:7f:41:bc:80:b3:40:0f:27:52:89:79:79:b2:c4:
                    ff:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:68:F0:E5:0A:95:45:62:9C:4F:E3:5F:DA:4C:D3:72:15:14:78:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/4f9f3f93-dd39-3113-8af0-020f4ebd6556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl

            X509v3 Authority Key Identifier:
                keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.181.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:57:99:02:56:58:49:fd:3c:2c:79:4f:de:70:41:d4:19:a2:
         7c:19:6a:47:3a:a6:89:0a:c3:05:16:39:89:f3:c2:25:e4:bf:
         54:bc:bb:71:b5:a8:72:06:1e:20:6a:64:49:5c:c0:0f:50:bb:
         82:8d:e7:4d:f6:f4:89:0c:90:2e:bf:35:c6:fc:68:82:cc:d6:
         f7:a3:71:cd:61:5f:51:7a:33:fe:57:e0:e5:22:72:80:fa:6d:
         19:c5:bd:c1:4a:0a:b6:f7:ab:01:19:e4:c4:cd:5c:28:d1:68:
         26:01:cf:e5:82:ed:5a:37:af:a4:c8:44:81:bf:17:59:23:51:
         a7:b0:e5:90:37:87:2c:91:9f:9c:69:d0:6b:81:05:40:98:8f:
         ea:1d:a2:89:8d:9f:e8:f7:25:b5:d8:fb:e5:d6:eb:75:81:90:
         8b:6a:38:1f:35:88:00:90:77:74:f0:16:b4:15:0b:ed:62:bf:
         b7:a4:8d:8a:91:87:b3:72:1f:9d:46:66:e9:73:93:50:09:25:
         f0:00:66:10:d8:b3:c1:3e:91:98:5b:ec:38:5c:94:67:79:1f:
         b7:88:47:69:6c:35:13:62:be:51:23:f7:c0:b8:6c:6b:2a:79:
         49:72:60:d4:fa:95:31:4a:1f:73:b2:cd:39:9c:c2:48:e3:0c:
         cc:93:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:48 2025 by rpki-client