Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f0fed14-1bb6-3e21-99be-170ec75f149a.roa
File:                     7f0fed14-1bb6-3e21-99be-170ec75f149a.roa (raw, json)
Hash identifier:          vhcOIhr6TBZm74nNszjsJfL5KtyfEIt6frUjlwzkplI=
Subject key identifier:   95:1A:1F:B5:09:92:0D:10:A5:1B:10:CA:D2:34:F8:BE:FB:75:18:3B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285846970A3F47E5237E34A642A180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f0fed14-1bb6-3e21-99be-170ec75f149a.roa
Signing time:             Fri 19 Jul 2024 13:00:35 +0000
ROA not before:           Fri 19 Jul 2024 13:00:35 +0000
ROA not after:            Thu 17 Oct 2024 13:00:35 +0000
asID:                     16625
IP address blocks:        104.93.192.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:97:0a:3f:47:e5:23:7e:34:a6:42:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 19 13:00:35 2024 GMT
            Not After : Oct 17 13:00:35 2024 GMT
        Subject: CN=fc8c507e-84c6-47fc-b2cc-3242f307c392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:ab:d5:82:2b:9d:3b:dc:c6:9e:a6:35:25:
                    e5:76:cd:c9:7b:00:24:f9:67:40:8e:57:0f:32:9f:
                    48:2b:d4:bb:68:59:96:ec:b3:f5:3a:bd:02:b4:d7:
                    cc:3b:5e:47:93:56:bc:05:32:c7:a2:1f:97:00:98:
                    cd:be:ba:b5:6e:db:29:14:b1:f7:e0:ef:a2:c5:3c:
                    35:c1:c2:9f:36:50:48:ef:7c:b7:39:99:37:c0:6f:
                    81:b0:89:08:61:d0:7d:6d:5e:f7:70:d0:18:80:ba:
                    44:6e:32:81:2f:75:e3:84:4b:6f:b6:b8:bf:12:ba:
                    c7:df:c3:22:10:3c:1a:c8:23:8d:0e:a6:59:d8:b9:
                    36:67:12:64:3d:18:d7:09:e5:43:72:2c:2c:00:c7:
                    5b:fa:28:b6:ae:f8:ca:96:be:30:22:2e:56:30:7e:
                    57:f4:f8:53:92:3b:cf:cb:49:5d:ed:0e:ff:14:3f:
                    85:65:92:70:6c:7b:93:f7:67:87:36:de:e2:87:f8:
                    d9:c4:d9:b0:0c:46:38:e3:ae:3c:55:04:02:8a:38:
                    64:c5:3d:cf:7e:b2:96:54:8a:d8:7e:b6:3d:2c:86:
                    1d:03:52:2b:0c:20:e6:d0:14:6c:3a:29:fe:d7:a9:
                    eb:a2:9b:a8:ac:3f:3f:20:10:f3:a2:00:31:b0:ba:
                    73:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1A:1F:B5:09:92:0D:10:A5:1B:10:CA:D2:34:F8:BE:FB:75:18:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f0fed14-1bb6-3e21-99be-170ec75f149a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.93.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:90:06:d4:df:f6:e7:12:02:fb:f3:80:71:54:fb:17:88:75:
         27:8b:dd:f7:13:4d:b1:d2:44:a1:ad:dd:86:ee:61:6e:03:c4:
         ba:6c:9b:8c:3e:9d:e8:89:e4:ea:76:8c:1d:53:f5:79:6b:dd:
         9f:aa:38:f1:97:32:1f:dc:ac:4e:1f:2a:da:61:aa:77:b5:5e:
         7c:e3:3f:15:73:49:19:03:35:b4:d6:c5:29:96:05:a4:18:23:
         43:49:4f:80:09:c1:2e:c4:94:19:ed:f5:eb:8d:f7:3b:db:97:
         f2:f2:f6:c5:eb:e6:f0:86:a7:ef:70:50:06:81:40:60:7d:88:
         8c:d8:53:fb:4f:59:13:b4:db:14:28:1d:e2:b5:68:e4:7e:aa:
         48:8b:a2:be:cb:37:a4:47:60:b3:01:5f:17:ff:cc:b5:3d:c8:
         4e:2a:a9:ba:1f:00:04:45:87:15:d3:f6:24:d4:99:1a:0f:a7:
         da:26:bd:20:03:09:c2:1a:1b:7b:d9:22:d0:79:95:a9:c8:07:
         a5:81:a6:8f:1d:6f:b0:7b:8b:b0:b1:d1:ab:2a:73:0a:d7:57:
         f9:d2:10:ca:6b:65:34:9c:bb:b7:da:eb:e5:1b:82:f5:fc:4b:
         c2:15:a3:47:71:65:64:46:62:52:42:8f:90:05:14:90:6c:ea:
         b4:1c:b4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:27:00 2025 by rpki-client