Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9571c579-3b57-35a2-82b3-401999abf741.roa
File:                     9571c579-3b57-35a2-82b3-401999abf741.roa (raw, json)
Hash identifier:          wda1qmPSBtT5ROpUEFWFxAw9LklkRNTP5BS7f7CYoqM=
Subject key identifier:   83:FA:80:E3:89:CE:6B:BA:B1:E2:03:CD:7D:82:52:28:47:37:B9:AF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285846837F7532A42E1E1B0210C000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9571c579-3b57-35a2-82b3-401999abf741.roa
Signing time:             Fri 12 Jul 2024 13:00:34 +0000
ROA not before:           Fri 12 Jul 2024 13:00:34 +0000
ROA not after:            Thu 10 Oct 2024 13:00:34 +0000
asID:                     20940
IP address blocks:        184.28.8.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:83:7f:75:32:a4:2e:1e:1b:02:10:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 12 13:00:34 2024 GMT
            Not After : Oct 10 13:00:34 2024 GMT
        Subject: CN=0e7966d5-1c46-466f-88f6-75cfda1a4ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2d:7b:5d:6e:6e:4e:ee:70:d3:0f:02:39:8f:
                    c0:04:9a:b3:cd:94:92:6f:71:e5:8f:0c:d1:41:e4:
                    0d:fa:b7:7b:60:4a:f5:f7:24:16:e2:5b:71:f9:86:
                    a0:19:51:20:dd:d4:84:28:6e:9b:57:57:09:07:1f:
                    f5:f0:f0:45:f0:e8:4a:c1:6d:59:ea:b9:3e:7c:b6:
                    f5:59:91:67:5e:12:9d:00:af:96:f8:c4:94:f5:f3:
                    0e:07:c9:60:65:6a:a9:e4:9b:d7:5f:b7:0b:fb:c6:
                    c5:8d:6a:b4:f6:8a:48:f2:3d:08:ea:78:bf:f3:eb:
                    f3:94:02:d5:cc:88:91:8e:6f:57:00:d3:91:25:1b:
                    98:1b:2f:44:9f:c6:eb:23:ee:31:07:d8:8b:cb:37:
                    51:1d:0b:62:7a:88:29:b7:95:cd:eb:fa:b0:90:17:
                    cb:8a:86:1f:4f:1b:e5:f7:5b:4c:93:95:c4:f9:56:
                    10:93:eb:21:c1:eb:88:eb:2b:fa:1c:e4:1c:55:38:
                    5e:47:c2:15:8f:7a:f1:74:1d:6c:25:ad:1c:4d:a8:
                    ab:5c:b1:b5:2b:8f:30:4d:1b:ee:71:49:8e:63:21:
                    f1:66:15:2c:71:f5:60:6b:85:d1:e0:35:41:0d:91:
                    e4:46:5e:47:7d:60:3e:33:dd:3e:98:d8:e1:c5:4e:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FA:80:E3:89:CE:6B:BA:B1:E2:03:CD:7D:82:52:28:47:37:B9:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9571c579-3b57-35a2-82b3-401999abf741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:d4:08:96:c0:73:6d:aa:b2:06:11:b3:a0:1f:54:c5:bb:c6:
         2d:20:87:81:12:95:e9:f0:4c:56:2f:3d:3e:d6:d7:b5:15:8b:
         e3:05:dc:9c:ea:b6:76:97:2c:d3:98:d9:3a:af:7e:f2:7b:4b:
         53:59:0c:5e:8d:1f:9c:76:84:3d:77:10:5f:5e:5f:5e:cc:bc:
         41:1d:42:39:ea:cb:1d:c4:9f:2a:42:45:c2:cb:8c:c1:42:ef:
         60:76:22:2b:9f:b4:af:e4:80:57:0f:34:f6:b6:e8:34:35:66:
         9c:56:c6:8b:ef:a8:62:a0:97:46:88:9e:00:23:92:1c:c8:66:
         37:fc:27:79:a6:ff:dd:90:4a:e0:04:20:35:8f:86:de:6c:b2:
         50:fd:25:84:e2:80:79:09:77:4c:cc:05:35:3e:0b:d3:38:47:
         98:40:31:a3:e4:6b:f7:c9:5a:c5:86:a6:04:2f:9c:e3:e4:1e:
         08:3d:a5:7d:df:4c:45:2a:a1:21:92:7b:80:44:b4:64:d3:89:
         6b:72:2a:29:0a:4c:a6:23:d4:cc:85:de:c4:0c:7e:0b:ef:87:
         b1:27:56:29:55:68:e5:ba:6e:7e:1d:d6:cc:67:c1:f9:d2:aa:
         c7:ac:a1:5a:0e:86:dd:ef:27:b4:ce:76:28:2a:f9:ee:2c:4c:
         66:28:f7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:22:58 2025 by rpki-client