Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/93305d6e-a480-43ad-be2c-5ec3066e1530/4920fbb9-fe18-3e66-8acf-f92abbb243b6.roa
File:                     4920fbb9-fe18-3e66-8acf-f92abbb243b6.roa (raw, json)
Hash identifier:          PwEbbjzSi3MJdm7OoAyqY2ZqMJ4GUv8cR1S9Hac+MyQ=
Subject key identifier:   85:7B:DB:9D:47:30:AA:38:E5:45:0A:E8:10:37:EB:5B:85:17:CB:3B
Certificate issuer:       /CN=93305d6e-a480-43ad-be2c-5ec3066e1530
Certificate serial:       010D0C9F4328576D51CC73C042CFC17411A29C1E
Authority key identifier: 66:B3:72:2D:1C:44:99:7F:2C:7B:5A:53:EE:DB:28:AC:8E:A3:A5:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/93305d6e-a480-43ad-be2c-5ec3066e1530.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/93305d6e-a480-43ad-be2c-5ec3066e1530/4920fbb9-fe18-3e66-8acf-f92abbb243b6.roa
Signing time:             Fri 21 Aug 2020 04:00:00 +0000
ROA not before:           Fri 21 Aug 2020 04:00:00 +0000
ROA not after:            Thu 24 Nov 2022 05:00:00 +0000
asID:                     53550
IP address blocks:        192.206.95.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:74:11:a2:9c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93305d6e-a480-43ad-be2c-5ec3066e1530
        Validity
            Not Before: Aug 21 04:00:00 2020 GMT
            Not After : Nov 24 05:00:00 2022 GMT
        Subject: CN=c6930bb4-dcc0-409a-8080-0b0314540649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:07:51:04:90:c4:32:36:da:6a:03:5d:ea:78:
                    cf:5d:65:10:3a:b9:c0:67:b2:60:31:d3:f1:d8:92:
                    dd:55:fb:65:22:4e:4f:fb:d8:7f:05:0a:8d:97:b7:
                    b6:f6:46:d9:98:b8:38:b2:90:be:8b:ff:47:be:0f:
                    bb:ee:c0:e5:b5:45:aa:7c:e2:c8:ef:bb:db:cb:b9:
                    d1:f7:c7:34:6f:04:3d:fc:e9:73:9b:48:2b:11:58:
                    b4:97:b5:09:a8:04:59:7b:24:6e:c2:f4:bb:72:89:
                    66:fc:4f:4b:46:d8:87:c1:0a:88:fe:76:75:f5:72:
                    d5:d8:39:4a:e7:01:74:ed:9a:48:da:81:1e:f2:24:
                    2e:1f:55:2c:a3:23:0f:9b:a3:cf:d3:e6:9b:d2:bb:
                    f0:b5:a1:16:4d:7a:2b:98:80:b3:e0:70:ac:66:31:
                    d2:da:8c:61:0b:44:cc:26:f8:b3:90:a5:bc:18:4a:
                    93:89:6f:e8:3c:b9:ba:9d:9c:2b:ea:91:57:db:a2:
                    01:29:f4:69:33:58:ed:d1:cf:9c:29:c7:79:1a:52:
                    c6:43:7c:a9:76:0e:90:e9:25:2e:13:49:e1:06:40:
                    54:4b:96:59:39:f1:01:20:65:64:04:23:f5:af:97:
                    07:d1:52:5f:3e:ca:0b:d2:a7:0e:e7:14:63:50:62:
                    09:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7B:DB:9D:47:30:AA:38:E5:45:0A:E8:10:37:EB:5B:85:17:CB:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/93305d6e-a480-43ad-be2c-5ec3066e1530/4920fbb9-fe18-3e66-8acf-f92abbb243b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/93305d6e-a480-43ad-be2c-5ec3066e1530/93305d6e-a480-43ad-be2c-5ec3066e1530.crl

            X509v3 Authority Key Identifier:
                keyid:66:B3:72:2D:1C:44:99:7F:2C:7B:5A:53:EE:DB:28:AC:8E:A3:A5:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/93305d6e-a480-43ad-be2c-5ec3066e1530.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:08:b3:65:20:bb:41:d7:27:1d:4c:17:d0:29:0a:56:65:cf:
         f2:f2:e0:85:d8:c7:a0:f5:20:a9:75:12:62:c0:64:a0:3b:6f:
         a6:f8:24:4b:fd:21:c5:cd:43:50:f7:aa:28:7e:84:60:b8:e4:
         f1:3f:59:fd:d9:6f:47:7e:e7:4b:22:2e:09:2f:74:4f:db:d8:
         7e:d2:56:f0:a9:17:d7:6b:3b:87:d4:92:f2:90:92:f7:96:0d:
         c6:67:06:c3:3e:1a:e4:58:be:2c:b8:e2:c2:38:05:1d:4e:1e:
         30:9e:3b:b7:94:53:27:f9:17:12:0c:7d:ae:3c:a7:a2:c7:48:
         cf:25:98:6e:e3:c4:18:5f:9f:41:cc:6a:d8:62:69:27:1c:f9:
         36:ac:f9:9e:b4:01:6f:d7:25:84:14:bb:38:cd:64:3c:6f:41:
         e4:55:06:34:48:06:64:f7:0d:a2:91:83:f2:67:5f:10:3f:04:
         92:e9:b7:cc:be:32:37:10:17:0f:1c:44:46:79:46:cb:30:b1:
         fe:1f:de:20:e5:1d:00:93:de:a5:66:1e:ea:b0:1d:4d:82:75:
         be:a6:f3:5e:18:98:f1:16:96:ff:e4:3f:08:82:20:c1:32:7a:
         a2:8e:51:1f:f0:e9:cc:bd:1c:dc:69:f0:b5:05:cb:7a:6e:b0:
         77:79:d0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:23 2025 by rpki-client