Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43/e1a757a6-a38c-3f16-86be-52ec5b15ffd9.roa
File:                     e1a757a6-a38c-3f16-86be-52ec5b15ffd9.roa (raw, json)
Hash identifier:          NB7PklA6nLh0GYf7zMQaLDLTkqt7Yw25h0LeKGQX8AY=
Subject key identifier:   CA:89:C9:D7:69:11:14:7A:78:01:9B:CE:56:AC:DA:2B:86:FF:8F:8A
Certificate issuer:       /CN=9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43
Certificate serial:       010D0C9F4328576D51CC73C042CFC17156C8FC02
Authority key identifier: C5:EB:45:97:22:9D:7D:70:AB:E3:E3:EE:E7:74:6F:3E:A6:4D:AF:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43/e1a757a6-a38c-3f16-86be-52ec5b15ffd9.roa
Signing time:             Tue 07 Apr 2020 22:35:44 +0000
ROA not before:           Fri 03 Apr 2020 04:00:00 +0000
ROA not after:            Sat 01 Apr 2023 04:00:00 +0000
asID:                     16509
IP address blocks:        67.219.180.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:56:c8:fc:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43
        Validity
            Not Before: Apr  3 04:00:00 2020 GMT
            Not After : Apr  1 04:00:00 2023 GMT
        Subject: CN=c2f12ebb-2e0c-4637-b474-df8437974eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f1:de:f7:cf:13:22:66:f5:3f:1b:92:93:df:
                    fb:b9:37:e2:34:02:6c:b3:19:15:09:ba:7b:e3:6a:
                    27:8f:62:ab:4f:f0:fe:e0:e7:80:ab:d5:8a:3d:f1:
                    5f:0a:15:fc:89:92:49:2b:b0:27:5d:51:33:8b:41:
                    f1:65:9b:59:2e:48:1c:1a:aa:f5:80:3e:c8:bb:9e:
                    9c:54:0b:61:a2:3e:ee:58:32:cf:4b:1e:e9:bc:d9:
                    29:21:1c:5a:bf:b7:a9:b8:5b:00:a4:06:bd:d0:cf:
                    92:a7:a1:a7:55:80:48:7a:1c:8d:08:f6:3c:11:ae:
                    99:33:16:f2:1e:2e:cd:8e:b1:e0:91:c7:3c:ea:76:
                    bf:74:cb:72:a3:cb:f9:89:80:7a:b7:33:d9:b0:a6:
                    6e:35:16:07:6e:dc:f4:9e:00:23:49:b9:aa:a3:16:
                    ee:05:67:3c:86:f0:a4:5a:16:d0:a1:28:f0:d3:66:
                    22:6b:bf:f3:c8:21:52:95:9e:8d:d1:c6:92:f4:c7:
                    93:53:94:4d:be:eb:59:f9:ae:0d:f8:3f:e8:ba:df:
                    0b:05:8e:5b:47:db:04:a2:a8:da:c4:a1:41:8e:e2:
                    cd:2f:ef:fd:12:55:56:3e:78:e8:27:c5:54:8c:1a:
                    d5:cd:fa:56:7e:81:b7:f0:5d:61:23:4e:23:f9:92:
                    f1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:89:C9:D7:69:11:14:7A:78:01:9B:CE:56:AC:DA:2B:86:FF:8F:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43/e1a757a6-a38c-3f16-86be-52ec5b15ffd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43.crl

            X509v3 Authority Key Identifier:
                keyid:C5:EB:45:97:22:9D:7D:70:AB:E3:E3:EE:E7:74:6F:3E:A6:4D:AF:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9bbad5da-6ed5-4fec-90ca-a1a4f3c7ac43.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:16:a0:01:ee:a9:ea:03:a8:ad:fe:f7:ce:ac:79:78:68:59:
         63:53:cd:30:f4:6a:3e:3f:cb:1e:81:4c:d7:27:9e:e3:fc:0a:
         1e:a1:d4:4b:53:ea:68:13:cf:13:32:1e:3c:70:d3:0c:cc:de:
         f7:91:d0:db:4c:fb:3b:99:91:da:1a:59:e6:50:f6:ad:63:f8:
         15:40:4a:9c:2a:fd:62:2e:ab:75:05:8c:51:fb:96:2c:02:37:
         70:c8:28:de:d0:95:3b:5a:36:d8:d6:38:ea:b1:e3:4d:5e:95:
         49:20:af:46:00:1f:06:61:b2:e7:97:e4:48:d8:a8:67:63:ab:
         c7:29:58:2f:6a:1c:f2:24:1a:55:92:f1:1e:3d:eb:a1:13:42:
         05:84:41:49:59:c4:ef:93:6d:38:c9:6c:a6:ce:36:f8:19:c9:
         a3:99:d1:74:d0:fb:0d:bd:2f:dd:5d:49:f9:c1:72:06:44:eb:
         15:28:73:20:e1:ca:c7:6c:e1:c1:03:32:52:14:52:eb:f3:f5:
         10:89:87:25:cc:33:49:45:78:63:2b:47:1d:6a:79:5a:76:04:
         ec:d8:07:ac:16:76:bc:18:43:99:0a:9a:19:c9:4f:cd:bd:9b:
         32:3c:7c:29:c5:a1:0d:18:7f:9e:b3:bf:ee:4a:30:70:be:30:
         11:3a:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:04:14 2025 by rpki-client