Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adc7f8d9-77be-458a-afed-220f2e24643d/28c6d5d5-0abc-311d-8a4e-ffe54f48748e.roa
File:                     28c6d5d5-0abc-311d-8a4e-ffe54f48748e.roa (raw, json)
Hash identifier:          Nvs91QhCjnltAW8blz3US6r8NcgOyXhz+rkIkhBUkx4=
Subject key identifier:   59:BF:35:A8:79:97:AE:2D:78:EB:97:41:8F:D6:14:31:8F:FE:57:0E
Certificate issuer:       /CN=adc7f8d9-77be-458a-afed-220f2e24643d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1718868DC0B
Authority key identifier: 56:34:FB:D1:3E:42:45:57:D1:37:1C:EF:79:80:D9:D1:21:84:2E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adc7f8d9-77be-458a-afed-220f2e24643d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adc7f8d9-77be-458a-afed-220f2e24643d/28c6d5d5-0abc-311d-8a4e-ffe54f48748e.roa
Signing time:             Fri 17 Apr 2020 13:51:45 +0000
ROA not before:           Fri 17 Apr 2020 04:00:00 +0000
ROA not after:            Sun 17 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        204.77.194.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:88:68:dc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adc7f8d9-77be-458a-afed-220f2e24643d
        Validity
            Not Before: Apr 17 04:00:00 2020 GMT
            Not After : Apr 17 04:00:00 2022 GMT
        Subject: CN=1f07d2bf-bf66-45bb-baa8-4e50f304d656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3e:45:29:dd:81:f2:e2:36:2d:1c:5d:b1:d2:
                    d8:f2:cf:a7:cf:55:c5:70:0b:1a:3a:96:f6:a5:fb:
                    cf:4b:31:9d:27:9f:25:3e:18:08:76:91:e8:8c:35:
                    bb:66:37:3f:5f:18:27:39:e1:b2:28:c8:51:3d:46:
                    a2:18:de:db:24:7d:03:e4:5d:95:f8:a9:49:8c:df:
                    d4:2c:48:4f:02:05:06:cd:aa:4b:ce:87:f4:d3:a4:
                    ae:89:2b:fe:f0:ac:70:b5:d1:8d:d3:ec:02:b6:5e:
                    77:5f:a9:b9:39:d6:0e:ea:cb:06:0f:7a:0a:c1:36:
                    29:8d:69:f4:0b:49:98:da:96:90:e2:a1:f4:3f:13:
                    7a:b6:71:7a:78:25:b5:a7:55:37:d2:e5:89:0f:48:
                    cd:56:24:1c:7f:14:a1:9a:07:95:21:26:ef:10:b1:
                    69:3a:98:06:7b:5d:b2:dc:a4:78:54:78:8b:ea:e7:
                    ec:77:42:9d:ab:0a:96:3d:ba:40:ec:3f:cc:59:60:
                    c2:f2:e7:7b:0b:12:0b:69:cb:77:51:ac:b3:d0:4b:
                    4c:90:8d:41:d5:9e:37:d4:fa:d0:02:fe:2a:81:69:
                    00:65:a5:8f:01:bc:04:6d:30:eb:0d:1e:36:47:29:
                    b0:ab:02:2a:47:2a:d8:3c:41:f8:83:d8:39:34:80:
                    91:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BF:35:A8:79:97:AE:2D:78:EB:97:41:8F:D6:14:31:8F:FE:57:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adc7f8d9-77be-458a-afed-220f2e24643d/28c6d5d5-0abc-311d-8a4e-ffe54f48748e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adc7f8d9-77be-458a-afed-220f2e24643d/adc7f8d9-77be-458a-afed-220f2e24643d.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:FB:D1:3E:42:45:57:D1:37:1C:EF:79:80:D9:D1:21:84:2E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adc7f8d9-77be-458a-afed-220f2e24643d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:58:51:bd:7c:47:10:3b:75:f1:34:3e:99:5e:52:01:73:bb:
         b7:e6:30:64:38:3b:83:91:82:bd:8e:fd:6d:d4:de:c5:12:79:
         f8:45:cd:df:96:4d:f5:96:88:14:3a:13:d5:f2:1e:1f:d7:c7:
         af:0c:f7:ef:c3:bd:89:ed:51:a1:6b:2b:ec:cd:fb:4d:d3:57:
         14:33:42:ca:5b:21:54:9b:69:0e:8b:e8:fb:5f:8f:c5:29:11:
         16:a6:64:32:d2:f7:36:6d:60:8d:a5:78:90:9f:a8:d1:86:9a:
         ff:28:33:7c:c6:31:93:b1:0b:a3:8b:dc:1a:be:e4:b7:20:de:
         06:a1:a9:a3:14:21:14:2c:8d:b3:76:38:8e:c3:9f:1c:d7:f0:
         b5:aa:b2:63:48:4a:1b:9e:19:2e:a9:a1:2a:e9:8a:5c:f4:8e:
         60:b1:84:dd:ab:73:40:92:49:f2:0c:64:dc:3d:d6:df:39:fe:
         a3:9b:51:35:c9:e1:d1:d1:00:53:ca:58:09:a5:f5:27:3e:70:
         7a:8e:e6:8c:30:1f:b8:9c:b4:8d:ec:90:cd:24:bc:f1:4a:2e:
         41:2f:47:f9:12:56:3d:a2:a7:b5:97:83:22:06:e3:fe:e7:8f:
         a1:02:83:d9:ef:20:1a:ca:c1:c8:23:ec:d5:53:90:1d:a3:ba:
         c9:75:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:01 2025 by rpki-client