Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/57d45466-c8a5-36c4-ae7b-f374b8431261.roa
File:                     57d45466-c8a5-36c4-ae7b-f374b8431261.roa (raw, json)
Hash identifier:          69x/nnCp6jxY/Xp89gzt7QS6DBrKpyg+dlzcB0XDvDg=
Subject key identifier:   BC:42:DB:98:00:D9:AC:E4:DB:32:9C:8B:E7:E7:22:0B:91:F3:FC:82
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A51020A0990E5152CAD2300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/57d45466-c8a5-36c4-ae7b-f374b8431261.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     36103
IP address blocks:        74.82.57.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:02:0a:09:90:e5:15:2c:ad:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=878aea80-daba-445a-9985-ac3ad650c3f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a1:b0:02:50:af:5e:dc:6d:cb:73:81:7a:4e:
                    f0:48:32:95:86:9b:7d:c1:53:e5:0d:3f:88:39:0b:
                    e1:7b:18:65:96:47:ce:1f:2c:36:f9:9a:63:18:0a:
                    a4:4b:c9:ba:4d:d2:08:60:be:df:d0:74:21:44:91:
                    9e:f6:70:fc:9b:84:4e:59:db:02:0b:6e:8b:3a:62:
                    f1:04:69:1d:8a:58:c8:40:5e:b3:30:17:8c:1c:15:
                    d2:ac:c3:02:37:39:16:9a:b2:89:cb:3b:e8:70:78:
                    22:2a:f2:9c:72:b9:ad:d4:da:bb:e9:8f:38:21:87:
                    ec:ad:de:4a:99:f5:ce:9b:72:d6:d1:a2:de:d4:b3:
                    ad:8f:4b:6a:0b:6e:77:bb:a2:94:b7:fd:f8:fe:73:
                    14:6f:e3:47:4c:c0:12:07:5c:b6:32:5e:56:3d:1a:
                    aa:73:98:c6:42:c0:4c:ed:a2:35:98:14:ec:7a:0e:
                    96:e8:c7:75:2f:57:5e:21:97:6a:bd:1e:59:aa:df:
                    d9:3c:be:e7:a6:c9:15:d4:68:d9:44:cf:ec:db:ba:
                    87:e9:21:b9:c8:91:39:45:3c:57:f6:03:ca:82:56:
                    fb:30:31:51:4b:f1:80:21:4c:e9:ca:87:72:55:7d:
                    bc:f9:f7:35:6c:eb:1c:36:15:59:f7:c5:37:4e:9f:
                    14:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:42:DB:98:00:D9:AC:E4:DB:32:9C:8B:E7:E7:22:0B:91:F3:FC:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/57d45466-c8a5-36c4-ae7b-f374b8431261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:07:3c:ff:9d:dd:2d:9b:f6:23:b4:dd:df:e4:e0:5a:14:13:
         24:54:47:05:4d:cf:38:e4:17:26:4e:bd:87:69:7b:94:19:dc:
         fa:19:9e:61:66:9a:b3:8e:95:a9:80:26:b9:89:53:bb:3c:3f:
         27:04:87:d0:ab:d4:02:f5:d3:51:5d:2f:b8:01:e3:ac:e0:9f:
         bf:8e:00:0e:7a:24:60:bf:a2:87:87:8e:bf:5f:d3:51:e7:3a:
         8e:5f:eb:0f:34:50:72:f3:3e:47:4e:28:1e:79:32:64:7a:3c:
         c6:bf:16:75:98:95:79:92:45:73:2a:86:7b:fd:6b:7a:e2:95:
         34:26:d9:3f:f4:54:46:8b:07:9c:1d:ff:a5:9e:79:39:89:36:
         9d:64:a2:49:51:df:ad:51:20:15:14:70:1a:af:48:95:40:31:
         ec:17:73:38:62:b6:a3:76:9f:f9:98:10:ad:bd:2b:1a:8a:cc:
         7b:b5:2a:f5:7b:97:5d:0d:51:1f:68:4a:1f:b1:cb:45:f1:9c:
         6f:e8:f5:56:cd:75:2d:4c:b7:bd:64:1d:9b:ac:c1:35:86:d9:
         5c:7b:83:f7:76:84:c0:ae:1a:08:0c:d1:4f:64:e7:91:94:c4:
         87:8a:8f:be:84:ce:e0:e7:2a:d5:fc:2f:ab:41:2d:dc:13:24:
         43:f3:f3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:53:52 2025 by rpki-client