Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7cbb75c-af08-3aa0-9a4d-c618105c4306.roa
File:                     a7cbb75c-af08-3aa0-9a4d-c618105c4306.roa (raw, json)
Hash identifier:          jb8ffjVARmjhWOPvGmz8I5EOid3AUM/waqz/gs1+2mE=
Subject key identifier:   9C:37:19:57:D9:15:41:A8:B7:02:77:FE:85:2B:DD:09:5E:97:F4:2D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583FF8A173209B0C90D8CCB12A40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7cbb75c-af08-3aa0-9a4d-c618105c4306.roa
Signing time:             Sat 19 Nov 2022 12:00:00 +0000
ROA not before:           Sat 19 Nov 2022 12:00:00 +0000
ROA not after:            Sat 20 May 2023 04:00:00 +0000
asID:                     14277
IP address blocks:        64.62.226.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:f8:a1:73:20:9b:0c:90:d8:cc:b1:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 19 12:00:00 2022 GMT
            Not After : May 20 04:00:00 2023 GMT
        Subject: CN=649ed309-b453-4781-b8ad-9a6d77cb74f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:34:4b:43:ee:b7:ec:8c:d7:8b:11:19:08:
                    36:e8:51:41:08:e8:e3:1b:67:d5:a0:86:87:38:e0:
                    f5:46:75:72:e1:55:63:d8:08:de:6a:9e:d3:50:92:
                    b6:ad:d6:4b:97:f8:60:c7:1a:f5:ee:ab:e1:61:16:
                    9c:42:98:de:ff:1c:b3:a8:8b:f7:da:74:3e:b1:78:
                    43:c2:19:2c:92:c1:73:4b:19:81:08:95:88:f0:72:
                    9e:1d:96:ea:e4:ce:79:19:e6:df:fc:f5:48:ad:98:
                    20:c4:c8:09:74:30:37:59:d5:dd:63:86:92:05:c4:
                    19:43:8b:db:6b:9a:37:60:cf:04:8b:01:24:82:f5:
                    3b:c4:f3:69:0c:7e:48:3f:be:45:e5:14:0f:ab:ff:
                    e0:8e:f3:df:35:a3:6c:65:6a:18:42:7d:a5:a9:29:
                    12:55:ef:91:20:47:9c:69:88:72:36:38:0d:bf:d2:
                    6f:ab:3b:24:5e:25:36:88:58:a4:70:be:e9:9a:ea:
                    a4:78:34:e5:03:f7:03:62:1e:cd:e6:2c:50:d3:82:
                    d8:9d:e3:cc:c7:71:b9:ac:07:9d:07:42:3b:10:29:
                    f5:93:71:64:82:ca:34:54:f9:67:86:b7:51:fe:e9:
                    d3:3a:df:00:63:b4:f0:ff:36:19:76:37:51:04:44:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:37:19:57:D9:15:41:A8:B7:02:77:FE:85:2B:DD:09:5E:97:F4:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7cbb75c-af08-3aa0-9a4d-c618105c4306.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b3:b8:83:e8:c2:a4:81:fc:a3:63:7e:4b:17:3f:d7:b7:5b:
         5b:31:3f:4a:77:fa:66:09:b2:30:9d:9f:d8:10:e2:f9:07:5b:
         87:86:40:e5:c1:56:e7:77:cc:e0:f0:ef:72:14:6a:20:b0:d5:
         15:b4:e5:e1:eb:f3:5c:84:3e:b6:48:6f:62:44:ae:fc:06:48:
         da:63:bc:4c:3b:ae:bb:f4:8b:7f:ee:53:52:51:97:47:cd:08:
         36:fa:06:24:f7:ab:99:47:e1:de:7b:7f:00:84:b2:26:d5:23:
         a0:b6:7c:4e:b7:75:ac:26:a7:1f:20:c9:ff:93:fd:5e:99:44:
         20:38:39:bf:df:d1:a1:09:74:62:99:5f:da:c4:04:7d:91:4e:
         1b:74:21:13:ce:73:55:ca:31:9a:45:6c:9f:2e:75:18:6f:f1:
         2e:be:1a:d7:be:cd:18:1f:c2:86:02:01:16:2c:77:3e:9d:6c:
         eb:fd:ba:7b:8b:3f:a6:6d:9c:62:b9:4f:75:1b:bf:37:0e:c9:
         9a:b1:d7:87:92:0d:2d:c5:1a:4c:83:05:f7:03:8b:3e:b7:32:
         cc:9d:f3:15:ca:41:e4:17:5e:5c:58:45:f1:bf:57:1f:3e:04:
         71:65:37:b7:54:e7:f9:10:53:40:f7:2d:75:fb:52:5a:6c:7e:
         a8:80:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:57:42 2025 by rpki-client