Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a006b5a3-e1e2-3bdf-99a5-3b51296f0d20.roa
File:                     a006b5a3-e1e2-3bdf-99a5-3b51296f0d20.roa (raw, json)
Hash identifier:          BNdbl6nao4OrzHG9x19sMvJilmVWOknsTmdCYrXSebs=
Subject key identifier:   CD:10:39:39:D0:6E:BA:AC:1F:69:99:CE:F6:4B:38:9B:4A:88:F4:91
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584694B3BDF425A3FA153F5E0C40
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a006b5a3-e1e2-3bdf-99a5-3b51296f0d20.roa
Signing time:             Thu 18 Jul 2024 16:54:48 +0000
ROA not before:           Thu 18 Jul 2024 16:54:48 +0000
ROA not after:            Wed 16 Oct 2024 16:54:48 +0000
asID:                     1742
IP address blocks:        65.112.0.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:94:b3:bd:f4:25:a3:fa:15:3f:5e:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jul 18 16:54:48 2024 GMT
            Not After : Oct 16 16:54:48 2024 GMT
        Subject: CN=0f559c60-5fe4-4ea9-bd16-830fd76693c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:48:1d:54:c0:dd:aa:c0:83:86:ef:21:c4:3c:
                    2b:9b:0a:9d:88:2d:d4:34:81:40:38:33:b0:c9:90:
                    82:8f:db:cf:39:bc:1f:e4:78:5c:b3:09:4b:9c:c4:
                    ee:cf:39:15:6d:72:e6:3c:ac:b6:05:bf:63:57:61:
                    28:e9:af:cd:d6:46:59:50:b5:fd:db:eb:58:b3:90:
                    c5:2b:b7:5b:e6:b2:38:5e:a9:53:83:1f:60:42:2a:
                    a1:0a:f5:1e:a0:b5:85:f6:bf:eb:83:55:8b:ff:d7:
                    51:56:46:93:ee:47:78:d4:2b:d0:b3:10:b8:7a:72:
                    77:4c:f0:63:fe:d1:e1:9b:f0:a7:ea:d3:83:43:ba:
                    e2:2c:cf:b3:57:ce:58:c2:ce:22:26:9e:b6:bd:d9:
                    16:23:c9:7b:65:da:4c:64:a7:83:07:e9:fb:35:4c:
                    c4:23:a6:37:b2:3f:e9:4e:2a:ce:8a:80:0e:16:0d:
                    9f:df:8e:db:63:78:05:d8:8a:19:c5:ce:1b:a7:8d:
                    cb:16:04:bd:69:09:e4:58:67:a8:a6:15:e7:52:3d:
                    35:9e:08:93:2f:c7:26:7d:41:bf:ab:13:c0:79:a7:
                    8b:70:d1:b2:dd:ef:2c:37:42:ba:40:c7:12:e6:e2:
                    00:e8:0e:bc:21:22:db:a3:e0:de:ea:62:4a:86:15:
                    2c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:10:39:39:D0:6E:BA:AC:1F:69:99:CE:F6:4B:38:9B:4A:88:F4:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/a006b5a3-e1e2-3bdf-99a5-3b51296f0d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.112.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:a4:2c:b2:50:0e:f7:d7:90:0f:d8:48:ad:dc:23:39:4c:b8:
         19:01:1a:c7:02:e0:7b:08:8c:3f:7a:87:c9:13:15:10:c2:fb:
         d2:28:fb:39:e4:74:15:1c:08:ad:d8:31:df:38:50:af:ff:45:
         1c:35:c3:ee:53:7f:d2:ef:ab:35:ec:44:b4:ff:e7:31:e0:c6:
         70:12:f0:74:78:e7:ae:2f:56:bd:44:18:ff:6f:48:56:6b:11:
         5f:56:f7:8d:2b:61:bf:e3:66:3b:0a:78:a1:f8:c9:0d:a4:aa:
         ad:22:4a:42:ec:45:c2:6c:e6:e3:98:6c:cd:a9:4d:d5:c6:87:
         20:87:86:de:1a:af:ef:ca:94:42:66:93:eb:47:e4:6a:2d:17:
         7c:72:db:65:8d:ad:a2:98:be:61:49:16:da:31:e1:a0:2e:2f:
         c2:d0:d2:01:b0:c6:8f:0c:02:1d:21:91:81:1d:ff:8e:48:36:
         08:c6:e8:ec:13:f3:e5:e5:df:fe:68:a0:f5:fd:a1:e2:25:e4:
         c9:df:56:ef:2a:af:49:7a:ee:f6:d8:81:86:ad:40:2e:4a:90:
         95:d3:2c:72:5c:ba:3b:15:17:90:ae:57:72:69:8a:28:0d:bf:
         02:30:6f:dd:89:7d:ec:ca:aa:06:c8:8f:5e:86:4e:71:b4:92:
         5c:3b:3d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:43:05 2025 by rpki-client