Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/2ab9a0ab-e3fe-34b9-b957-1790cccedce7.roa
File:                     2ab9a0ab-e3fe-34b9-b957-1790cccedce7.roa (raw, json)
Hash identifier:          xAwznFosyLnuFXddn7nr1o4PFUXeIpyJKvytmkys038=
Subject key identifier:   8E:5F:A9:F6:E2:97:F8:72:6E:D8:76:28:C6:40:17:72:CC:93:1A:0C
Certificate issuer:       /CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
Certificate serial:       010D0C9F43285847799840F9412F74B8907F5800
Authority key identifier: 08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/2ab9a0ab-e3fe-34b9-b957-1790cccedce7.roa
Signing time:             Tue 08 Oct 2024 16:39:32 +0000
ROA not before:           Tue 08 Oct 2024 16:39:32 +0000
ROA not after:            Mon 06 Jan 2025 17:39:32 +0000
asID:                     2698
IP address blocks:        64.113.64.0/24 maxlen: 24
                          64.113.65.0/24 maxlen: 24
                          64.113.66.0/24 maxlen: 24
                          64.113.67.0/24 maxlen: 24
                          64.113.68.0/24 maxlen: 24
                          64.113.69.0/24 maxlen: 24
                          64.113.70.0/24 maxlen: 24
                          64.113.71.0/24 maxlen: 24
                          64.113.72.0/24 maxlen: 24
                          64.113.73.0/24 maxlen: 24
                          64.113.74.0/24 maxlen: 24
                          64.113.75.0/24 maxlen: 24
                          64.113.76.0/24 maxlen: 24
                          64.113.77.0/24 maxlen: 24
                          64.113.78.0/24 maxlen: 24
                          64.113.79.0/24 maxlen: 24
                          64.113.80.0/24 maxlen: 24
                          64.113.81.0/24 maxlen: 24
                          64.113.82.0/24 maxlen: 24
                          64.113.83.0/24 maxlen: 24
                          64.113.84.0/24 maxlen: 24
                          64.113.85.0/24 maxlen: 24
                          64.113.86.0/24 maxlen: 24
                          64.113.87.0/24 maxlen: 24
                          64.113.88.0/24 maxlen: 24
                          64.113.89.0/24 maxlen: 24
                          64.113.90.0/24 maxlen: 24
                          64.113.91.0/24 maxlen: 24
                          64.113.92.0/24 maxlen: 24
                          64.113.93.0/24 maxlen: 24
                          64.113.94.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:98:40:f9:41:2f:74:b8:90:7f:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
        Validity
            Not Before: Oct  8 16:39:32 2024 GMT
            Not After : Jan  6 17:39:32 2025 GMT
        Subject: CN=881d4873-4291-416b-a591-92476de08918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4e:de:33:32:33:d9:08:15:91:18:f4:a3:82:
                    c8:06:07:ee:c0:8e:4b:5e:3b:d3:13:a5:3a:ac:e2:
                    58:52:80:32:e2:74:48:39:e1:5c:da:b2:07:60:a4:
                    aa:39:e4:90:64:7c:c4:a0:1a:0e:4c:99:c0:d3:db:
                    b6:58:6f:64:4c:c6:a2:c0:5e:57:4a:1e:59:01:07:
                    7a:bb:60:c7:26:90:60:4f:2e:db:43:35:63:d2:a7:
                    5f:f4:72:e6:3e:d4:5b:7f:60:b2:65:a9:d5:ae:ab:
                    ee:ae:39:bd:cb:ca:d5:2b:ba:bc:69:60:df:e2:24:
                    16:b4:72:dd:7a:85:63:89:b6:6f:90:6e:78:89:b0:
                    7f:76:5c:d8:10:67:f6:fd:58:19:16:97:d8:5c:00:
                    42:a7:87:a5:20:5d:dd:8f:bf:9e:63:bc:78:f3:4e:
                    76:c7:cd:ca:b2:b7:89:1b:a5:bb:9c:05:3e:2e:7c:
                    53:57:63:dd:02:2f:e7:1c:ae:e2:85:0b:1d:c8:40:
                    e3:18:87:d5:eb:b7:06:82:99:12:31:ac:f6:18:9d:
                    af:ab:24:4d:7d:75:54:3a:fc:3b:4a:03:0e:7b:67:
                    09:13:3b:01:f5:60:5e:1a:99:a2:ef:5a:ab:9c:72:
                    3e:c9:86:06:cf:65:10:dc:79:b6:4d:5f:27:5c:2d:
                    ba:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5F:A9:F6:E2:97:F8:72:6E:D8:76:28:C6:40:17:72:CC:93:1A:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/2ab9a0ab-e3fe-34b9-b957-1790cccedce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl

            X509v3 Authority Key Identifier:
                keyid:08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.64.0-64.113.94.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:c5:7f:c6:92:80:38:57:b0:58:3f:33:17:56:6c:22:dd:9f:
         16:0a:67:87:27:35:04:69:1b:b3:88:63:41:ce:25:d4:7d:38:
         46:a2:00:46:20:99:5f:2f:15:05:cd:f4:82:8d:f6:a9:b8:f5:
         fb:23:5e:f6:9b:44:f3:ba:12:e8:57:d1:af:24:e9:77:0e:44:
         0d:39:ea:0d:8b:35:b1:5a:76:a3:31:77:59:41:87:78:ce:b9:
         d7:4b:53:f7:14:5c:07:01:f4:81:3d:85:54:5a:ac:d9:41:21:
         c7:a4:41:3d:f8:ee:d7:86:8c:2f:58:79:2a:e3:7f:2f:a5:65:
         fd:a5:db:24:cd:c1:0f:4b:2b:d9:03:ae:ce:65:38:72:da:db:
         55:08:86:dd:30:09:a3:84:58:50:b8:9e:12:c0:5a:5c:17:4c:
         f3:82:d9:c2:62:74:ba:48:6f:a5:61:78:6b:04:09:ea:e6:e4:
         81:29:bf:a2:58:ff:8f:94:9a:51:89:d6:6c:2d:b5:f5:75:62:
         a0:3c:7d:4e:5d:5f:ce:7d:8f:df:e1:c3:89:a4:09:1b:12:4d:
         1e:1a:d4:0b:34:2d:c2:a3:fe:58:c4:c2:f1:39:d0:7a:42:93:
         02:25:ac:f1:22:cc:c9:3e:a0:aa:ef:2f:f5:16:e5:37:ae:7a:
         7a:3f:a2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:02:59 2025 by rpki-client