Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/64d63565-1890-3ed4-a8a9-955973792697.roa
File:                     64d63565-1890-3ed4-a8a9-955973792697.roa (raw, json)
Hash identifier:          Jb/vOS9cdpAgVM/L2VG3gY1rfk+PpnXEk4diMrnrdrY=
Subject key identifier:   52:1D:ED:BB:91:F5:8A:F5:03:04:28:02:B5:84:EB:B0:C1:D8:8E:70
Certificate issuer:       /CN=3d2a810f-f980-4f77-8ab7-d979958ffb62
Certificate serial:       010D0C9F4328584423CD1D2C72654E33DF045800
Authority key identifier: 0F:A4:68:0E:03:74:A1:ED:83:CB:18:96:2B:BF:8D:D2:47:D6:13:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/64d63565-1890-3ed4-a8a9-955973792697.roa
Signing time:             Thu 07 Dec 2023 20:45:43 +0000
ROA not before:           Thu 07 Dec 2023 20:45:43 +0000
ROA not after:            Wed 06 Mar 2024 20:45:43 +0000
asID:                     25937
IP address blocks:        104.244.128.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:23:cd:1d:2c:72:65:4e:33:df:04:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d2a810f-f980-4f77-8ab7-d979958ffb62
        Validity
            Not Before: Dec  7 20:45:43 2023 GMT
            Not After : Mar  6 20:45:43 2024 GMT
        Subject: CN=c7865cb2-9aba-4d9f-a80c-c7fa8d4365af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7f:a8:46:92:00:98:6a:34:a3:0a:cd:cd:57:
                    48:0e:ed:e8:91:11:13:6d:4b:7a:1a:fb:42:cc:89:
                    29:dd:25:e6:46:cf:2b:0f:d6:74:4c:e2:5f:e0:9c:
                    14:d7:20:64:03:08:b1:74:bd:3a:41:34:43:88:7a:
                    d0:c0:c8:4f:d5:7b:0c:70:d3:92:62:cd:b0:aa:49:
                    41:98:eb:a1:58:8b:e1:df:44:86:7c:fc:54:51:23:
                    56:e6:63:6a:80:c0:6c:cc:bf:c7:c7:7d:c6:93:6a:
                    b7:83:1a:aa:9f:c3:f1:09:73:2a:ee:b6:8d:00:26:
                    b3:73:09:d4:5e:21:eb:58:8d:1b:97:ae:e9:7e:bc:
                    cb:34:f3:06:87:b3:ea:03:02:f5:65:16:20:64:ef:
                    5c:ec:53:f7:e9:51:4f:b2:e7:67:03:9c:e0:b1:fc:
                    7f:71:02:a4:cf:7d:b6:1e:52:a5:2a:87:fe:68:0c:
                    49:f5:ef:9e:ed:17:96:bd:ca:a5:f2:fd:3c:2e:2e:
                    38:21:59:68:63:06:8e:dc:70:bd:49:2b:5e:3d:c6:
                    fc:a1:be:06:35:bf:7d:6a:14:69:5c:39:11:ca:59:
                    60:f7:06:ef:d2:1b:9c:8c:d7:30:b3:af:db:d0:6f:
                    66:7b:d5:f1:09:d9:69:96:f5:8b:4e:60:67:7a:ff:
                    2b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1D:ED:BB:91:F5:8A:F5:03:04:28:02:B5:84:EB:B0:C1:D8:8E:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/64d63565-1890-3ed4-a8a9-955973792697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62/3d2a810f-f980-4f77-8ab7-d979958ffb62.crl

            X509v3 Authority Key Identifier:
                keyid:0F:A4:68:0E:03:74:A1:ED:83:CB:18:96:2B:BF:8D:D2:47:D6:13:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2a810f-f980-4f77-8ab7-d979958ffb62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:14:23:07:3e:ad:9c:51:8d:20:12:74:4d:7d:55:7b:65:3a:
         27:75:54:f0:29:a4:3b:e0:b4:a7:3b:46:c5:36:61:83:45:6e:
         11:10:58:87:29:7b:a7:06:f0:ed:23:68:b5:31:d8:5d:b6:c0:
         2f:0d:c6:21:e3:dd:d8:de:6b:66:12:d9:79:4e:26:e7:f1:22:
         37:6d:43:75:54:e4:bb:ab:7f:d3:89:53:7a:36:e3:ff:f0:6c:
         2f:3c:f0:bb:b9:1d:91:dc:3e:6c:99:ed:75:40:7b:fe:fb:3d:
         d4:86:7e:19:ff:1d:44:97:04:2e:1e:dd:36:22:d2:7c:1a:59:
         47:c3:f4:72:7f:d3:c2:59:24:15:d5:44:82:c7:fa:87:4d:c8:
         66:d7:00:10:ad:95:dc:7b:b6:e3:95:c3:56:08:8b:66:55:40:
         de:a2:09:d6:33:82:42:1e:05:60:9e:42:76:43:9c:e6:47:bc:
         78:4e:a5:e8:6b:d6:25:41:2a:76:ad:9c:68:9e:d3:25:c2:49:
         80:97:66:91:61:fb:1f:43:15:4a:90:7f:b5:40:6d:e1:0b:28:
         ed:56:3d:38:22:71:70:f7:7c:36:35:19:2f:06:b2:ec:e8:65:
         94:86:ed:0d:52:19:94:ee:4a:5c:3a:8b:7f:91:33:7f:1f:bb:
         eb:81:36:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:46:16 2025 by rpki-client