Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6da3f727-b6a2-3fb0-94c3-99d2c11d9d59.roa
File:                     6da3f727-b6a2-3fb0-94c3-99d2c11d9d59.roa (raw, json)
Hash identifier:          VZ1Cas1ze2SQUdt4hRBmDOIEevxKmAUxk0mRkEtK3N4=
Subject key identifier:   54:D6:C7:AE:32:25:D2:53:54:D1:A2:4C:9B:D6:41:F4:70:35:2C:13
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328584906489DD3A12868FE6A11CB88
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6da3f727-b6a2-3fb0-94c3-99d2c11d9d59.roa
Signing time:             Thu 27 Feb 2025 18:54:59 +0000
ROA not before:           Thu 27 Feb 2025 18:54:59 +0000
ROA not after:            Wed 28 May 2025 17:54:59 +0000
asID:                     32710
IP address blocks:        164.153.167.0/24 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:06:48:9d:d3:a1:28:68:fe:6a:11:cb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Feb 27 18:54:59 2025 GMT
            Not After : May 28 17:54:59 2025 GMT
        Subject: CN=72664943-8406-45ab-ac7d-5e7c5e3c6cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cf:b7:65:f1:be:e1:b4:e8:c4:a6:f4:59:c3:
                    ed:66:5d:12:55:26:d6:f9:b7:ed:23:3f:6e:53:b8:
                    d5:03:c7:50:8f:00:c8:92:80:b5:33:a8:f9:de:8d:
                    60:e8:48:35:9c:3c:25:73:b8:69:9a:07:24:e2:d4:
                    60:c0:c3:67:28:77:87:d3:c9:28:f8:2d:61:52:00:
                    4d:da:7e:ec:c6:a6:6d:a4:ec:51:1c:d4:44:4f:01:
                    5f:5b:34:16:a7:b8:b8:fd:9e:90:0f:9f:dd:77:d8:
                    cd:9c:90:f2:43:ef:e5:ef:51:7e:bf:77:87:98:d2:
                    a2:5e:2c:d7:d9:11:c5:b6:fd:78:47:81:06:88:87:
                    c1:96:d6:d0:9d:09:1a:31:be:e0:1c:b4:ca:49:da:
                    b6:1c:0e:b6:25:91:f1:b5:8f:d1:e4:36:7f:a0:0b:
                    f4:2b:07:86:57:6a:cc:8a:84:0c:47:48:e2:51:1b:
                    4e:fa:4e:d7:3f:a6:bd:94:f4:ad:5c:2e:b7:c5:c9:
                    5d:95:0a:7c:49:bc:31:ae:b4:42:ca:76:5a:1e:3e:
                    1f:0c:74:77:1e:6d:a8:bc:5d:ba:eb:8d:b2:89:bf:
                    44:a6:0f:84:bd:a3:5f:0c:b4:5a:21:64:22:98:e5:
                    18:5c:79:89:ed:e8:34:65:d2:21:8c:ab:e3:bb:00:
                    44:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D6:C7:AE:32:25:D2:53:54:D1:A2:4C:9B:D6:41:F4:70:35:2C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6da3f727-b6a2-3fb0-94c3-99d2c11d9d59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.153.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:08:c9:5a:7f:59:8f:a0:a0:49:3d:94:ad:b3:3e:68:78:3e:
         52:a8:e7:dd:69:4c:3f:3c:58:c2:77:70:34:b2:36:7a:03:61:
         6c:21:ef:9e:a2:d5:27:f8:99:69:cf:c6:88:fc:92:a7:9b:2c:
         0f:0f:cd:8f:9f:2b:85:32:78:0f:50:a5:d1:da:d7:69:9b:59:
         16:24:ad:cb:e6:fb:0e:09:27:4d:06:2e:f9:5e:0f:a6:b3:dd:
         82:b8:aa:94:5e:dd:c8:ca:33:2b:04:a0:f2:32:c7:c4:0f:5a:
         62:1c:30:59:da:7d:ec:ea:44:85:2b:b9:cb:0f:3a:a6:1c:2a:
         c4:ef:ea:32:84:04:52:b2:88:2b:97:93:c0:ec:63:98:b9:49:
         20:a7:03:7d:1e:5a:80:04:a6:76:7f:5b:64:94:ac:6e:a7:83:
         51:8c:dd:e5:de:d7:be:df:05:f4:fa:f8:3a:df:c3:6e:0e:61:
         4c:30:91:6c:f3:14:38:6a:46:80:95:03:d8:55:2a:45:fe:72:
         33:e1:2c:ea:c6:d7:70:cb:c6:dc:84:6b:e3:20:a6:95:44:d2:
         60:0c:7a:28:6f:77:d9:e2:1b:3c:88:53:dd:89:c1:02:f2:7c:
         b4:3c:3d:7f:b0:93:d7:41:64:42:e3:dd:89:61:a0:ca:fa:3d:
         44:17:53:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:23:59 2025 by rpki-client