Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0507600-cfdb-3c4e-981b-aff4dbcdf564.roa
File:                     a0507600-cfdb-3c4e-981b-aff4dbcdf564.roa (raw, json)
Hash identifier:          4gzqgPqyYZ/YzE9V969VHD9e/ZFtYVt/ZDoVjVZypKE=
Subject key identifier:   F0:68:7D:13:99:71:76:A5:95:F3:89:76:5E:34:58:DE:49:3E:26:92
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424AFFBAD200E23D6A0AE980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0507600-cfdb-3c4e-981b-aff4dbcdf564.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        97.37.136.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:ff:ba:d2:00:e2:3d:6a:0a:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=2663cc2c-143d-4a0a-b96d-02676bb42f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1c:d1:7c:6a:1d:e2:ee:67:08:14:62:04:52:
                    c4:5e:b7:5e:5b:f3:26:e8:e6:37:75:ac:7b:f5:70:
                    9a:56:65:06:08:96:93:d3:ff:e0:a4:dd:fb:6e:13:
                    b3:69:b2:1e:58:91:5c:08:3d:47:d8:3b:19:ac:90:
                    57:46:61:16:d4:6f:da:b5:3e:79:2a:0e:42:e1:a5:
                    bf:60:0f:48:10:0c:43:46:0b:76:b8:55:81:dc:53:
                    02:57:bd:6b:54:bf:c8:36:0a:a0:1b:21:ee:55:03:
                    96:cd:8e:34:94:83:ea:79:ab:be:5e:4e:57:90:70:
                    b6:ef:25:23:9b:b9:d6:d2:65:2f:7c:93:24:e3:55:
                    a4:c6:77:a9:0a:c4:84:2d:f4:ea:65:f0:8e:ce:7c:
                    5d:5f:80:73:19:af:3e:3c:b0:c2:a8:09:aa:d4:c1:
                    a2:ff:58:86:f2:a8:14:5e:51:e8:9b:e7:5d:f5:c7:
                    27:14:b0:d6:0e:cd:60:60:e1:de:1b:77:93:92:71:
                    b9:65:41:67:98:46:24:54:ca:34:15:18:c6:bd:fc:
                    fa:1f:1a:09:3b:42:69:25:9a:9e:12:45:d3:07:8d:
                    80:42:96:52:8b:ff:f1:fa:67:9e:14:18:19:3b:76:
                    e8:c4:fa:01:bb:3e:71:f1:35:40:31:fb:1b:25:61:
                    c6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:68:7D:13:99:71:76:A5:95:F3:89:76:5E:34:58:DE:49:3E:26:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0507600-cfdb-3c4e-981b-aff4dbcdf564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.37.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:31:2d:f3:d5:65:3a:a7:62:64:47:37:99:25:a5:cc:8d:47:
         ee:0c:10:01:c9:fb:27:99:08:33:08:86:40:44:79:c3:57:bb:
         2b:83:1c:4e:8b:58:52:43:11:8b:a7:8e:c0:31:14:4a:39:bf:
         e4:73:5a:85:25:53:de:73:02:cc:14:fb:a7:3a:55:1b:1e:a8:
         22:15:25:76:5c:a2:df:db:e5:c9:42:3a:85:06:02:1e:a8:71:
         96:63:25:41:bc:65:d9:2f:83:45:73:11:d3:22:38:1e:d5:a6:
         04:a6:98:73:ed:c4:8b:2e:32:38:1a:ae:6e:be:d3:b9:e9:16:
         3f:43:bc:60:95:27:e2:06:e3:bd:b8:3b:8f:09:39:33:f2:13:
         0b:12:7b:60:c1:05:8d:97:e4:80:e1:93:1c:ec:f9:c1:58:33:
         d6:e5:eb:d0:cf:cb:3f:80:2d:b6:09:7a:0f:44:c9:54:50:1b:
         2e:1f:a1:62:97:95:6f:fb:24:79:00:51:de:4d:26:bd:7d:95:
         50:aa:ba:f8:68:e7:40:39:90:15:39:23:50:aa:ef:fe:c9:fb:
         4f:2e:0f:0a:e2:00:9a:f1:46:c5:7d:da:31:05:89:d9:2a:1f:
         8c:d1:d0:17:a0:ff:2f:1e:bc:2c:12:c6:cf:5a:a0:07:c5:95:
         7c:ea:f8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:48:32 2025 by rpki-client