Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bcdd42f4-dab6-3d9c-bb0b-b6996331dbea.roa
File:                     bcdd42f4-dab6-3d9c-bb0b-b6996331dbea.roa (raw, json)
Hash identifier:          feWSgJZwP4kDyUh/HMRMqhdC5C1vcRUwx3ukoUAKSLs=
Subject key identifier:   00:5C:D4:45:D5:B0:3B:5C:55:91:88:85:E2:C4:44:44:26:4D:E2:97
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848424AFF7BE4216F8BE4EE25F0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bcdd42f4-dab6-3d9c-bb0b-b6996331dbea.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        97.37.64.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:ff:7b:e4:21:6f:8b:e4:ee:25:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=2865fc84-f412-4c9f-9132-398561cd3647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:71:99:55:a0:10:e5:88:69:ba:0b:8e:e4:9c:
                    54:9d:e7:86:05:11:05:b4:de:2c:be:ce:23:e4:96:
                    df:04:df:57:8b:6f:01:a6:e4:54:34:ad:00:c2:8e:
                    1f:27:59:fd:7d:d7:2c:e6:a8:f6:56:96:36:7f:5d:
                    b9:8c:25:8c:01:f6:33:3e:ba:b6:89:01:cb:2c:7a:
                    3d:2f:fd:d2:be:df:39:d1:bf:39:ae:69:ca:4a:c8:
                    91:42:64:ee:55:5a:7f:c4:62:b5:ae:27:25:f3:d1:
                    1a:f7:a3:df:0a:6c:48:3d:b8:1b:56:d2:1a:c6:4d:
                    93:ce:25:c2:16:29:a6:49:1d:6b:67:bd:65:fa:74:
                    5f:48:4d:75:86:ab:d7:2d:4d:e1:1b:66:f8:da:d2:
                    77:3a:e9:2f:41:05:39:2c:1f:d0:7b:28:48:59:48:
                    14:59:c8:24:f1:58:11:8f:44:8a:2e:d3:99:33:5d:
                    25:ac:f4:44:ec:33:02:ab:f7:bd:26:3c:15:e5:37:
                    22:86:a3:0a:7c:82:87:d9:5b:05:96:85:de:8b:f6:
                    91:d9:60:ca:45:29:80:fd:e7:30:44:7d:50:71:ae:
                    fb:4e:c2:39:c2:fc:e9:49:4a:1f:6d:c2:bd:ca:a1:
                    a1:a9:78:3e:f5:77:3a:29:76:e1:ca:93:fe:3e:db:
                    a2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5C:D4:45:D5:B0:3B:5C:55:91:88:85:E2:C4:44:44:26:4D:E2:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bcdd42f4-dab6-3d9c-bb0b-b6996331dbea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.37.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:80:db:84:bd:41:f9:36:eb:3a:30:fc:d6:69:7a:8c:74:27:
         75:92:75:fc:f4:40:a0:6a:75:7f:85:1c:c1:7d:83:05:92:6d:
         cb:cf:21:71:d9:e5:03:15:75:68:0b:54:d2:c4:b0:f5:09:db:
         89:9a:64:cd:02:e7:82:23:ea:30:ee:7e:e5:a2:7d:49:6e:7b:
         cb:08:59:e4:14:ed:78:2e:36:78:c4:ad:9b:a9:03:d8:a2:f2:
         da:c8:17:71:0d:2d:0a:83:34:b3:b3:fa:57:39:e2:c1:31:c5:
         8c:ee:03:de:8a:a6:e0:c1:ba:6e:b2:fd:16:bc:ad:68:1f:f7:
         e5:ad:04:f7:f3:fa:52:25:31:b6:1c:29:0b:f8:ae:49:03:d9:
         2d:e8:3a:85:92:b2:3c:79:08:93:a3:95:3d:d4:05:14:1c:e5:
         ac:9d:a4:ae:97:3b:fc:f3:ea:11:dd:da:9e:dd:3a:d0:c4:39:
         47:a3:43:74:4d:03:65:53:d4:df:01:e0:8a:13:0d:c8:f2:19:
         35:9b:64:aa:c7:4a:3a:dd:13:68:51:f8:6a:7e:c7:68:76:36:
         ba:20:01:12:61:b0:e9:7a:bb:19:44:ae:73:e4:77:b5:6f:df:
         06:5e:91:33:42:9d:c9:5e:9c:aa:34:fc:45:2c:57:34:bc:d8:
         41:36:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:06:12 2025 by rpki-client