Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/622f5913-7f66-3096-ad15-8d4fb2762468.roa
File:                     622f5913-7f66-3096-ad15-8d4fb2762468.roa (raw, json)
Hash identifier:          Xfvl64WPXYCV8g2B0ZYjBI3CPmTzvoplTyM5a9z2AdU=
Subject key identifier:   1B:2A:A5:61:4B:FF:F0:0A:F5:57:FF:C6:08:E4:08:75:97:06:5A:26
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583AA7BBDE87C0F3F4A85286A400
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/622f5913-7f66-3096-ad15-8d4fb2762468.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     396982
IP address blocks:        199.192.113.0/25 maxlen: 25
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bb:de:87:c0:f3:f4:a8:52:86:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=73a9d6b3-761d-49a7-8d6a-8948cdfe9db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:cd:be:31:1c:52:f4:66:e9:9c:96:39:59:
                    d4:95:82:2a:18:4c:af:05:58:04:6b:d5:82:5f:41:
                    8a:dd:50:52:66:c1:df:c6:b4:cd:b6:6d:b7:e2:fe:
                    93:98:f5:b5:f3:ef:be:8a:c6:10:77:40:6f:30:b8:
                    50:5b:56:a4:6f:cc:46:c1:c8:d0:df:56:dd:25:f4:
                    e4:da:be:82:92:e9:d7:2c:b0:e8:3d:1e:e2:1c:86:
                    e5:28:a9:92:4c:b6:c2:a4:38:b4:a7:b1:c1:ad:fe:
                    b9:2b:9c:1a:28:54:41:dc:2e:7b:b3:4e:3b:a9:b9:
                    65:75:c0:87:21:15:47:fc:f7:de:29:9e:5a:fe:5b:
                    38:01:70:90:7a:7a:bf:78:3c:c4:d8:0a:3c:d5:02:
                    69:a9:97:4c:12:84:28:2b:10:c5:9a:54:99:a7:d2:
                    e5:3b:96:0a:50:82:9b:d0:5c:15:a4:7a:23:8d:49:
                    e1:b1:83:07:e9:e2:9b:4e:24:1c:b0:38:5d:14:52:
                    ba:85:c1:92:81:3b:30:2d:02:8b:39:88:5a:f7:d1:
                    f3:1a:67:89:75:b1:a8:5a:ee:f8:bf:fd:2d:31:9d:
                    ce:02:86:17:89:c3:01:b7:76:54:5d:02:7d:4e:cc:
                    96:39:5a:c7:2d:2d:2b:f4:2c:ae:27:e2:58:7c:5e:
                    fb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2A:A5:61:4B:FF:F0:0A:F5:57:FF:C6:08:E4:08:75:97:06:5A:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/622f5913-7f66-3096-ad15-8d4fb2762468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.113.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:58:7a:df:d0:37:5a:d1:7b:3e:70:52:4b:59:4a:3f:11:0d:
         a9:d4:65:03:08:ce:10:c9:12:02:e3:8c:f4:51:8c:d9:01:c8:
         76:b0:64:07:51:5f:1f:fc:20:f8:09:e1:5d:3c:9e:6f:a8:ce:
         7f:86:08:95:09:88:b4:9b:25:66:51:92:8d:3a:7d:ff:32:c3:
         d5:8a:ff:68:ff:ad:a1:b9:78:71:80:04:47:fb:10:8c:f1:72:
         d0:dc:c3:53:18:5b:5b:62:81:37:ef:31:19:4b:1e:e5:77:8b:
         38:16:fb:9c:96:7c:c8:be:93:bc:01:09:78:c4:ad:19:ee:fe:
         06:75:2a:8c:96:d5:94:85:56:f2:4d:5c:a6:56:1c:87:24:da:
         51:cd:09:17:9a:59:0e:00:0d:ac:fe:d1:89:d0:37:ad:a7:59:
         07:19:36:e6:67:70:6d:41:e4:63:ca:52:20:0b:dd:08:f9:fe:
         6b:35:64:16:60:83:e9:d0:a0:83:09:6b:f6:37:00:eb:40:90:
         e2:34:5a:33:ab:83:96:4f:a7:d0:1d:c1:5f:6e:89:4a:3d:6c:
         16:e8:ce:4d:d1:54:76:c2:da:b9:1c:84:c5:36:0f:82:20:07:
         62:cd:f0:05:5d:b4:62:c8:4e:10:7e:0b:62:17:d2:ad:41:db:
         88:3a:a8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:23:46 2025 by rpki-client