Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b81819be-2045-3298-ac94-de5b9bea9d2d.roa
File:                     b81819be-2045-3298-ac94-de5b9bea9d2d.roa (raw, json)
Hash identifier:          VTICekBJ9/hKTCCB5uvxALBfxF82eGJ0S+VhMOOaYJo=
Subject key identifier:   9D:B5:FE:2E:D5:0C:AA:25:25:CB:7C:36:67:5A:84:9F:03:8E:58:0D
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A09D736B9EF92F4BF1E8178
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b81819be-2045-3298-ac94-de5b9bea9d2d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        107.167.180.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:09:d7:36:b9:ef:92:f4:bf:1e:81:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=99ec8b4f-4fc9-416b-8ac5-e8d499179650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:47:e3:35:fd:79:d2:1f:a3:79:80:a6:3b:1a:
                    e5:4d:cd:c9:a1:c3:e4:ed:b7:1f:87:aa:80:c1:5c:
                    7f:20:46:a9:21:4e:3d:0d:3e:49:63:e2:42:44:45:
                    9e:84:56:4a:e5:33:68:22:f2:86:52:96:ce:97:5e:
                    ea:01:61:25:1d:20:c5:c8:0c:a8:3d:53:65:17:ca:
                    b4:1f:0a:ff:5a:fc:37:fb:53:7e:59:2c:5c:56:67:
                    c6:87:50:c0:90:45:d7:6a:f9:08:05:bb:bd:82:e3:
                    80:97:04:29:cf:f7:bb:0f:b8:a0:74:c8:d1:9a:50:
                    94:e4:ab:6b:60:92:60:69:6a:bc:f8:bb:0e:e8:48:
                    96:36:51:fa:32:81:82:58:b9:46:21:85:df:77:5c:
                    18:6e:d5:73:34:67:1a:94:f6:3a:38:7d:45:14:82:
                    8e:3c:1f:ee:92:af:02:97:8e:4b:e3:fe:c1:53:e3:
                    52:86:36:ee:13:f0:5e:fb:f1:1d:0b:2b:73:70:f1:
                    78:02:45:9d:ed:2c:d9:0b:2f:d0:2c:f7:b6:56:a3:
                    85:eb:77:45:60:54:0d:2e:92:e3:13:43:4a:de:2b:
                    c5:79:8d:f9:e6:20:01:94:22:85:d8:58:58:53:e3:
                    f5:d0:20:98:92:d4:4c:62:fd:6f:26:56:4e:dc:d9:
                    2d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B5:FE:2E:D5:0C:AA:25:25:CB:7C:36:67:5A:84:9F:03:8E:58:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b81819be-2045-3298-ac94-de5b9bea9d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:23:39:26:71:ff:61:3c:d9:a9:d7:63:f2:be:47:fc:c8:3f:
         60:a1:39:55:1f:35:26:da:8d:28:2b:dd:47:52:68:2e:7a:10:
         14:62:c3:f2:83:0b:23:10:52:6c:24:a9:51:8a:df:db:78:2c:
         2d:61:f3:44:c7:a0:73:91:de:64:e1:df:8d:88:ad:c4:f2:f1:
         61:77:97:a8:21:a9:36:16:7a:3f:ee:18:3f:6a:f2:30:23:de:
         43:5f:1a:c1:83:e2:b2:e7:42:0a:56:39:6f:f1:dd:b2:27:d4:
         c4:f1:be:b9:52:0a:26:07:24:8e:b8:51:5a:b0:5a:c9:e4:02:
         36:38:69:56:01:5c:91:8d:56:81:62:15:c4:0e:17:0b:6e:dd:
         07:87:d6:83:1a:eb:bb:ae:47:46:1e:d3:56:2f:20:17:8e:72:
         bf:21:4c:50:52:7a:68:d6:52:9c:0b:01:97:13:de:01:88:a6:
         4b:34:34:eb:4b:f2:e8:25:0d:e3:02:9e:d3:b7:cf:29:e8:68:
         9c:73:1b:0b:23:e0:6a:e0:63:f3:23:d1:b9:c4:1b:81:e1:55:
         d6:e6:68:c4:fb:86:9a:eb:77:98:d2:58:ec:5f:aa:fd:5d:46:
         b6:19:20:83:a4:63:fd:61:52:f1:c7:66:bd:ea:81:17:52:ba:
         24:e7:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:56:22 2025 by rpki-client