Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8cf9005-7763-3ade-b53d-d0d9239f92ce.roa
File:                     d8cf9005-7763-3ade-b53d-d0d9239f92ce.roa (raw, json)
Hash identifier:          sxBSuULJ3edqxy9yDZzEW3WfPUDBfYAEucDQD8evenE=
Subject key identifier:   EA:9B:24:06:C9:27:BC:8E:88:CB:C1:7F:A0:CA:40:C1:32:CF:46:82
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285842B065881F30BF66FD7451ADC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8cf9005-7763-3ade-b53d-d0d9239f92ce.roa
Signing time:             Wed 26 Jul 2023 12:00:00 +0000
ROA not before:           Wed 26 Jul 2023 12:00:00 +0000
ROA not after:            Mon 29 Jul 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        2600:1901:c0a0::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:65:88:1f:30:bf:66:fd:74:51:ad:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 26 12:00:00 2023 GMT
            Not After : Jul 29 04:00:00 2024 GMT
        Subject: CN=2459a16e-f033-46f9-82ef-6d108e414ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:78:46:08:a2:07:8f:58:f8:16:fb:2c:67:77:
                    d7:78:7b:b3:df:7b:a7:26:d7:04:4c:bc:1e:fd:5c:
                    f0:63:1d:f2:5a:3c:ec:6a:29:0f:28:ae:76:87:e3:
                    5b:72:f8:d3:83:b4:90:bb:87:8d:dc:08:85:4a:9c:
                    b0:81:ba:f3:d5:a3:be:31:70:67:41:db:3e:d4:20:
                    36:cc:0f:36:55:d4:56:6b:9b:31:fe:d2:6a:74:28:
                    17:1f:84:d5:47:dc:11:55:8a:50:6d:c1:9f:39:7b:
                    44:37:62:d9:af:0a:f5:f4:09:c9:5e:ec:7d:89:d1:
                    0f:61:df:dc:10:44:e8:41:71:5b:0e:e7:40:39:a0:
                    b4:c2:62:7d:42:ee:51:34:6f:bf:d9:a8:a3:f9:3e:
                    92:d2:fa:99:7f:e1:d7:31:f6:c6:71:ec:d9:53:a7:
                    f7:8f:94:b1:bd:f9:64:14:66:ae:67:3d:ac:01:a1:
                    2b:53:59:e8:a2:2c:bd:d3:a4:2f:68:d9:26:49:20:
                    fa:a0:8a:0c:ae:42:19:53:62:c1:1e:0c:11:e5:49:
                    3a:dd:8d:81:37:39:fa:ca:81:1e:71:63:9a:c6:56:
                    5b:57:a4:09:65:e1:a7:df:98:2c:f8:92:67:ce:31:
                    3d:6d:ca:7c:fd:8b:37:d7:28:13:e9:5d:7c:e6:7a:
                    64:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9B:24:06:C9:27:BC:8E:88:CB:C1:7F:A0:CA:40:C1:32:CF:46:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8cf9005-7763-3ade-b53d-d0d9239f92ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1901:c0a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:22:8d:54:6d:28:6a:24:e6:94:99:de:9b:45:14:ca:06:b6:
         d1:74:57:bf:30:72:22:a7:9e:b6:98:f5:7b:57:dd:1b:10:c1:
         f5:e6:e0:bf:2e:6d:08:bd:55:91:e0:ef:a2:ca:30:b0:15:08:
         dc:d5:c3:31:64:6c:f0:dc:a0:58:a4:0d:2b:00:0d:97:7b:e5:
         28:1d:17:6e:79:f7:a4:c9:83:b5:40:96:0d:b3:b0:5c:c0:9e:
         16:7f:9b:26:5e:3d:b9:72:ae:aa:2a:56:44:cc:b9:83:89:be:
         d7:3c:58:62:f6:20:25:de:27:8b:ee:27:b1:36:72:a9:fb:f5:
         c5:1b:21:ec:11:14:56:7f:e0:de:4f:31:e8:6b:d1:99:58:ce:
         7c:45:fc:0d:b0:02:72:6a:29:c0:1c:3c:a3:65:e0:38:50:6f:
         f6:ad:4f:41:9e:41:94:6c:7d:ca:96:b2:25:7b:ef:7b:0e:e6:
         d9:07:36:52:c3:b3:b1:0a:5f:a8:bd:2d:42:2b:ff:cc:71:0f:
         ad:ab:fc:45:f8:b8:b5:92:6c:a7:7a:ac:55:39:33:da:78:6c:
         03:d9:ff:f7:82:88:87:31:26:a9:50:c9:6e:5c:64:a4:53:38:
         9b:6c:ab:65:92:c1:3e:c4:22:41:26:16:7f:a6:17:87:00:cb:
         e3:6f:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:08:47 2025 by rpki-client