Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db22d5da-1658-37ff-9578-b121b4dc709c.roa
File:                     db22d5da-1658-37ff-9578-b121b4dc709c.roa (raw, json)
Hash identifier:          TQfcWicNoYBt6QsV285/Q1mpe7bPQS1kn6haIVFhS78=
Subject key identifier:   6B:3F:47:E0:B8:E8:63:59:DC:14:B0:79:B1:72:8C:6A:A0:48:6D:30
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A092AA328FFEE19C6904080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db22d5da-1658-37ff-9578-b121b4dc709c.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        199.192.112.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:09:2a:a3:28:ff:ee:19:c6:90:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=d1f6fde5-a9b6-43d4-9f7b-c10c6aef1763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e6:66:7f:1f:30:ca:3b:4a:fc:44:2c:67:31:
                    5a:86:29:d0:be:ec:56:de:78:95:9c:75:21:98:d3:
                    0b:c9:fa:ff:63:80:5c:1b:17:6f:5a:e6:ff:32:e1:
                    31:00:46:13:9e:28:ad:c3:f8:4a:e0:2d:e3:3b:a8:
                    f8:c3:25:82:b0:9a:1d:2c:25:89:57:20:91:5f:98:
                    a2:5c:4a:77:76:a7:e9:02:9b:c2:57:19:36:bc:7e:
                    e6:cc:d3:ec:48:07:10:32:e7:27:2d:02:73:54:16:
                    48:42:da:02:4e:9c:7f:e8:0b:c9:f5:fc:ca:82:9c:
                    91:19:19:c3:fb:db:4d:81:69:f7:76:f4:93:11:a1:
                    3f:dc:44:88:54:d4:13:f0:5e:fa:bc:2e:10:a0:3c:
                    ae:2f:a4:c8:4e:b3:66:b0:7b:d2:87:d7:c4:a0:47:
                    9f:5b:28:37:e2:21:d9:32:6f:c8:45:d5:fe:03:f3:
                    d6:e6:4c:7a:c5:59:e7:92:17:df:09:16:94:74:79:
                    1e:d2:5d:2c:11:8b:b1:f1:de:10:08:34:ea:ee:09:
                    04:5e:35:f2:94:84:1c:78:4a:0f:75:1c:e7:ed:ef:
                    c9:14:8f:64:79:15:e9:ab:2e:dc:37:e3:50:27:43:
                    29:0c:de:aa:f7:b0:c1:49:a9:6d:76:52:6d:b6:28:
                    ce:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:3F:47:E0:B8:E8:63:59:DC:14:B0:79:B1:72:8C:6A:A0:48:6D:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db22d5da-1658-37ff-9578-b121b4dc709c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:6d:5d:67:e4:f8:d4:9c:f9:d2:21:b3:c9:93:78:ab:07:f7:
         e9:8c:1a:12:c2:31:dd:38:95:5a:cd:71:48:5e:f8:25:ab:90:
         a7:d7:cb:95:7a:83:03:4b:c9:b8:80:12:f9:a0:1e:3c:ee:53:
         d8:ab:8b:e8:ca:a4:74:57:24:2a:09:a9:80:c4:24:bc:47:0e:
         54:39:39:8c:0c:52:bc:0b:e7:de:35:a5:53:05:44:4f:f6:50:
         7e:77:74:7e:44:31:d5:85:4a:11:8b:dd:d5:fe:80:0a:e9:ad:
         05:1b:09:7d:d7:5c:0e:f9:19:32:08:7b:6f:cc:ef:aa:37:37:
         b6:d8:e0:89:90:a9:bf:2f:5b:73:77:41:ee:da:cd:63:83:a5:
         2d:37:5c:76:f7:97:a0:cb:7a:c0:ab:7b:06:20:81:5b:02:6c:
         ba:08:97:d1:96:31:49:1c:27:c7:8f:59:9b:f8:33:8c:c9:d0:
         aa:65:b9:52:cb:6e:4d:3c:ce:b6:ba:18:49:8c:14:d0:2f:61:
         e6:2e:ed:90:d5:83:7f:fb:35:86:f7:9b:91:22:af:26:4d:b7:
         8a:36:56:32:63:5e:40:bc:ae:a9:d0:65:e1:d5:3c:0d:a2:bf:
         26:fd:dc:c7:8d:9f:7c:a0:cc:ef:cf:d9:b2:73:1c:3c:ad:7c:
         5a:4e:c1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:41:05 2025 by rpki-client