Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3a6953a-27f9-3031-a49c-5edaa4160a75.roa
File:                     d3a6953a-27f9-3031-a49c-5edaa4160a75.roa (raw, json)
Hash identifier:          RCOCGNOXCMk4nnu+YwEEFjNLZtgAlxql+BxGkczBFWw=
Subject key identifier:   54:7E:52:9E:92:33:9B:53:05:C2:F6:E4:98:4E:F8:0B:C8:55:DF:33
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584297ED62A9AAEF78943EED8F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3a6953a-27f9-3031-a49c-5edaa4160a75.roa
Signing time:             Mon 17 Jul 2023 12:00:00 +0000
ROA not before:           Mon 17 Jul 2023 12:00:00 +0000
ROA not after:            Thu 18 Jan 2024 05:00:00 +0000
asID:                     14978
IP address blocks:        64.62.160.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:97:ed:62:a9:aa:ef:78:94:3e:ed:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 17 12:00:00 2023 GMT
            Not After : Jan 18 05:00:00 2024 GMT
        Subject: CN=62928718-bdf4-4781-b782-0f01945b8f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ca:ce:15:b5:f5:5a:e3:b1:25:9e:76:68:33:
                    46:59:2b:22:c4:fa:fd:3d:8e:4e:d0:74:97:b8:7f:
                    e7:37:2c:8c:0f:45:f9:2a:f4:9d:0e:2e:6c:0c:84:
                    43:bc:0f:e1:98:10:1b:19:85:3c:c7:55:71:81:6d:
                    dc:d5:62:7f:d6:b3:63:58:d2:b0:85:b7:1e:b2:6d:
                    db:b4:8d:09:13:fe:e0:e9:df:75:98:e7:9e:10:c4:
                    22:35:20:4b:8c:a9:27:4d:7f:65:1c:64:c0:0b:e7:
                    91:46:d9:cf:df:5c:ee:21:11:1d:2c:c4:b6:04:bf:
                    d7:8b:ca:2f:e6:fc:4b:e0:8e:de:af:38:cd:76:8f:
                    4a:50:69:16:24:05:fc:33:62:ae:7c:fb:24:45:6e:
                    e2:05:2c:0a:ec:04:16:86:3e:69:4a:7e:76:da:ba:
                    f5:f7:50:8b:90:d5:02:54:35:28:03:cf:a8:18:7e:
                    85:05:a7:17:a1:b8:ac:cb:26:c0:e7:a4:72:42:41:
                    93:5c:e2:8e:b1:96:d2:a8:e5:b6:f7:c7:37:61:63:
                    23:d0:8f:48:fe:32:cf:76:cd:32:04:0a:56:59:6d:
                    db:e5:55:0d:f2:f9:7b:a2:43:05:61:d0:e1:ea:e7:
                    09:31:4d:2f:38:6e:a8:a2:08:7d:a1:ba:d1:12:09:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7E:52:9E:92:33:9B:53:05:C2:F6:E4:98:4E:F8:0B:C8:55:DF:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3a6953a-27f9-3031-a49c-5edaa4160a75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:d2:f4:13:f4:bc:72:c3:b9:9f:ac:db:54:8c:87:71:e5:f3:
         6d:a9:b2:8c:31:a1:32:30:27:ad:0b:95:0a:14:04:a7:3d:f0:
         e6:d4:c8:69:6c:f1:d8:3d:ea:ee:39:a5:bf:c0:39:b2:47:85:
         bc:79:2c:93:47:c3:6b:9f:51:19:6e:a3:f0:c7:31:c3:96:8f:
         76:1c:1e:4c:d2:e9:9a:59:a0:ed:6f:a0:f0:00:1c:a4:95:02:
         73:59:e1:30:6e:9b:20:fd:55:63:cb:f8:4f:85:aa:3b:7a:38:
         3e:71:8c:4f:9a:f8:c4:dd:15:60:9e:aa:fd:51:fa:8e:1b:22:
         68:57:ab:5a:5e:70:4b:46:a5:1f:41:e8:7c:72:da:af:30:62:
         57:db:63:f8:b4:ec:6e:b2:f4:65:0a:c6:ca:01:40:63:3e:ee:
         21:1e:31:15:b4:77:e8:d8:a6:b6:92:58:5b:ee:b9:e7:12:1f:
         9c:61:6f:33:52:3d:ca:c3:07:df:8f:27:51:15:51:00:bf:c5:
         fa:45:48:5c:c8:2a:2f:8d:e9:f7:74:51:26:65:00:cb:64:87:
         f0:e1:22:55:8f:86:8d:65:2f:d0:11:4f:0d:57:e2:33:d4:74:
         90:fd:67:9c:6e:9a:e6:b3:27:4d:dd:3b:0d:59:54:b7:2f:de:
         ef:1c:4d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:41:18 2025 by rpki-client