Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3131322e302f32342d3234203d3e203336323336.roa
File:                     3130342e3232352e3131322e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          hzKpjbh2FjJjdKrq5Cp+66HLgXE72ng27f9quViVjE8=
Subject key identifier:   EB:16:46:1A:B7:06:9D:6C:96:BF:D6:2C:2F:CF:AF:F3:68:34:67:CE
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       56D1DCCE711CA46CA8E287A446C12CEEE8CBF961
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3131322e302f32342d3234203d3e203336323336.roa
Signing time:             Thu 20 Oct 2022 18:05:44 +0000
ROA not before:           Thu 20 Oct 2022 18:00:44 +0000
ROA not after:            Thu 19 Oct 2023 18:05:44 +0000
asID:                     36236
IP address blocks:        104.225.112.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d1:dc:ce:71:1c:a4:6c:a8:e2:87:a4:46:c1:2c:ee:e8:cb:f9:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 20 18:00:44 2022 GMT
            Not After : Oct 19 18:05:44 2023 GMT
        Subject: CN=EB16461AB7069D6C96BFD62C2FCFAFF3683467CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:43:4a:8e:6a:11:72:27:a4:3e:ae:0d:4e:
                    97:da:9d:74:47:58:86:88:a5:57:ad:9d:4d:12:4d:
                    0e:4f:63:0e:ac:af:35:3a:81:d4:94:ae:48:d9:c6:
                    65:20:29:01:ff:8f:59:f0:0d:ab:9f:2c:22:dd:05:
                    d0:1f:1a:77:c6:c3:3b:2e:57:06:70:63:19:3a:cf:
                    83:1b:66:73:5e:ee:e3:14:ba:42:c1:23:7f:b4:31:
                    15:01:16:10:aa:04:64:e5:7c:29:f3:c1:db:bf:91:
                    60:f8:8e:70:9c:21:38:e3:87:02:49:c9:58:49:4e:
                    d3:cb:4d:4a:8a:c8:24:23:33:03:51:e5:9e:bb:5f:
                    e0:2c:cc:b5:01:58:ad:ec:26:ab:ed:39:9d:a9:18:
                    2c:83:03:ff:64:a0:70:31:ef:b8:27:34:32:ba:38:
                    d8:73:f2:0e:02:48:b8:2c:e6:73:e0:c5:75:6f:e5:
                    b7:a9:15:06:07:37:d8:dd:68:63:14:9d:1e:a7:eb:
                    0c:90:3a:ec:3b:4c:42:9d:1d:29:6b:e3:2a:1d:73:
                    02:62:57:1e:51:4d:ef:3a:63:6e:dc:e6:38:73:5e:
                    22:ff:bf:8b:92:0e:35:7b:71:a3:ab:3c:fc:0f:2e:
                    9f:65:4b:7d:89:66:e9:6d:e8:67:23:ee:f5:4c:d4:
                    c9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:16:46:1A:B7:06:9D:6C:96:BF:D6:2C:2F:CF:AF:F3:68:34:67:CE
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e3131322e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:51:67:a8:04:ab:7a:94:ef:06:58:7e:44:6f:ff:bf:9d:58:
         96:c7:1c:2a:4e:5e:55:c5:63:90:55:2d:08:e4:81:52:55:5a:
         4a:c5:53:68:12:45:b8:81:5f:38:c0:6e:cd:32:24:65:89:3f:
         49:e8:24:ec:2b:19:63:8b:d3:38:a0:45:86:c8:be:16:d2:f4:
         4b:53:53:7a:80:a4:3a:cb:ce:53:61:24:71:46:f9:d9:7e:8b:
         4d:42:26:b2:cc:00:ca:f8:de:31:ad:9d:b2:b8:50:dd:ea:f3:
         18:9b:99:38:5d:d4:29:68:f9:e4:63:6c:06:d3:bd:5a:66:7d:
         46:6b:ef:8e:6f:05:53:15:2d:44:17:1f:c0:fd:ab:3a:6f:98:
         e1:78:d7:fc:3a:7f:a3:d2:55:96:df:e4:98:2e:17:52:59:2c:
         90:51:e7:49:0e:b0:a4:85:da:3f:51:93:22:2f:54:ca:1f:19:
         5c:7b:ca:08:61:53:1d:b8:77:1c:bc:5c:3e:5b:48:99:62:a7:
         55:5c:b9:54:93:37:45:6b:66:5c:b5:cc:fb:b8:c4:70:58:fd:
         c0:66:ac:88:2c:1b:08:05:be:f0:a8:37:ba:06:6f:3f:2a:bc:
         5a:14:a7:f4:e3:eb:15:3b:26:ba:98:0d:63:84:34:92:cf:b8:
         4b:98:fe:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:11 2025 by rpki-client