Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e32342e302f32332d3233203d3e203336323336.roa
File:                     3130342e3232352e32342e302f32332d3233203d3e203336323336.roa (raw, json)
Hash identifier:          psQQpFNltVnzG8iuAx+liOiZ+W7puimI/DeYiR0606A=
Subject key identifier:   A4:B5:F9:07:0F:18:64:CB:2C:91:9B:60:1E:40:92:1C:51:03:08:C4
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       7DD0C3218F63079EC6E83142D57DC8F4656A9540
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e32342e302f32332d3233203d3e203336323336.roa
Signing time:             Mon 31 Oct 2022 17:50:10 +0000
ROA not before:           Mon 31 Oct 2022 17:45:10 +0000
ROA not after:            Mon 30 Oct 2023 17:50:10 +0000
asID:                     36236
IP address blocks:        104.225.24.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d0:c3:21:8f:63:07:9e:c6:e8:31:42:d5:7d:c8:f4:65:6a:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:45:10 2022 GMT
            Not After : Oct 30 17:50:10 2023 GMT
        Subject: CN=A4B5F9070F1864CB2C919B601E40921C510308C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:73:f2:93:40:0c:a3:4f:c2:6c:cf:f9:7a:
                    53:0e:ee:81:a5:cc:05:7c:da:6c:87:68:49:81:d6:
                    4a:2f:0b:43:2d:3e:8d:9a:cb:41:b6:fe:69:4a:90:
                    44:42:69:f9:52:e8:87:47:0f:e9:ac:4b:a0:5e:2f:
                    28:68:54:31:4f:88:ba:76:08:85:b7:52:d0:0a:7a:
                    dc:44:d1:15:1b:a7:a6:9f:b6:44:d1:e2:5c:c8:48:
                    d0:4a:29:a6:84:cc:7b:1a:e3:3a:d7:c6:53:e7:dc:
                    6e:ac:19:57:54:ba:c9:00:5b:6c:1e:9c:7e:d3:e7:
                    83:5b:57:0e:df:5f:e6:49:34:43:84:38:41:2a:1d:
                    1f:0c:3a:e8:b8:51:5c:4c:c1:00:d5:a8:c6:20:90:
                    80:a8:75:02:fb:44:4f:31:91:c6:65:4a:06:64:f1:
                    5f:e2:6f:0c:c4:a5:17:b4:ff:dc:45:f6:f5:7f:ae:
                    11:50:2a:cb:83:1d:56:f9:9d:03:99:d2:78:a6:46:
                    7e:d8:00:1a:11:c7:c4:2c:bf:28:0c:32:20:43:4c:
                    7d:b7:4d:74:35:38:95:26:b9:83:3f:89:db:f7:de:
                    0d:b5:d4:c0:d1:80:81:e8:c3:dd:94:12:97:7a:86:
                    18:48:96:44:f6:4c:f7:d9:e3:f9:bd:35:85:42:cf:
                    91:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B5:F9:07:0F:18:64:CB:2C:91:9B:60:1E:40:92:1C:51:03:08:C4
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e32342e302f32332d3233203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:19:b6:7c:b7:1f:07:ed:d0:ad:d5:3c:c3:55:86:77:22:71:
         ae:03:a6:07:4b:ae:e0:8e:31:24:23:da:dc:85:84:3a:9a:ee:
         12:0d:51:7f:2b:cd:84:c2:3f:c9:81:45:b9:ba:57:61:67:31:
         ae:d3:91:3d:84:47:1c:43:f4:39:f7:9e:d9:4d:f6:48:5f:b7:
         26:4c:59:74:47:43:a2:e3:0b:8f:bf:d6:48:26:5d:e1:93:91:
         bf:f6:e3:62:e8:ef:8d:93:53:c8:e3:4b:1c:4d:4d:30:ee:58:
         b5:1d:9f:af:90:41:ee:74:78:1f:3b:7d:cc:4f:37:04:4f:27:
         5e:b3:2f:98:06:a8:27:3f:16:94:da:c3:ad:80:09:e9:1e:1d:
         46:c2:13:42:bb:34:72:58:7e:27:18:90:8c:a3:ec:55:50:06:
         38:75:03:d2:eb:6e:77:94:ad:bf:3e:f3:ed:71:e7:b3:f0:bd:
         4a:e4:9e:b4:d6:1e:fc:8a:1a:dd:75:4c:5d:8e:df:9f:0f:82:
         6f:5b:80:ed:8f:60:bd:b6:38:3a:b3:70:70:9a:0e:61:2d:ab:
         19:af:f4:36:8f:fb:3b:aa:9a:e4:3e:e1:f6:03:81:af:08:3e:
         16:b0:25:71:6f:a8:35:d0:64:e6:9f:be:b3:43:39:eb:5c:59:
         fd:35:87:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:15 2025 by rpki-client