Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34352e302f32342d3234203d3e203633393131.roa
File:                     3130342e3232352e34352e302f32342d3234203d3e203633393131.roa (raw, json)
Hash identifier:          dnnQ6wqoEalcv02ByFb3h860/wKxBzpoiJDDp/xrSxA=
Subject key identifier:   81:45:2F:BD:F0:22:C0:6E:84:B1:8E:4A:5E:79:1C:6F:AD:65:76:EE
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       5A7800FF50C671867517A90AB9A7CDB27EA8848E
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34352e302f32342d3234203d3e203633393131.roa
Signing time:             Mon 31 Oct 2022 17:51:31 +0000
ROA not before:           Mon 31 Oct 2022 17:46:31 +0000
ROA not after:            Mon 30 Oct 2023 17:51:31 +0000
asID:                     63911
IP address blocks:        104.225.45.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:78:00:ff:50:c6:71:86:75:17:a9:0a:b9:a7:cd:b2:7e:a8:84:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:46:31 2022 GMT
            Not After : Oct 30 17:51:31 2023 GMT
        Subject: CN=81452FBDF022C06E84B18E4A5E791C6FAD6576EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:a0:0b:e4:76:3f:a2:7f:1c:11:dd:6c:a2:
                    69:b5:1d:be:96:cf:44:9f:a2:56:9e:2d:91:ca:d3:
                    c2:5f:cd:a9:21:d0:1e:57:0f:0f:d1:27:98:5a:55:
                    e0:6e:61:42:dd:4a:fb:88:0a:6f:dd:12:10:8d:0d:
                    de:54:d1:1e:62:4e:a4:b2:e5:8a:d7:9d:6f:2c:bf:
                    2d:21:47:e2:b5:2b:5a:0a:d4:2f:8b:31:28:e7:60:
                    48:3c:8c:88:92:b2:14:b4:ef:ff:ea:c6:8f:62:67:
                    90:54:4d:d4:1a:a7:94:76:fc:c4:a7:f0:b5:9d:45:
                    b8:7e:71:b8:ad:22:22:01:18:23:d1:09:1c:13:a1:
                    de:97:dd:ea:07:13:53:c9:74:40:59:4f:bb:83:b7:
                    7d:18:fc:9f:ea:a3:9f:54:60:ca:66:2d:0c:14:db:
                    90:ee:dc:8a:c0:92:a0:22:22:f0:0d:68:86:18:f1:
                    dc:79:22:00:87:f9:bc:79:e6:d1:b3:42:8f:44:04:
                    fe:32:03:ea:eb:f8:85:5b:15:5e:0f:c3:be:f4:51:
                    66:18:82:e8:02:76:0e:9b:2e:7e:86:1b:26:52:c7:
                    01:40:1e:c4:5b:6c:8b:1e:20:4d:1f:a9:7c:2c:0a:
                    56:73:c1:96:fc:de:12:5b:22:14:cd:0c:15:3e:63:
                    14:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:45:2F:BD:F0:22:C0:6E:84:B1:8E:4A:5E:79:1C:6F:AD:65:76:EE
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34352e302f32342d3234203d3e203633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:71:27:30:56:68:80:f8:8d:15:2e:d7:64:a3:1f:7b:13:af:
         fc:6f:a7:c2:5a:73:07:8e:ed:21:2a:c4:d0:f7:04:0c:e3:93:
         a1:67:ed:b2:2b:a6:27:55:a2:0e:9c:9b:cf:d1:81:c9:62:81:
         84:f5:a0:cb:ac:33:9b:f8:2a:7a:20:38:0d:a6:21:3c:e6:c2:
         8c:46:ed:92:49:86:7b:a8:0c:dd:2a:a4:f7:73:1e:77:c9:55:
         69:7a:6a:3c:a0:27:51:fc:d4:48:9b:76:f5:17:68:83:03:5a:
         76:2f:ee:42:8d:72:f8:8f:a5:bc:55:13:21:c2:cc:5e:39:d6:
         ed:a0:05:db:c2:2e:a7:58:8e:74:81:dc:3e:56:65:d4:77:9c:
         14:5e:46:d3:14:cb:f0:e0:82:a3:05:03:88:cb:d2:07:95:c1:
         c3:fd:9c:5c:18:da:07:2e:8a:b7:18:65:5f:36:ee:d4:56:05:
         79:7a:b0:b0:9c:9f:1b:bc:2c:34:d9:56:47:66:dc:67:2d:b4:
         03:01:6e:fc:ee:be:9f:d4:3a:d6:00:46:c8:26:92:d1:6a:cc:
         6e:6a:20:ad:38:10:95:67:ea:a1:64:79:59:a1:12:d9:c5:fd:
         a0:9b:d2:81:ad:13:e6:1a:03:c4:9f:c1:28:1c:85:b5:48:5e:
         5a:3f:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:00:06 2025 by rpki-client