Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34362e302f32342d3234203d3e203633393131.roa
File:                     3130342e3232352e34362e302f32342d3234203d3e203633393131.roa (raw, json)
Hash identifier:          SnQHftS57sZSLZNTV4PXMBkHZd1cK/rIuUHJ8RRGOMw=
Subject key identifier:   F8:2C:6E:1D:E9:FB:98:9C:B7:79:15:64:79:55:3A:30:94:5F:B8:40
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       20707EC01009D8919BDB59CD7EA5EA192251AC17
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34362e302f32342d3234203d3e203633393131.roa
Signing time:             Mon 31 Oct 2022 17:51:31 +0000
ROA not before:           Mon 31 Oct 2022 17:46:31 +0000
ROA not after:            Mon 30 Oct 2023 17:51:31 +0000
asID:                     63911
IP address blocks:        104.225.46.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:70:7e:c0:10:09:d8:91:9b:db:59:cd:7e:a5:ea:19:22:51:ac:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 31 17:46:31 2022 GMT
            Not After : Oct 30 17:51:31 2023 GMT
        Subject: CN=F82C6E1DE9FB989CB779156479553A30945FB840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:89:65:87:01:3f:32:33:77:62:63:74:bd:
                    db:d4:c9:ac:f3:0b:8c:78:98:58:65:97:37:ad:8c:
                    39:8f:a3:79:91:41:e9:79:7a:9e:66:63:f5:c5:b1:
                    ec:1d:9c:d9:ef:21:11:81:ef:28:e3:b7:3e:7d:34:
                    b6:49:fb:06:a1:db:61:fc:1a:1b:44:45:1e:29:e4:
                    45:c6:7e:d4:ce:2a:f6:67:e2:d7:09:31:90:4e:6f:
                    55:09:38:6b:5e:a6:26:bc:98:9c:8f:6f:87:fb:ab:
                    68:7a:96:28:50:5b:6d:de:fc:ce:2b:58:b6:70:99:
                    51:5d:45:61:68:82:b6:b0:90:4d:19:4a:ac:39:ac:
                    41:f8:7c:24:6c:1a:da:2c:20:71:61:e0:f9:e1:97:
                    73:9b:d5:df:d4:7f:4a:40:05:a5:27:46:8a:9b:ba:
                    3a:dd:bf:f6:4e:c4:77:55:7a:56:34:9a:ab:7f:ef:
                    3f:28:fe:94:6b:f5:3c:11:28:67:3d:b4:ee:5a:13:
                    22:be:60:94:f1:17:37:b5:ae:f5:3f:12:f6:77:ff:
                    2f:b2:17:64:da:2d:19:aa:53:d1:d8:b6:4e:bd:78:
                    bc:20:cc:d9:01:f8:19:4c:b0:0b:e0:4f:d5:23:f4:
                    0c:91:da:2d:98:83:49:08:41:4b:f6:1c:d1:d7:07:
                    94:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2C:6E:1D:E9:FB:98:9C:B7:79:15:64:79:55:3A:30:94:5F:B8:40
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/3130342e3232352e34362e302f32342d3234203d3e203633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:95:20:2e:d5:63:f9:ce:73:e4:b2:bf:6d:76:df:dc:a5:63:
         a1:21:00:26:fd:8b:b3:ea:8f:89:66:e9:cd:8c:e0:ed:7b:57:
         12:89:30:6c:66:e0:59:a0:16:26:2c:eb:c3:87:c2:16:70:de:
         2d:23:69:4c:4b:b2:0c:e8:b3:8c:55:58:ac:c7:07:23:34:48:
         c9:1f:e7:11:dc:c6:0d:b3:62:f2:fe:42:dc:e8:d6:73:9d:07:
         fa:b0:2b:03:7f:ef:53:62:85:cc:cd:d1:17:ff:45:db:38:7b:
         9f:b3:e1:0c:52:bc:02:0c:72:5f:d4:76:0e:9f:17:84:34:f0:
         61:39:b6:52:b9:9c:be:a0:1a:ea:fc:ea:8a:b2:b5:2a:c5:63:
         65:64:e8:77:15:ba:ce:6e:c3:ec:cc:da:ba:05:d7:bc:f5:f0:
         3c:6d:64:b5:22:91:ab:32:85:b9:7c:66:18:35:ae:87:f2:24:
         66:fd:f0:5a:a6:62:de:b3:1f:f5:95:d6:5a:ca:ec:dc:69:c8:
         62:0d:18:c4:68:21:b5:9c:ab:52:c5:28:73:7f:09:f5:ea:0d:
         df:23:e6:a6:e0:ad:cb:39:20:fe:48:e6:ea:04:3a:0b:f9:1a:
         d5:31:4b:8f:ec:05:ae:45:bf:93:01:a9:ee:38:6f:02:dd:86:
         64:f0:7e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:30 2025 by rpki-client