Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/34352e35342e37362e302f32342d3234203d3e203633393131.roa
File:                     34352e35342e37362e302f32342d3234203d3e203633393131.roa (raw, json)
Hash identifier:          d6dbPZ3dRNFICNKvb5GF6DpAR/4yQd8B5W74hvcsYLo=
Subject key identifier:   22:26:A5:93:1E:5A:4C:EA:EB:4A:75:F0:30:66:E7:E0:44:33:90:5C
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       205A47022577937D87BEEE47E70504F2543BFB5A
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/34352e35342e37362e302f32342d3234203d3e203633393131.roa
Signing time:             Thu 20 Oct 2022 18:04:50 +0000
ROA not before:           Thu 20 Oct 2022 17:59:50 +0000
ROA not after:            Thu 19 Oct 2023 18:04:50 +0000
asID:                     63911
IP address blocks:        45.54.76.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5a:47:02:25:77:93:7d:87:be:ee:47:e7:05:04:f2:54:3b:fb:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 20 17:59:50 2022 GMT
            Not After : Oct 19 18:04:50 2023 GMT
        Subject: CN=2226A5931E5A4CEAEB4A75F03066E7E04433905C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:c3:69:9e:67:fd:a1:8a:74:32:cf:bf:ec:
                    a1:d5:60:b4:c2:4b:60:ec:2a:ae:7b:0a:c4:96:73:
                    d9:6f:e5:a9:17:09:85:23:d1:63:17:7a:48:ab:21:
                    89:94:34:37:35:85:a0:5f:f2:4c:90:e1:9d:06:d4:
                    e6:d0:2a:4a:e6:78:00:23:aa:59:0c:2f:21:8b:04:
                    de:f6:db:b5:be:77:ab:99:5e:01:83:ba:f4:83:76:
                    0a:51:05:2c:0b:be:66:6e:e6:f5:cb:0c:b8:8a:f8:
                    d8:83:c8:7f:45:6f:14:5c:22:da:31:ae:ff:1e:c5:
                    91:0a:db:04:27:05:12:d9:6a:58:65:ab:3f:fa:e3:
                    37:84:00:c4:13:5d:74:66:41:de:05:6f:0b:02:52:
                    5d:ca:b5:eb:77:f3:ca:ca:0e:09:4e:17:23:0e:77:
                    a1:ff:b4:5c:64:ce:e2:c2:18:10:4f:08:df:85:3c:
                    36:cf:e4:10:7c:c1:c8:4c:ed:94:00:02:4b:8b:fa:
                    d9:81:0f:09:ae:54:4a:69:58:eb:b3:d1:f1:e6:f1:
                    27:98:a9:62:b9:94:3d:86:52:34:21:07:65:e5:29:
                    0d:60:a0:7c:45:33:d1:45:a8:0d:93:dc:cd:4c:41:
                    39:2f:29:82:e3:4c:63:8b:4b:e0:6c:83:17:eb:38:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:26:A5:93:1E:5A:4C:EA:EB:4A:75:F0:30:66:E7:E0:44:33:90:5C
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/34352e35342e37362e302f32342d3234203d3e203633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:fd:59:1b:c8:56:8c:c5:f3:e3:b0:f5:09:e8:83:72:d4:f0:
         7b:e6:c6:4c:2a:d6:9a:77:3f:2c:4a:90:e5:b1:22:a8:78:89:
         76:ad:9d:d1:fa:89:92:cc:0e:2f:85:f4:62:f6:3b:e0:b6:0d:
         90:f0:87:4b:1e:1a:3b:76:6e:7b:de:24:2e:da:2f:9d:b8:3d:
         7b:a1:b1:13:7a:6a:75:91:85:62:e6:c3:ca:73:8e:48:96:bc:
         22:ed:3c:93:8b:ca:dd:03:68:77:ab:85:7b:c4:23:a8:03:bd:
         43:8b:f4:a9:82:e4:75:80:be:8b:f4:b2:cd:64:6a:1c:44:27:
         c0:ef:ae:69:8a:34:5a:eb:1f:2e:dd:11:ca:58:1a:c9:98:9b:
         f8:4e:9c:a2:87:05:c1:be:7b:e0:5d:cc:65:76:09:e2:d9:19:
         63:8c:76:83:4f:f4:f1:99:75:c8:e6:c1:13:fa:0a:b4:9f:21:
         18:df:1e:78:e0:da:b7:56:de:02:79:01:2e:08:88:ef:92:18:
         25:4e:22:58:d6:3c:da:c4:f9:b4:58:e6:f1:1e:1d:da:08:c5:
         99:d3:4a:ee:27:d8:3f:55:15:12:16:cb:27:43:86:57:5c:6c:
         cd:be:d3:22:31:87:de:20:06:d3:0a:42:07:18:55:c2:31:a1:
         65:9c:6d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:29 2025 by rpki-client