Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0d3179da-4fde-37a5-ad98-fa1691044e78.roa
File:                     0d3179da-4fde-37a5-ad98-fa1691044e78.roa (raw, json)
Hash identifier:          uQfO2rv33dyLMykBi5/5lAmMMuCtD4yAgbk3+fyVMV8=
Subject key identifier:   30:30:A9:60:6E:67:78:D4:4A:BF:56:D0:A4:51:78:E7:F5:B3:01:DE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2A7A5BABAC411D806D3E94
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0d3179da-4fde-37a5-ad98-fa1691044e78.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     4540
IP address blocks:        207.35.82.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:2a:7a:5b:ab:ac:41:1d:80:6d:3e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=bc16d15e-951a-40ab-963d-110eb79c2d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ba:a2:70:26:65:8e:cf:23:c8:0d:76:57:ae:
                    d6:eb:af:f7:6e:c9:27:f9:2a:89:ab:9e:55:de:27:
                    b5:f3:20:4f:ce:38:5b:f1:44:61:52:93:d6:e3:e9:
                    f2:58:38:2a:46:2b:95:98:31:9f:d1:7c:f9:e9:cf:
                    cc:18:8a:71:ae:df:fc:3e:ce:cd:09:3c:1d:65:13:
                    c4:43:c9:37:f8:c7:8e:86:75:5f:56:46:56:1d:63:
                    14:da:e1:39:df:07:42:4a:ae:53:58:4f:9e:7a:40:
                    8e:5c:56:c0:51:69:00:3c:a8:e4:ab:37:3e:1c:1d:
                    79:b4:e6:95:b1:c5:70:a5:16:97:da:c9:7b:39:20:
                    20:97:87:c1:ff:f7:13:cb:9a:4c:f1:05:5b:bf:df:
                    9d:74:e5:5b:37:c5:a5:ce:d5:49:fb:c9:72:c0:77:
                    2d:48:66:be:c2:12:13:36:60:a9:be:c8:a1:43:36:
                    53:ff:bf:63:68:81:14:9e:56:c3:72:f7:e3:54:42:
                    06:49:0c:75:1a:0c:34:16:d0:eb:db:87:8b:f0:6d:
                    5c:a8:c4:96:b8:6a:fa:c8:29:1a:3b:52:ec:54:8c:
                    ef:1a:f0:4e:af:bf:cd:9c:4d:c9:da:21:19:39:f8:
                    62:1f:e1:b8:3e:14:b0:07:29:e7:a7:9a:f7:de:f2:
                    2a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:30:A9:60:6E:67:78:D4:4A:BF:56:D0:A4:51:78:E7:F5:B3:01:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/0d3179da-4fde-37a5-ad98-fa1691044e78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.35.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:75:d3:4a:12:fd:66:9f:d4:79:27:12:b1:a8:ed:cf:5f:d4:
         e4:74:01:ce:35:25:53:da:68:3f:72:5a:97:f0:7f:e9:e5:8b:
         97:1e:94:18:6d:30:66:fd:ee:7d:4f:f5:28:c2:93:77:72:52:
         d8:b1:61:f2:f7:ed:32:45:fb:31:b4:3e:1d:89:6e:f5:60:68:
         58:90:20:84:ce:7d:14:fe:14:99:cb:5a:9e:5c:8c:07:3a:83:
         8d:aa:10:58:cd:34:85:41:84:c7:8f:a3:8b:1f:ff:20:77:08:
         a7:1e:e8:97:2c:49:c0:d5:b6:e3:59:a1:08:44:93:1d:ed:ef:
         e8:07:54:f4:87:1e:af:f9:11:c7:31:47:70:29:00:e0:42:66:
         d9:90:9a:af:83:f8:1e:be:97:26:ae:f0:00:d1:a2:ba:97:26:
         99:83:3b:83:81:71:77:19:b3:87:91:cd:dd:83:c0:09:d4:c8:
         73:ed:5f:e0:1e:21:62:0e:7f:a3:65:4d:b0:67:48:6c:13:fb:
         35:d0:e4:52:b4:de:a6:93:94:05:c1:24:86:52:eb:63:12:9f:
         7e:da:b7:32:15:8c:84:7b:06:51:1f:b7:57:a8:fd:12:13:40:
         5d:a4:4e:63:e0:ed:04:8b:ff:f9:90:b8:b8:61:2f:18:9e:05:
         a8:ed:d8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:54:21 2025 by rpki-client