Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/77a6bedd-961f-3a46-9e48-8582672277ea.roa
File:                     77a6bedd-961f-3a46-9e48-8582672277ea.roa (raw, json)
Hash identifier:          ahzxdozpbb14jDbDZ6sEuOIWG08HuJ6CA11U6bk6NaI=
Subject key identifier:   E3:BB:73:4C:40:9C:9A:A0:D7:B0:90:4D:CF:B5:52:7F:A4:07:45:62
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B598EA43E43F413A8FEE80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/77a6bedd-961f-3a46-9e48-8582672277ea.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     577
IP address blocks:        142.180.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b5:98:ea:43:e4:3f:41:3a:8f:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=8edaf295-5ade-4cac-b268-eceb0990a9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:35:16:73:ab:29:88:15:ab:63:bb:a3:be:ab:
                    05:7f:f9:40:19:a4:b2:46:05:d6:98:28:07:e8:94:
                    a4:c8:9d:42:ed:0a:11:79:f3:f9:e7:dd:03:50:0a:
                    0c:9b:a9:3a:e4:c9:dc:7a:48:22:2e:aa:b8:f5:61:
                    ec:22:64:7b:fd:d2:60:71:08:4d:f6:81:9f:e7:11:
                    2f:f0:de:e6:e3:5c:ee:29:f0:52:47:f8:b8:66:20:
                    95:60:1c:79:a9:07:1a:b6:d7:84:32:db:3b:15:09:
                    76:36:96:3b:a1:b4:13:d0:16:0c:c0:01:7a:f9:31:
                    0b:ac:01:35:3f:21:2d:30:55:7a:ce:6c:d0:fd:7a:
                    67:06:cd:08:d7:ec:f8:c4:64:5d:c1:1d:0e:ce:72:
                    f7:bf:52:87:3b:e7:a3:27:9d:1d:4d:a6:61:df:d3:
                    a0:ac:82:1e:4e:65:5f:ae:f3:01:35:e5:de:4f:27:
                    fc:01:13:30:96:56:0c:8b:50:b3:83:55:53:bd:03:
                    ab:4e:1f:74:dd:4b:6d:83:4c:d1:87:e7:56:ad:28:
                    e7:4b:62:58:d2:0a:0a:69:1a:1d:33:3c:38:37:f3:
                    28:96:e9:1a:79:97:c2:49:e1:56:82:40:16:e8:e7:
                    32:c1:76:0d:5e:3f:72:0a:40:71:ba:76:1e:d8:cb:
                    53:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BB:73:4C:40:9C:9A:A0:D7:B0:90:4D:CF:B5:52:7F:A4:07:45:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/77a6bedd-961f-3a46-9e48-8582672277ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.180.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e1:04:75:75:85:16:8b:7e:fd:d6:5e:14:b0:6d:83:d7:78:
         77:58:59:88:00:25:70:d2:67:e1:01:ea:a4:8f:29:2a:f6:dd:
         09:ba:37:e1:1d:ac:57:fb:86:53:cf:d8:0f:0c:b5:19:5d:78:
         e8:7c:cd:8c:03:eb:e4:f7:e4:ca:76:c6:a4:cd:75:44:17:bc:
         b0:62:ed:71:dd:08:1f:58:8d:c3:31:2e:dc:01:fb:2e:3f:14:
         2e:c2:ca:44:43:70:52:24:a4:e7:0e:d0:48:7e:2b:07:1e:89:
         61:0f:5f:a7:a1:35:08:24:90:15:6b:d9:c1:df:00:6c:75:9d:
         0f:c0:68:2a:72:29:15:de:b2:26:80:6f:0e:1b:62:c6:73:31:
         de:c6:2b:24:43:63:32:f7:d0:52:1f:5b:0b:15:c1:cf:b7:0b:
         3a:ea:65:5d:c9:03:5c:df:a1:37:0b:71:40:e8:4e:ce:d3:4b:
         a3:a8:28:b8:96:a2:09:bc:44:e2:9f:94:8a:8e:eb:95:07:da:
         6a:8b:37:2d:51:a1:87:b0:4f:a1:6c:87:a7:2b:ee:e8:ac:45:
         5e:c6:96:97:66:d0:92:39:aa:02:ba:ba:1b:35:b7:02:ce:87:
         7a:ee:de:2d:2a:3e:00:13:5b:54:3e:22:e4:1a:d5:b5:8b:a4:
         62:6e:27:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:29 2025 by rpki-client