Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c1750677-dcbc-3f11-b5ad-eb873a468ae6.roa
File:                     c1750677-dcbc-3f11-b5ad-eb873a468ae6.roa (raw, json)
Hash identifier:          ak77Xs1ouVhPBCUZLX8JIWC/kGisWuoKjGhqapA4TyE=
Subject key identifier:   D6:EA:12:48:53:E2:CB:BD:31:19:87:D7:D3:28:FB:85:D4:1D:BD:2C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B53A69EAA56B545666F678
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c1750677-dcbc-3f11-b5ad-eb873a468ae6.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     36522
IP address blocks:        70.28.152.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b5:3a:69:ea:a5:6b:54:56:66:f6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=02adbfaf-028b-4c39-aac3-bbe7cf0a5dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:45:8f:54:4e:e2:b8:fa:2d:77:3c:5c:54:ce:
                    9a:2c:08:12:a4:6f:3e:8a:22:cd:23:82:7c:f4:05:
                    ba:b4:18:99:cd:e9:83:fa:dc:0c:e8:f3:47:87:e3:
                    a5:2b:d1:f7:73:17:5b:bd:96:99:e2:11:51:dd:28:
                    e6:04:51:ba:49:b6:c2:7c:6e:4c:ca:a2:d3:6e:c1:
                    77:f6:2c:fb:9f:7b:af:aa:aa:24:1c:df:fb:4e:8a:
                    51:99:bc:60:0f:f0:03:d8:72:58:9c:2b:03:12:a7:
                    9e:16:8d:91:f5:b1:52:0a:ec:2c:6f:29:68:62:92:
                    de:7b:6f:ac:fc:dd:26:92:6d:0c:a1:a5:7c:e3:6d:
                    fb:4a:c5:08:78:37:f5:b9:30:c9:52:46:fa:78:46:
                    c2:7d:3b:4d:a5:a8:3d:60:54:1b:d8:34:3b:88:88:
                    2d:98:9e:53:41:98:29:5a:fa:ec:8f:29:1f:ef:7e:
                    fa:1b:76:a8:d4:31:58:c8:d4:1f:64:19:e5:04:50:
                    a3:7b:fa:b6:ba:a6:7c:aa:d0:d9:1b:9c:1c:b0:90:
                    80:0c:65:89:c4:78:3e:ad:0f:a2:88:31:f6:d9:f5:
                    c5:32:30:a5:d3:9d:7e:54:cb:7d:50:c2:ac:84:0f:
                    9d:07:5c:f2:74:db:2a:d8:f9:a9:c8:c2:e5:37:ba:
                    fd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EA:12:48:53:E2:CB:BD:31:19:87:D7:D3:28:FB:85:D4:1D:BD:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c1750677-dcbc-3f11-b5ad-eb873a468ae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.28.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:7f:29:97:6d:e3:8b:65:25:99:aa:ec:91:30:b3:45:76:f2:
         fb:14:33:ec:f8:4f:9e:d2:59:7c:79:f0:14:ff:29:b5:ee:09:
         37:fb:93:31:87:c1:37:58:ae:51:0d:a4:4e:38:6b:15:98:48:
         ee:dd:54:bf:57:39:c1:90:e6:2e:da:f9:e1:4b:66:b1:43:77:
         2c:0e:92:13:39:db:40:46:fc:f9:56:f9:fa:c9:3e:8a:8b:72:
         89:c5:62:5c:c4:17:73:2a:f8:f7:a9:13:59:4c:17:aa:b3:7d:
         0f:ab:53:39:f2:1b:45:28:5a:bc:c6:ff:84:84:28:7f:2f:fd:
         31:f7:b7:1f:e6:c5:2f:7c:f6:4c:ea:dd:96:24:17:4e:68:a6:
         54:64:17:8c:35:af:00:90:f8:2d:70:c7:28:d8:19:fb:54:39:
         2e:35:e3:d5:9b:a0:3e:b4:1a:7b:65:2b:7e:27:5a:4c:ee:7b:
         fb:b3:9e:e8:4d:8d:fd:5f:17:48:e5:a7:4b:68:19:d8:6e:03:
         e4:45:df:fa:f2:63:bd:12:74:f4:d3:30:f5:30:45:12:c0:04:
         e2:17:e5:22:54:d7:37:b4:b4:12:3f:21:20:ed:f2:01:7e:db:
         9f:a3:91:4d:3f:06:4c:1f:45:a5:de:bf:0b:a3:77:f3:7d:6d:
         cf:1c:ab:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:46:31 2025 by rpki-client