Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d932f07d-08eb-3ff3-9594-fd4e97bc0384.roa
File:                     d932f07d-08eb-3ff3-9594-fd4e97bc0384.roa (raw, json)
Hash identifier:          tFlcSJHtd+iximD55SUD274Ia22saoMoiGMYytkQIYc=
Subject key identifier:   6C:16:3F:85:8A:87:F5:52:66:DC:08:9F:27:B6:8D:FD:F0:3D:EA:78
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826B54B636DD5B4CE54D58780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d932f07d-08eb-3ff3-9594-fd4e97bc0384.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     577
IP address blocks:        70.54.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:b5:4b:63:6d:d5:b4:ce:54:d5:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=11369a32-2031-42df-a47c-dc3da4d3558a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:02:1e:6b:15:10:ea:2f:96:94:73:25:a0:3d:
                    d5:b9:a6:4f:84:31:b6:db:78:96:d9:d4:53:31:20:
                    10:10:5b:4b:31:51:ff:42:4a:e9:12:0b:90:d4:0f:
                    d9:1b:eb:0e:f0:73:7f:66:6a:2d:06:3c:9d:95:5f:
                    c9:22:b8:ee:fa:7a:f8:3e:82:0c:39:0e:9a:da:be:
                    0a:3b:17:a6:8f:fc:d0:d0:4e:20:a7:f2:0b:6e:3c:
                    88:06:0b:6f:6c:fe:f1:b2:5b:7b:86:dd:58:df:b1:
                    5e:16:6f:69:5b:f6:4b:ec:92:85:90:e4:b2:65:cd:
                    e7:a7:64:e6:a9:c4:99:f9:b3:1d:fb:ed:4b:80:ef:
                    de:0b:b4:f1:ec:44:06:87:b5:82:cc:d6:75:ff:ca:
                    ac:62:f5:a6:c9:51:91:a5:35:0c:ce:db:c7:15:81:
                    97:cb:b0:05:b1:50:3e:03:47:18:2a:f2:24:f6:1f:
                    0b:b6:25:7b:f3:2f:f9:6b:e6:65:a9:00:bd:53:24:
                    80:92:8b:ff:14:97:29:7a:47:4f:ff:41:4a:6f:82:
                    15:c7:17:6e:62:b5:53:b3:af:c0:2b:1f:4c:ba:45:
                    81:3e:df:3c:ee:7b:8d:10:92:40:6b:e0:55:4b:10:
                    f6:4b:a5:03:62:eb:12:ba:42:d3:8e:95:c8:1e:40:
                    6e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:16:3F:85:8A:87:F5:52:66:DC:08:9F:27:B6:8D:FD:F0:3D:EA:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/d932f07d-08eb-3ff3-9594-fd4e97bc0384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.54.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:22:72:07:65:5d:e6:32:ad:92:80:c1:01:a6:2a:14:68:55:
         fd:65:5e:cd:e6:29:e3:f2:33:43:5b:16:f8:dc:dc:2a:f7:d8:
         4b:74:39:a6:c9:e7:df:5e:ce:64:b7:f1:c3:bf:e2:c4:0f:0f:
         35:65:fd:30:91:88:44:80:b4:50:ad:dd:92:3f:ef:d5:14:23:
         ec:67:95:ad:af:68:86:73:a3:1f:bc:7f:a0:11:9d:d7:a7:08:
         ab:34:ad:de:72:1b:f7:b5:61:54:ff:cd:1f:cc:62:05:0d:4f:
         96:30:90:b2:5e:28:0b:7f:90:72:3e:6d:0d:12:50:9b:fa:6e:
         72:42:45:a8:9c:e7:35:85:e7:99:4c:de:cb:0c:34:2f:2b:41:
         0c:76:56:7d:68:d5:89:e4:6c:a8:9e:cf:5a:6a:36:19:a6:b9:
         92:7f:af:9e:30:c9:ce:48:56:36:b9:7d:76:8b:6f:13:a6:a8:
         84:a7:b4:57:24:3a:0b:a1:95:1b:d5:6d:55:80:d7:d5:03:e0:
         93:9e:76:de:10:bc:30:f0:1a:29:e2:05:4f:a5:24:78:1c:a0:
         5b:0a:b6:35:1a:4b:b1:55:a0:48:b7:45:75:55:24:1e:14:37:
         c5:2f:75:aa:ae:cb:43:e6:04:20:2a:e4:72:dc:c5:92:08:3e:
         45:aa:84:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:59 2025 by rpki-client