Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f47fbe98-24c9-3240-85e7-ad99b383bbff.roa
File:                     f47fbe98-24c9-3240-85e7-ad99b383bbff.roa (raw, json)
Hash identifier:          9a2EzWRdsJxb+RQCEgCUSoV3vvwEcyMGyePaFVpQSls=
Subject key identifier:   29:4A:0D:B7:12:1B:28:DA:08:A8:C8:4A:CA:FE:09:09:EC:53:E7:82
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584826BD1079D389F3CE43035180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f47fbe98-24c9-3240-85e7-ad99b383bbff.roa
Signing time:             Sun 08 Dec 2024 12:00:00 +0000
ROA not before:           Sun 08 Dec 2024 12:00:00 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     53820
IP address blocks:        204.101.75.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:26:bd:10:79:d3:89:f3:ce:43:03:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Dec  8 12:00:00 2024 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=4762c7aa-397a-4efb-ad5f-76e56964b241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:f3:33:61:5b:84:a5:02:2a:c3:c1:56:f0:
                    60:3a:20:8a:d6:e9:4a:05:2c:f6:53:e9:18:64:de:
                    56:1c:39:1f:ea:22:0f:86:ce:1b:e0:e4:29:ab:ba:
                    63:a3:82:fd:fa:3f:c6:d3:70:12:08:05:cd:dd:bc:
                    70:f7:1c:09:42:09:ba:6d:16:7a:b6:33:58:af:b1:
                    65:da:f0:f0:f2:c6:6f:8b:fe:06:9f:59:a4:eb:be:
                    ad:a7:5e:46:80:b4:b3:1b:5c:1a:bf:76:68:32:b7:
                    c9:ae:88:4f:69:0f:d7:ca:68:62:e1:66:25:c4:76:
                    e0:e9:0f:34:24:e9:a7:c1:06:e6:22:0a:95:5a:48:
                    66:86:48:0d:74:ac:b3:b9:73:ca:50:80:4a:b9:50:
                    dd:94:be:0a:da:01:43:32:2c:8d:99:24:89:fb:d3:
                    fe:b0:c2:fe:e0:de:84:40:f3:b8:96:81:62:09:93:
                    ee:1f:69:af:97:7c:5f:ee:ec:4c:35:91:6d:4e:0c:
                    a1:f0:3c:83:2e:4a:e1:8d:2f:e3:a2:92:c7:d9:ed:
                    18:08:05:aa:98:8e:d7:db:71:84:50:2d:1d:28:6a:
                    ec:ac:a5:55:64:2b:fc:d5:3e:6f:5a:8c:a3:14:57:
                    01:17:70:ca:d1:1c:cb:57:54:82:b4:1c:86:93:53:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4A:0D:B7:12:1B:28:DA:08:A8:C8:4A:CA:FE:09:09:EC:53:E7:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f47fbe98-24c9-3240-85e7-ad99b383bbff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d6:f0:93:61:f3:88:7c:66:64:2a:f8:d5:48:53:96:f8:31:
         cc:da:4c:91:e3:f6:a6:6f:23:26:d1:ce:41:06:39:a7:10:7e:
         6b:76:0f:c0:c0:0b:7e:54:43:c4:de:74:c3:dd:c0:40:42:78:
         3a:81:d3:c5:43:05:3a:6d:14:ea:23:7d:aa:eb:ad:41:fc:e5:
         ad:37:73:82:36:7f:dc:6d:33:12:b9:e5:40:95:ea:75:3d:32:
         8a:e8:65:e1:08:8d:a1:b4:cd:e6:15:81:d9:55:82:32:b1:6d:
         3d:6c:43:a7:e2:94:4b:05:00:b0:90:ef:16:f6:3a:b8:34:56:
         63:b1:c8:a4:6b:2c:90:65:98:db:d6:34:43:d7:61:f6:24:6b:
         11:c6:09:fb:61:57:35:a8:c1:40:cf:5d:d9:3c:82:3e:0c:05:
         5b:55:6b:6d:e8:d4:2d:d5:6a:91:2a:57:9c:8d:5d:d8:db:db:
         7d:59:db:7e:71:8a:9a:57:96:92:5b:a9:77:c7:fa:f2:c7:5b:
         fd:51:1a:aa:ef:db:0c:ac:84:ce:fc:6c:5e:2f:0f:78:fa:10:
         8f:f5:73:30:5c:42:7e:f8:f0:ce:2d:80:df:a7:05:23:5f:15:
         63:c7:ea:a3:0d:73:d7:e8:32:4a:4e:ff:68:b5:36:4c:03:28:
         6c:8c:c0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:53 2025 by rpki-client