Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f6af2685-3460-3bcc-b66d-84f3626bbe80.roa
File:                     f6af2685-3460-3bcc-b66d-84f3626bbe80.roa (raw, json)
Hash identifier:          rjBFnhpRUpuz0V/vYZuA5OrcinrS9pciE5qtA9CGVrk=
Subject key identifier:   AF:DE:97:EB:00:B8:2B:9D:09:47:AA:5D:E8:76:2D:6D:D9:F2:AB:8E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D2936BDA6BCA2DCFE394F80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f6af2685-3460-3bcc-b66d-84f3626bbe80.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        142.185.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:29:36:bd:a6:bc:a2:dc:fe:39:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=d42a1d30-e93b-47a0-95ab-38dbf8fca4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ec:c2:8b:2b:00:7c:f4:0f:6d:78:b8:f0:65:
                    2a:9d:4c:8b:ff:fa:36:d7:02:22:6a:c2:fd:5e:d6:
                    73:a9:19:37:cc:f2:2b:95:6d:d6:ce:ce:78:9b:71:
                    c0:01:c6:c4:6e:30:e4:14:5c:01:8f:4c:2c:81:e8:
                    26:5d:56:76:fa:b1:60:5d:de:ac:06:e1:ee:62:44:
                    cd:98:fc:82:8b:da:86:a4:1a:3b:5d:bc:f2:e4:e2:
                    09:38:5a:de:74:5b:0b:a2:10:0c:7d:b5:63:90:7e:
                    05:5f:88:bc:bb:29:0c:f0:46:21:9c:4e:5e:f0:4b:
                    ab:ae:5b:69:bb:cd:e9:12:51:f7:d9:36:f3:80:f3:
                    74:8a:fb:39:57:0d:91:68:be:b8:53:70:bf:2e:fa:
                    2b:9c:3e:dc:e0:30:e1:8f:d6:fc:d9:c7:f5:ce:94:
                    a8:66:90:ca:62:41:62:09:8e:da:71:6b:bf:82:c7:
                    fb:d9:ac:a3:1e:1d:5c:ce:cf:3e:09:80:16:72:c9:
                    f6:fe:47:13:2b:b6:2d:d4:c8:c7:19:73:2c:01:10:
                    79:b8:38:e2:e2:c2:aa:9e:7f:c3:64:da:99:3b:9f:
                    35:8b:9c:13:fa:f0:66:dd:90:b2:f7:2f:ce:0f:20:
                    a3:fc:2c:04:4f:2b:b6:74:fc:bb:e4:25:f5:01:01:
                    49:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:DE:97:EB:00:B8:2B:9D:09:47:AA:5D:E8:76:2D:6D:D9:F2:AB:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/f6af2685-3460-3bcc-b66d-84f3626bbe80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c9:45:b1:2d:47:9a:26:a8:73:35:3d:b7:b0:21:d2:bf:8e:
         b7:38:51:8f:f2:70:d6:7b:00:82:e4:a1:d7:64:3a:32:20:b8:
         24:e4:cc:0d:ac:57:bf:bb:f8:30:88:85:a6:9d:c4:d3:44:15:
         01:21:af:29:20:6d:1a:bd:d5:56:cc:4d:a5:30:91:5c:6c:ff:
         a1:b5:6e:1b:38:48:99:97:4e:9a:7b:90:68:f5:a1:c1:fa:9b:
         38:77:2d:85:29:04:b1:b1:18:e0:db:bc:ae:eb:23:d3:52:bc:
         2e:1b:49:d2:0f:8a:b4:17:99:58:a6:1b:8d:9a:b6:d0:37:b5:
         71:91:f4:c3:9c:20:3d:9f:de:15:cb:19:c0:18:85:71:e2:a4:
         8d:ff:8b:06:1b:9b:e6:a9:1b:a1:24:d4:a1:25:48:26:65:fc:
         8c:7e:73:e4:c9:96:bf:f3:59:30:62:b9:66:42:48:19:a8:7c:
         45:38:51:86:bd:55:4f:3b:37:10:0a:c6:5d:ad:ec:b1:0e:91:
         0c:1b:f6:48:c3:00:7c:67:47:86:57:92:01:e1:e4:53:64:43:
         c4:23:75:94:23:32:d4:bd:e1:f6:58:f2:1e:05:4a:b7:b8:07:
         b2:a0:62:4f:40:6a:17:b2:67:4d:90:31:de:d4:da:f6:62:a6:
         35:ee:18:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:20 2025 by rpki-client