Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fb5f9e54-374f-3899-aec6-d17cf4914a38.roa
File:                     fb5f9e54-374f-3899-aec6-d17cf4914a38.roa (raw, json)
Hash identifier:          FXH1mLcaVkAoZW82kDvebLhC0JKpXnPa9wsIP/5fP6Q=
Subject key identifier:   4F:71:F1:5E:AF:B5:6F:01:D6:C2:54:99:FE:88:6F:A8:7B:3C:DC:63
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858462D297D37DB17F57AE979D800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fb5f9e54-374f-3899-aec6-d17cf4914a38.roa
Signing time:             Mon 10 Jun 2024 12:00:00 +0000
ROA not before:           Mon 10 Jun 2024 12:00:00 +0000
ROA not after:            Tue 10 Sep 2024 04:00:00 +0000
asID:                     577
IP address blocks:        184.151.152.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:2d:29:7d:37:db:17:f5:7a:e9:79:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jun 10 12:00:00 2024 GMT
            Not After : Sep 10 04:00:00 2024 GMT
        Subject: CN=66fab9be-beec-488c-b86b-0d7362cefddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:18:d7:f7:28:a3:54:47:f0:b1:88:c7:2d:a5:
                    8f:f1:3f:7e:d3:e7:b4:5a:76:02:bd:61:a2:8c:8c:
                    40:a7:2c:e5:68:7a:68:22:d3:b8:e5:20:c9:76:c6:
                    b8:ef:0a:96:03:7f:d7:2e:11:5b:6e:1b:8e:e4:73:
                    71:4b:13:5b:0d:31:5c:92:1a:10:61:60:1a:0c:aa:
                    e5:7f:fc:a7:38:fa:1f:a7:ed:79:b5:de:32:e2:3d:
                    b0:e1:6a:8c:68:ff:00:cc:78:42:80:0c:de:b2:5c:
                    bb:e6:d5:29:d5:8a:25:d2:ff:e0:f1:49:67:88:6e:
                    b2:57:1b:f8:6e:b8:6a:60:07:d8:8d:74:ef:cd:a7:
                    8d:e6:c0:5f:be:ca:04:23:3a:06:85:a6:8f:89:d2:
                    77:8c:fc:34:8e:5e:45:a5:f4:38:3f:7b:ed:ef:b3:
                    67:db:fd:25:50:62:ed:fa:21:c4:e5:38:60:4f:7d:
                    04:ea:03:56:24:b1:8a:db:30:9d:9c:79:b0:01:0d:
                    e0:33:f2:ed:ba:6f:26:09:4a:b9:47:b1:d2:3f:b5:
                    71:12:38:51:41:9f:9f:45:2b:ef:0a:ca:79:f9:f9:
                    63:06:55:74:14:a7:c6:26:a2:3d:d4:b1:4f:74:b0:
                    0a:e3:37:31:50:fd:db:5c:88:55:e4:bb:e5:69:2a:
                    3e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:71:F1:5E:AF:B5:6F:01:D6:C2:54:99:FE:88:6F:A8:7B:3C:DC:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fb5f9e54-374f-3899-aec6-d17cf4914a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4d:b0:7a:fc:1e:45:83:c4:6e:b3:ea:d8:07:f5:4c:1f:65:
         c9:1c:76:7b:4b:ba:3b:43:9f:7c:92:25:cb:94:54:bf:a8:c7:
         d0:a2:9d:70:8d:40:2b:8d:d0:98:af:6d:08:11:08:c7:32:d6:
         2d:2b:5e:2f:50:6f:57:57:f5:7a:19:67:c6:64:46:25:32:5a:
         fb:c5:fa:0b:34:12:63:00:c9:f2:fd:ab:ab:7d:d3:d4:33:97:
         d8:7b:d7:51:91:b7:af:13:85:8d:7f:45:06:04:6a:12:07:2f:
         43:ab:53:a6:2b:35:b6:fd:bc:31:33:41:4f:93:9d:74:f6:fb:
         40:b4:f8:3e:5a:37:66:78:9f:07:89:ae:27:84:68:76:7b:a5:
         3b:35:8b:04:b8:f1:c4:44:4b:fb:14:d2:45:48:62:5e:df:ae:
         5b:81:d5:dd:6b:3c:d0:ec:12:96:1c:d4:af:0d:64:ef:1f:59:
         6f:e8:cc:02:c6:75:6f:e2:42:14:ce:82:34:87:c3:4b:b7:ae:
         06:be:b5:24:0d:f9:4d:14:b3:67:02:0e:23:ba:c8:10:fc:d8:
         57:0c:b1:99:60:90:50:a8:eb:0c:0d:24:06:a4:5e:81:e1:3e:
         67:84:0e:d8:d3:fd:3a:b9:05:a6:4a:80:30:e7:1e:35:04:97:
         2c:21:e2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:48:59 2025 by rpki-client