Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/79cad82b-f36a-3683-a0b3-5e6d3b245694.roa
File:                     79cad82b-f36a-3683-a0b3-5e6d3b245694.roa (raw, json)
Hash identifier:          bU/xdxUCNzGZK3SMQi5dk5L3Uqo3oTktK3Kfghvk79I=
Subject key identifier:   AE:E9:A8:CC:8D:01:3A:43:1C:B2:57:B0:DC:57:91:7B:7B:6B:DB:67
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F432858479DE91521D7CC32D7A6466658
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/79cad82b-f36a-3683-a0b3-5e6d3b245694.roa
Signing time:             Mon 21 Oct 2024 16:51:30 +0000
ROA not before:           Mon 21 Oct 2024 16:51:30 +0000
ROA not after:            Sun 19 Jan 2025 17:51:30 +0000
asID:                     19740
IP address blocks:        162.216.120.0/22 maxlen: 24
                          162.216.124.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:e9:15:21:d7:cc:32:d7:a6:46:66:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: Oct 21 16:51:30 2024 GMT
            Not After : Jan 19 17:51:30 2025 GMT
        Subject: CN=0a5f0619-3302-4169-b677-bae3eac56c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:6e:9e:88:8a:56:67:af:ad:2d:3c:62:00:
                    59:a9:da:eb:d9:5f:70:71:72:5e:2e:35:fd:13:d0:
                    df:f6:d9:ed:e1:16:dd:8b:82:17:e5:3f:9b:7e:b5:
                    eb:a5:4a:2f:4f:5c:c6:0e:90:c3:65:fa:93:c0:b4:
                    bf:ba:0e:59:8b:2d:ec:10:8f:00:36:13:96:f4:bc:
                    f9:29:5d:24:9f:5a:7b:bd:7e:6c:99:39:b3:db:91:
                    13:4a:8d:2d:0f:4d:db:2f:19:0c:6b:a4:65:e8:69:
                    a8:a0:37:e8:6c:b0:33:e3:88:89:27:5c:04:51:f9:
                    65:5b:16:9a:26:d1:10:95:2b:58:9e:6e:3a:b8:8f:
                    1b:bf:06:a0:71:6c:93:6c:d1:04:da:92:95:3f:46:
                    43:42:c8:9b:18:56:8c:32:d1:7c:47:1f:05:1e:e5:
                    63:cb:f1:e7:ec:63:23:de:94:d3:f0:1b:0d:81:18:
                    20:fc:e8:58:bc:41:fe:c9:c3:7e:d0:7e:ec:98:e0:
                    8b:25:d8:89:f1:43:df:ac:ec:1c:cf:83:66:c2:eb:
                    ce:20:21:ab:ea:c5:c1:1e:63:5b:72:b4:05:33:bd:
                    f4:f5:c4:40:0b:00:83:d3:7e:c4:6e:64:1b:0e:2d:
                    5f:96:68:3b:35:8a:fe:6d:40:94:55:9b:1b:11:b4:
                    85:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E9:A8:CC:8D:01:3A:43:1C:B2:57:B0:DC:57:91:7B:7B:6B:DB:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/79cad82b-f36a-3683-a0b3-5e6d3b245694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.216.120.0-162.216.125.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:50:c4:2d:b6:5a:11:9d:f5:8d:7a:20:99:38:68:51:af:09:
         fb:f3:00:af:06:9a:54:fd:4b:fb:35:43:35:0e:39:9d:d2:1a:
         52:ca:c2:19:ad:8f:fa:3b:c1:32:8d:42:8a:c1:96:ba:ec:50:
         04:0b:7b:7a:65:ba:08:55:c7:85:df:1e:5e:ca:02:d8:b1:37:
         c8:72:21:09:fb:db:23:8a:ed:e9:0f:f5:65:3c:66:3e:21:9e:
         57:c0:dd:bf:db:b4:93:34:ec:2b:33:9b:46:2b:f1:89:e4:37:
         4a:5e:56:4d:51:63:22:c0:2a:be:cd:9b:b8:b2:15:70:d4:9d:
         2d:70:a8:61:cc:1a:d1:45:96:33:00:f8:67:73:68:54:4a:10:
         71:97:80:c4:1b:e2:6d:3b:ef:6f:47:89:60:a3:6a:a1:b6:cc:
         9d:6b:c3:1c:7a:1f:d7:c0:c1:87:1e:0a:c1:5d:3a:e9:e7:b8:
         bb:f1:73:04:36:d1:9d:2f:a7:84:e1:43:f0:e2:d9:9f:e0:59:
         41:aa:65:53:f1:ba:0a:1c:dd:f8:3a:41:f3:98:ee:fb:bb:7d:
         56:ca:df:7f:0b:98:c9:b9:47:84:19:08:81:0c:50:97:d6:99:
         5a:43:5f:3b:cc:c3:bd:44:dc:b4:75:62:4e:55:3e:8e:94:c9:
         cf:ae:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:19:54 2025 by rpki-client