Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/22a3455e-d0ce-3e30-9376-0f883f500e99.roa
File:                     22a3455e-d0ce-3e30-9376-0f883f500e99.roa (raw, json)
Hash identifier:          qNqm/LT5aWkm1lrDMBh6IGnmIA0ZIAfWzFogDgkEK9s=
Subject key identifier:   B0:D9:EA:A4:E9:B6:09:6F:8D:96:33:2E:2E:45:BC:D2:36:C5:0C:C2
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584845113FC9CF6C0DED16A97280
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/22a3455e-d0ce-3e30-9376-0f883f500e99.roa
Signing time:             Fri 20 Dec 2024 13:52:25 +0000
ROA not before:           Fri 20 Dec 2024 13:52:25 +0000
ROA not after:            Thu 20 Mar 2025 12:52:25 +0000
asID:                     3855
IP address blocks:        66.55.112.0/20 maxlen: 24
                          104.218.168.0/21 maxlen: 24
                          142.54.192.0/21 maxlen: 24
                          162.255.216.0/21 maxlen: 24
                          198.207.16.0/21 maxlen: 24
                          204.13.24.0/21 maxlen: 24
                          206.188.128.0/19 maxlen: 24
                          216.249.32.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:11:3f:c9:cf:6c:0d:ed:16:a9:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Dec 20 13:52:25 2024 GMT
            Not After : Mar 20 12:52:25 2025 GMT
        Subject: CN=8c91e326-ada5-4276-aeef-af8f2c734645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:22:45:f1:a5:ae:c4:fa:4f:3a:74:ba:0a:5e:
                    bd:c5:94:c4:05:e9:76:33:a0:e5:aa:54:bf:7a:ce:
                    a0:d7:90:00:0c:d4:4d:f5:a5:7b:dd:bb:f3:2e:5d:
                    d1:ee:ab:02:a8:6d:7b:f6:39:63:da:b5:2a:bd:31:
                    a9:a8:39:6a:e7:eb:5f:0a:88:dc:19:51:9a:cd:9c:
                    13:b7:df:5b:c2:bd:24:95:44:0d:bc:8c:c3:06:75:
                    93:5a:38:20:58:08:89:04:9a:7d:37:64:4b:e6:52:
                    93:1d:67:ce:0e:79:fe:8d:4e:90:b5:a9:fb:31:cb:
                    48:b5:46:e6:f9:a1:25:58:65:26:59:88:aa:fd:3e:
                    ac:1d:65:64:64:56:bb:c5:43:f0:7f:a4:57:75:89:
                    a6:1b:16:30:57:2a:fc:bc:aa:fa:5f:ae:0f:3f:7d:
                    cb:48:94:a7:4f:40:e4:40:45:2b:5e:31:ae:84:8b:
                    1d:5e:8e:50:04:77:07:f1:03:e5:98:90:79:02:e7:
                    60:78:bd:ba:4f:3f:96:5f:55:4a:82:c4:b6:f5:8a:
                    21:37:84:a0:b8:62:3e:5b:3d:3d:eb:e7:6e:c6:7d:
                    52:e2:9a:89:6f:4b:11:33:85:02:eb:6f:11:c5:95:
                    e5:02:95:54:39:3a:3e:95:49:43:52:8f:af:52:75:
                    a8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D9:EA:A4:E9:B6:09:6F:8D:96:33:2E:2E:45:BC:D2:36:C5:0C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/22a3455e-d0ce-3e30-9376-0f883f500e99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.55.112.0/20
                  104.218.168.0/21
                  142.54.192.0/21
                  162.255.216.0/21
                  198.207.16.0/21
                  204.13.24.0/21
                  206.188.128.0/19
                  216.249.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:aa:2f:31:ed:34:59:1e:48:63:fd:69:76:03:0d:52:c9:03:
         f5:1f:73:9f:89:85:06:26:96:2e:ef:c2:35:42:5a:5f:8c:c5:
         de:69:ea:8d:0a:4d:f0:ad:5d:8a:ed:96:57:8b:db:01:95:75:
         5e:91:f7:ea:51:f2:79:df:9a:a7:97:fb:e5:93:aa:8a:ff:4b:
         46:89:50:e3:11:88:cc:80:75:37:29:0f:f9:44:0d:0b:fd:a1:
         74:cc:11:52:96:6c:4b:60:40:6b:ec:fe:c7:c4:82:82:a5:bf:
         c4:df:21:02:82:7f:37:a7:53:52:0d:c7:e3:03:f2:d3:50:e5:
         22:25:5e:e5:35:85:58:b6:f5:22:e4:15:de:b7:53:78:48:2a:
         41:b6:e0:b1:cf:24:de:fc:54:b6:2a:df:6e:46:c9:1f:eb:be:
         f4:a7:4e:52:dc:8d:50:a5:96:76:9e:73:99:cf:85:b7:99:bd:
         50:70:79:83:65:a3:d8:2e:a2:f4:e5:62:7b:87:ef:1f:79:fb:
         a9:a2:1d:78:67:ea:d5:d7:3b:99:55:dd:d9:1e:76:6d:b7:04:
         34:44:75:7b:d2:af:9b:1e:e0:72:f2:60:cc:74:1f:1c:57:c3:
         1c:65:a3:fb:d0:02:fd:a5:b3:2f:ec:32:1e:44:38:36:bb:02:
         bf:dc:89:e0
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWEhFET/Jz2wN7RapcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTNmYWRhNDktYjM1My00YTY5LTliMzItMWI2YWIzNzI5
ZGIxMB4XDTI0MTIyMDEzNTIyNVoXDTI1MDMyMDEyNTIyNVowLzEtMCsGA1UEAxMk
OGM5MWUzMjYtYWRhNS00Mjc2LWFlZWYtYWY4ZjJjNzM0NjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SJF8aWuxPpPOnS6Cl69xZTEBel2M6DlqlS/
es6g15AADNRN9aV73bvzLl3R7qsCqG179jlj2rUqvTGpqDlq5+tfCojcGVGazZwT
t99bwr0klUQNvIzDBnWTWjggWAiJBJp9N2RL5lKTHWfODnn+jU6Qtan7MctItUbm
+aElWGUmWYiq/T6sHWVkZFa7xUPwf6RXdYmmGxYwVyr8vKr6X64PP33LSJSnT0Dk
QEUrXjGuhIsdXo5QBHcH8QPlmJB5AudgeL26Tz+WX1VKgsS29YohN4SguGI+Wz09
6+duxn1S4pqJb0sRM4UC628RxZXlApVUOTo+lUlDUo+vUnWowQIDAQABo4IDfzCC
A3swHQYDVR0OBBYEFLDZ6qTptglvjZYzLi5FvNI2xQzCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2Zh
ZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZhYjM3MjlkYjEvMjJhMzQ1NWUtZDBjZS0z
ZTMwLTkzNzYtMGY4ODNmNTAwZTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNmYWRhNDktYjM1My00YTY5LTli
MzItMWI2YWIzNzI5ZGIxL2UzZmFkYTQ5LWIzNTMtNGE2OS05YjMyLTFiNmFiMzcy
OWRiMS5jcmwwHwYDVR0jBBgwFoAUJuly3fKragsPZSkTRy/Y3+UGPZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2ZhZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZh
YjM3MjlkYjEuY2VyMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQEQjdwAwQD
aNqoAwQDjjbAAwQDov/YAwQDxs8QAwQDzA0YAwQFzryAAwQE2PkgMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AHiqLzHtNFkeSGP9aXYDDVLJA/Ufc5+JhQYmli7vwjVCWl+Mxd5p6o0KTfCtXYrt
lleL2wGVdV6R9+pR8nnfmqeX++WTqor/S0aJUOMRiMyAdTcpD/lEDQv9oXTMEVKW
bEtgQGvs/sfEgoKlv8TfIQKCfzenU1INx+MD8tNQ5SIlXuU1hVi29SLkFd63U3hI
KkG24LHPJN78VLYq325GyR/rvvSnTlLcjVCllnaec5nPhbeZvVBweYNlo9guovTl
YnuH7x95+6miHXhn6tXXO5lV3dkedm23BDREdXvSr5se4HLyYMx0HxxXwxxlo/vQ
Av2lsy/sMh5EODa7Ar/cieA=
-----END CERTIFICATE-----
Generated at Wed Apr 16 01:12:36 2025 by rpki-client