Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/d6b76af0-3c8d-31db-a7aa-481a8da41b62.roa
File:                     d6b76af0-3c8d-31db-a7aa-481a8da41b62.roa (raw, json)
Hash identifier:          F3K0lvkffYFPyj05GIbwBG15tpMldmkgGm33aZvkRlA=
Subject key identifier:   5A:17:BF:69:55:49:72:D7:E3:21:6B:56:99:3B:0E:B9:32:85:84:69
Certificate issuer:       /CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
Certificate serial:       010D0C9F43285848271BDE154B2602CDBE691B80
Authority key identifier: 22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/d6b76af0-3c8d-31db-a7aa-481a8da41b62.roa
Signing time:             Mon 09 Dec 2024 20:19:34 +0000
ROA not before:           Mon 09 Dec 2024 20:19:34 +0000
ROA not after:            Sun 09 Mar 2025 19:19:34 +0000
asID:                     14618
IP address blocks:        45.45.212.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:1b:de:15:4b:26:02:cd:be:69:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe
        Validity
            Not Before: Dec  9 20:19:34 2024 GMT
            Not After : Mar  9 19:19:34 2025 GMT
        Subject: CN=acb12482-9be1-49a8-ad0a-d566862d8e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:14:0d:fe:46:82:74:63:94:ce:10:72:4e:d2:
                    4c:d0:55:52:81:47:6c:c8:b1:f4:e1:04:40:c6:f5:
                    bf:87:ba:e0:a6:9b:a7:98:54:9b:c4:c2:8f:17:4d:
                    06:8c:38:12:60:3c:2d:3f:de:1e:56:a1:26:46:de:
                    6f:1e:c2:7e:6d:e8:30:7f:c9:9c:9b:6f:c2:8a:9a:
                    16:6a:d3:9b:c3:79:2a:5b:95:f3:59:5a:d0:39:64:
                    87:b2:3c:98:bd:8d:e4:34:b0:99:8f:ca:55:7e:b3:
                    f8:14:20:a2:82:b0:e3:5c:b5:05:b1:d8:82:37:71:
                    2d:f8:7b:6b:3f:94:7b:b5:51:28:f4:18:ac:7f:c7:
                    2d:79:6f:19:49:d9:e0:91:5b:fb:76:80:fa:d8:e5:
                    22:42:84:19:11:c2:a0:28:9e:ea:07:6c:e5:26:79:
                    c3:da:68:d7:9d:0b:56:c0:ef:d8:57:fb:f1:82:f5:
                    79:df:5b:ea:95:dd:b7:19:81:24:40:ef:80:31:76:
                    98:49:62:cd:ec:cd:77:7d:fb:a1:50:28:11:a7:8d:
                    8e:19:b1:4d:70:57:5b:aa:48:97:75:ae:f6:4a:f3:
                    8f:74:8a:d0:1d:d0:fe:b8:b4:33:87:8f:1a:73:df:
                    26:87:05:9a:51:1a:85:34:18:c3:56:06:06:65:16:
                    47:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:17:BF:69:55:49:72:D7:E3:21:6B:56:99:3B:0E:B9:32:85:84:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/d6b76af0-3c8d-31db-a7aa-481a8da41b62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.crl

            X509v3 Authority Key Identifier:
                keyid:22:61:4F:70:F7:39:6B:85:5D:27:5B:1F:0F:AD:AB:01:7B:55:A7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ef6d7a98-b02a-4074-afd2-9ee7ccb2bdbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:63:28:c4:b3:f3:c0:10:c4:2a:de:7a:ea:bd:89:26:43:50:
         d4:e8:5f:cd:a3:a0:e8:f9:0d:ae:9a:3c:69:56:4c:18:9a:e1:
         ae:26:3a:0f:9a:27:fb:12:44:ea:65:75:5b:11:d7:b2:a2:af:
         06:db:23:35:cc:bf:51:cc:7f:8d:9d:9d:b8:1a:eb:e9:73:4c:
         e3:07:41:51:6f:c8:c2:7d:7c:e4:c2:c9:bf:93:cc:3d:53:10:
         8a:ab:c9:14:30:85:91:1c:50:4b:94:62:1c:92:ab:45:52:e9:
         f3:df:ef:a1:50:7f:13:d1:44:80:c4:70:ae:0d:12:b6:b4:c9:
         66:5d:ed:0a:26:e9:57:14:0e:eb:46:dc:2b:cc:96:bd:17:4c:
         e8:f2:fa:bf:30:0d:ee:87:dd:d3:c1:39:1d:11:d1:6a:a9:99:
         f8:a9:78:8b:88:18:56:72:3a:36:9b:9b:fe:7a:69:8c:f8:2f:
         1e:f8:df:c6:44:e3:d2:15:db:e1:c0:47:2d:57:4d:52:5f:b8:
         73:8a:bf:a0:8c:72:bf:28:d3:25:65:1a:87:3b:ef:78:5d:b5:
         c8:59:c5:4c:9f:70:8d:c0:f3:76:e3:a3:3e:7a:43:cd:05:ba:
         2b:d8:07:ce:2a:1d:bb:b6:43:80:47:cc:24:c3:66:cd:99:32:
         16:e1:97:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:31 2025 by rpki-client