Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7a1540c3-2175-3d12-b66b-3671e531bb37.roa
File:                     7a1540c3-2175-3d12-b66b-3671e531bb37.roa (raw, json)
Hash identifier:          ys8eUwYEjc8hzsnIrWDpCKuZr+SIyozBJPnDjGZlRus=
Subject key identifier:   51:D1:6E:4D:C1:34:AC:B4:DD:33:8B:39:06:75:AE:FD:5D:6C:AC:21
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285842D47CCEE3D48F96BBCF85E880
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7a1540c3-2175-3d12-b66b-3671e531bb37.roa
Signing time:             Wed 09 Aug 2023 18:08:06 +0000
ROA not before:           Wed 09 Aug 2023 18:08:06 +0000
ROA not after:            Tue 07 Nov 2023 19:08:06 +0000
asID:                     46549
IP address blocks:        97.79.236.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d4:7c:ce:e3:d4:8f:96:bb:cf:85:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  9 18:08:06 2023 GMT
            Not After : Nov  7 19:08:06 2023 GMT
        Subject: CN=2e776e24-8cbe-41d5-90be-9c851d25ab69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fe:57:97:2e:84:bc:88:fc:70:fe:14:98:9b:
                    d8:b1:94:18:5d:1a:75:a0:fa:d1:c0:40:8c:db:d9:
                    1e:c8:6a:d4:8c:d0:44:b5:0f:0c:26:0b:4e:87:81:
                    f5:7e:e9:70:f5:0a:91:68:c4:27:73:68:7e:59:d0:
                    60:43:f4:ac:e6:ae:06:37:21:15:f1:a6:cc:bf:f1:
                    8d:f1:02:11:3e:3c:05:38:d2:1e:dd:87:3f:1c:73:
                    e5:90:4c:7d:5e:45:b0:15:59:4a:40:e7:3b:87:af:
                    1e:99:ad:d0:2a:85:b8:3e:b6:eb:aa:5f:67:f9:44:
                    92:05:20:2c:43:ed:ae:63:48:c5:d5:bd:5f:eb:85:
                    95:55:0e:77:84:c2:79:e7:3a:9d:c7:f6:74:ae:64:
                    ea:b1:69:76:cb:bb:66:cb:2d:22:6d:ec:8c:4c:c5:
                    03:d8:3d:62:e7:fc:99:d7:11:b5:59:f7:cb:f6:68:
                    f2:11:86:66:97:d3:cf:59:75:df:2e:07:87:ed:e6:
                    9e:0e:90:38:51:aa:9c:24:6c:11:bf:bc:b1:e6:cd:
                    b6:6b:04:0f:dc:a9:c6:d6:8c:23:10:82:f9:48:aa:
                    20:5e:d7:0e:60:98:d4:83:a2:29:2a:c2:a9:ea:49:
                    51:89:e8:c6:d7:0d:ed:5d:9b:b3:6d:66:9f:79:28:
                    26:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D1:6E:4D:C1:34:AC:B4:DD:33:8B:39:06:75:AE:FD:5D:6C:AC:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7a1540c3-2175-3d12-b66b-3671e531bb37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.79.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:cb:ef:6e:f3:94:61:4f:83:6b:e2:d1:f6:11:4c:6f:c1:3e:
         80:5a:b9:6b:a5:86:9d:91:39:a2:46:2a:0c:9e:6e:f8:df:84:
         06:72:5f:a1:a4:42:49:d3:ec:52:2d:22:fe:da:be:fd:99:9c:
         70:1b:3e:e6:96:34:c4:58:b3:8d:e6:ba:af:32:14:b4:f6:1e:
         53:8b:2c:f1:ca:f8:4b:01:a1:68:e8:32:14:4a:f8:78:0e:4e:
         91:c9:fc:5f:c4:80:63:79:51:1c:7d:34:fc:d3:4e:f8:93:97:
         1a:c4:95:ac:a1:b3:cb:73:a5:38:76:3d:66:84:d2:0d:ee:73:
         32:3b:1c:20:4c:1e:84:d4:aa:5c:ff:45:80:e8:13:00:67:6d:
         c2:c5:4d:61:92:b1:f0:1c:90:9b:4b:cd:99:52:57:71:4c:9e:
         37:86:8b:ec:84:91:59:eb:c7:6d:cf:6b:01:53:93:6d:b6:f2:
         55:d7:a4:ee:9a:d2:b8:21:85:ac:fa:31:17:b6:a2:b9:9f:db:
         f1:01:0e:6f:71:ba:3d:4c:21:03:96:aa:95:05:84:06:25:e4:
         9d:67:76:a4:7d:53:25:d9:70:39:5d:e3:97:70:e5:96:f7:d1:
         4f:44:ca:49:a8:14:7b:39:3f:6c:fa:f5:10:24:11:76:a1:60:
         17:6e:26:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:55:27 2025 by rpki-client