Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e81da030-e21e-3a34-9995-30ecf541e6f5.roa
File:                     e81da030-e21e-3a34-9995-30ecf541e6f5.roa (raw, json)
Hash identifier:          6jSi3pUNQFpoAdXIZNTuFgK7aG5CnoSXsKp3O/SP24I=
Subject key identifier:   47:CE:00:CA:7F:AB:FB:2B:A8:36:3B:0A:44:C2:99:72:DE:DB:05:4C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285842D47CC43EA6B32798B6618060
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e81da030-e21e-3a34-9995-30ecf541e6f5.roa
Signing time:             Wed 09 Aug 2023 18:08:01 +0000
ROA not before:           Wed 09 Aug 2023 18:08:01 +0000
ROA not after:            Tue 07 Nov 2023 19:08:01 +0000
asID:                     5787
IP address blocks:        74.219.168.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d4:7c:c4:3e:a6:b3:27:98:b6:61:80:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  9 18:08:01 2023 GMT
            Not After : Nov  7 19:08:01 2023 GMT
        Subject: CN=d179a4f1-c951-4fc1-ab71-8d011c60f4b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ca:a3:c0:66:be:e2:dd:dc:66:e0:b3:59:15:
                    37:fb:44:20:dd:66:a3:ab:d9:dd:8d:6f:eb:80:e2:
                    40:e0:3e:61:b6:3f:52:e7:38:7b:9c:a3:06:1f:6c:
                    70:bb:8a:c2:d4:da:c8:d9:ec:74:24:d4:d5:19:d7:
                    b4:d9:ab:ba:d7:2c:4d:d3:71:25:2d:eb:04:51:b4:
                    7d:75:a4:dc:9a:fd:bb:63:0d:6b:9e:16:7c:9d:a0:
                    92:fd:d5:b6:82:54:ab:33:0f:29:29:77:2f:6c:1b:
                    ce:da:aa:1b:90:65:84:ba:3a:0d:ae:49:0e:b3:7b:
                    9f:8b:21:e4:e5:83:28:18:b1:e2:d4:c2:ca:33:4b:
                    2b:8d:c2:9e:29:bf:96:aa:a2:6b:51:9e:44:fa:8f:
                    a6:8f:01:ce:7a:5e:ae:63:63:9a:9d:d3:0a:bd:6d:
                    6b:69:2c:73:76:0b:f1:ab:f7:8d:0f:fd:28:ba:25:
                    e5:75:fe:b2:91:2a:8e:5a:bd:6f:04:8d:8e:3a:f9:
                    2a:15:9a:85:ed:e3:9c:f0:5b:0b:a5:dc:87:ca:c5:
                    d3:fd:c1:2a:39:95:cc:46:98:e6:a7:60:54:f1:04:
                    6b:1a:bc:30:0e:0b:b6:dd:fd:6f:94:37:7f:ba:07:
                    28:02:b4:a4:2c:40:48:ec:98:fe:60:2a:42:91:96:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CE:00:CA:7F:AB:FB:2B:A8:36:3B:0A:44:C2:99:72:DE:DB:05:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/e81da030-e21e-3a34-9995-30ecf541e6f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.219.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d2:8f:9d:9d:06:1d:61:5b:b3:88:aa:d0:97:0b:94:7a:be:
         20:71:d7:ce:34:fb:a1:70:d0:57:04:70:d5:6e:46:26:43:4a:
         42:9c:a6:6f:aa:54:06:68:61:3b:21:d1:3c:65:8f:cb:e5:ca:
         3e:fb:2c:db:f9:64:a6:c6:e1:26:07:51:78:dc:c3:7c:6e:53:
         c4:d3:77:51:af:7f:24:19:dc:7d:77:76:83:b0:08:d7:53:3f:
         26:60:b8:7e:ae:48:f1:18:96:34:d5:34:eb:58:58:a1:d6:6c:
         79:a1:5a:c2:ba:4b:d9:b1:52:79:a7:63:f6:f5:ec:0b:1c:57:
         9b:7b:1d:f2:6c:34:1d:bd:7b:75:52:18:a5:66:2d:78:bf:6f:
         28:3f:88:b7:c0:61:59:ae:96:ff:03:f4:37:28:0a:33:f0:a2:
         00:69:78:89:72:74:92:00:28:45:b4:25:b0:8f:0d:74:99:f9:
         4c:35:08:2d:b5:c8:c8:3b:4e:66:c1:72:19:34:df:39:c9:51:
         6a:28:7e:08:57:cb:8d:ef:a5:02:1c:6e:ad:9f:29:7f:43:6b:
         2b:d1:4e:17:74:bf:27:2e:86:b7:7b:be:a4:72:7c:f6:1a:b6:
         66:de:c9:7e:ef:ea:5e:d5:c2:e3:18:9b:bf:d7:37:3c:19:56:
         21:09:ba:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:48:23 2025 by rpki-client