Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dcfda1cc-2cb0-3f91-8f78-d3bab94fe144.roa
File:                     dcfda1cc-2cb0-3f91-8f78-d3bab94fe144.roa (raw, json)
Hash identifier:          dvZjsOBodxDJzmW6v8kw08JRZt642COR7BX06WzLqb4=
Subject key identifier:   FC:24:D8:17:39:53:AB:5D:28:88:82:25:8C:56:12:9B:8B:DB:8A:9B
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328583AA7B0DE90A6C8C79B4B3C4680
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dcfda1cc-2cb0-3f91-8f78-d3bab94fe144.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     36492
IP address blocks:        136.22.206.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:b0:de:90:a6:c8:c7:9b:4b:3c:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=9341cff9-8134-4592-805f-38767b289a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:12:35:92:86:af:8c:53:57:04:98:38:66:6b:
                    b3:d2:5b:a8:68:8d:89:70:3a:da:fb:71:9a:ac:b9:
                    e8:19:29:69:d7:81:e9:c0:42:e2:23:9f:81:05:5d:
                    6d:b3:60:d6:b4:93:0d:e7:44:1e:ae:a3:0c:0d:fd:
                    e7:77:51:1b:e9:81:1d:6c:99:58:b4:56:a6:2a:96:
                    03:27:20:a8:3c:3e:a2:96:33:0b:78:dc:35:4f:08:
                    db:a4:05:d8:f2:60:10:8d:c4:88:8c:81:81:cc:c7:
                    03:04:57:63:4a:c6:bd:20:7b:76:57:aa:b5:4f:e4:
                    1f:0e:9d:d5:43:41:92:ac:79:5f:46:ec:3e:06:6b:
                    f8:a7:52:cb:27:ad:59:53:9f:99:49:f7:16:ff:92:
                    0f:8c:4f:85:01:2d:9e:c0:27:07:aa:51:e9:da:58:
                    d9:2c:a8:2b:dc:b9:5c:22:c6:0f:9b:cd:f9:cc:cb:
                    8c:da:96:c2:a5:da:2f:00:5b:a0:58:2d:15:f4:69:
                    62:ca:5b:f0:bf:be:1d:1d:d9:09:e5:60:f3:d3:ae:
                    f5:20:d8:6b:32:f2:13:c9:d9:1a:cf:19:0b:ed:5d:
                    09:bf:e3:10:a9:23:2f:15:17:2b:2a:83:ab:c2:92:
                    81:05:55:23:90:07:4a:b4:42:e7:60:41:5c:d8:da:
                    ad:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:24:D8:17:39:53:AB:5D:28:88:82:25:8C:56:12:9B:8B:DB:8A:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dcfda1cc-2cb0-3f91-8f78-d3bab94fe144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.22.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:66:01:bf:58:31:9a:ff:f2:2f:df:f9:b6:89:c8:e5:00:16:
         5f:b3:a6:dc:92:7b:28:5d:e0:5b:45:28:97:74:9b:b4:28:be:
         8d:90:8a:fa:df:13:eb:ad:ab:1d:d8:3b:32:60:d1:a4:1b:56:
         33:dc:ec:27:fc:95:93:e6:16:cf:51:83:01:2f:25:d1:3f:97:
         6e:27:61:60:bf:54:06:f3:2e:22:ea:76:35:62:4b:8a:49:3e:
         01:45:51:cf:24:e5:1b:ba:cb:fc:4f:1e:5b:70:a3:57:98:7b:
         cd:b7:79:fc:7b:4e:66:bc:bb:70:4c:d9:e3:57:6c:0e:79:3b:
         f7:ec:54:c5:08:f8:76:09:f2:e4:b1:f3:e1:3f:7f:57:ca:e1:
         db:3c:ca:bb:ea:4d:43:e9:fa:a0:76:f7:04:b4:56:db:50:3f:
         20:00:32:2a:bb:0c:35:a1:a1:e2:61:e5:13:ef:c0:94:82:37:
         89:13:9f:44:63:33:e1:b4:fc:55:17:c0:9e:af:1c:06:ed:9f:
         5a:97:b4:81:99:ef:19:38:5a:99:d4:e3:8b:0b:ff:53:5b:4a:
         d1:8d:e1:28:ea:d5:b5:bc:d1:2d:cd:85:6b:97:50:32:92:3b:
         fe:6a:76:4d:6d:a3:0e:b4:b5:6f:e0:0f:01:51:ab:fb:32:8a:
         b3:5e:ff:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:08 2025 by rpki-client