Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0ac8e600-021c-3b1c-9a87-50e6f58b152f.roa
File:                     0ac8e600-021c-3b1c-9a87-50e6f58b152f.roa (raw, json)
Hash identifier:          Ok5W9es3fgEPiLYHye9H7FLE6lJI5jQnd1WjG5qcHdc=
Subject key identifier:   FC:43:5B:BA:01:BA:69:45:F6:AB:7B:9B:3E:4D:43:9A:AB:11:6E:E0
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285847C2655A17AB376823283F6F00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0ac8e600-021c-3b1c-9a87-50e6f58b152f.roa
Signing time:             Sun 03 Nov 2024 18:30:59 +0000
ROA not before:           Sun 03 Nov 2024 18:30:59 +0000
ROA not after:            Sat 01 Feb 2025 18:30:59 +0000
asID:                     834
IP address blocks:        162.33.163.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c2:65:5a:17:ab:37:68:23:28:3f:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Nov  3 18:30:59 2024 GMT
            Not After : Feb  1 18:30:59 2025 GMT
        Subject: CN=55bdd1dc-c577-432a-9328-c4f4ff89c033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:90:2f:d9:ff:38:26:c8:40:69:05:f6:82:43:
                    f0:a6:20:68:a9:4c:6f:aa:9c:9f:5d:dc:e5:4c:b0:
                    71:9e:82:ec:42:54:ea:73:6c:96:78:6f:11:17:c9:
                    a0:c2:ee:f9:0f:47:89:f6:cb:8f:31:f5:e4:43:f3:
                    01:6c:82:44:75:e9:26:97:11:ce:53:26:e0:5c:48:
                    fe:e8:a0:7e:bc:d6:37:5f:d6:41:ea:16:7a:f3:92:
                    8c:ea:31:72:27:69:78:f4:d3:f3:91:f1:ea:b0:de:
                    31:ee:7c:d5:b4:ff:d8:70:78:23:17:2e:af:ed:6a:
                    24:95:6d:30:c4:5e:87:8a:74:d5:a8:c1:2b:c3:04:
                    86:47:ff:5b:e0:15:e9:c5:5b:57:ca:a6:77:3a:65:
                    d8:97:6a:7d:5c:f6:04:88:b5:2f:69:c6:9b:04:0b:
                    89:2f:8a:c4:77:c8:f3:83:ac:fb:3a:74:28:74:bf:
                    84:d0:a2:8b:f5:58:11:c3:9c:5d:77:a1:62:46:ff:
                    34:22:e9:80:76:65:d4:0d:9d:90:c9:f5:18:fb:a1:
                    ef:48:44:d9:c4:15:c7:e8:ba:ac:6d:dc:11:ff:25:
                    44:7a:ad:4c:45:99:62:a5:14:2e:f3:42:7b:74:fe:
                    8d:94:85:40:fc:93:4c:28:e3:aa:37:be:b6:b1:f7:
                    b4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:43:5B:BA:01:BA:69:45:F6:AB:7B:9B:3E:4D:43:9A:AB:11:6E:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0ac8e600-021c-3b1c-9a87-50e6f58b152f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.33.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:dd:8e:4a:fe:ef:02:be:b4:e1:45:de:be:a1:cc:b2:d4:8f:
         10:fe:f8:64:57:a8:51:68:87:9c:7b:3e:89:a5:bc:71:d9:77:
         85:0b:ce:96:cd:8a:2a:18:d8:02:97:f4:b5:4a:b1:57:3c:04:
         a9:6f:b3:eb:de:d0:29:ec:c7:39:6b:26:1f:84:89:f4:a3:36:
         f4:62:4a:82:e5:f4:19:20:dd:93:fe:e9:14:22:8d:1d:6e:1e:
         f7:9b:75:ea:f8:4d:e6:ac:8e:25:a2:35:a9:bb:7b:12:8f:ae:
         d4:48:c3:f1:86:26:10:48:c6:17:de:b6:17:54:7d:06:d3:2a:
         d3:d8:b0:6e:70:a5:0c:81:7a:b9:ba:04:21:ff:fc:38:fe:ef:
         a3:a9:c5:21:f7:7c:c0:7c:6f:6d:93:30:31:85:e6:54:1a:79:
         43:8a:33:22:c8:7f:84:c6:5a:da:37:bd:fb:c8:f6:cc:e6:02:
         cf:7e:4a:87:ec:98:2b:cf:b4:d4:9d:f9:63:4f:f8:4e:d3:99:
         f5:ba:f9:ee:8b:76:5d:77:15:f9:35:dc:a2:65:68:70:fc:f5:
         4f:30:71:c5:54:ee:06:c3:c1:6b:87:6e:d2:6d:83:e7:40:e1:
         c1:e3:41:42:59:4b:27:dd:0e:d7:82:55:1e:3f:27:22:e2:cb:
         98:ff:91:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:42 2025 by rpki-client