Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5bbb6b01-e504-3ffa-9ce0-74afafdfceec.roa
File:                     5bbb6b01-e504-3ffa-9ce0-74afafdfceec.roa (raw, json)
Hash identifier:          UFvyEdnN86uc2nuiFqxv+uWrtLulRY6UMSrkEIVt5uw=
Subject key identifier:   69:5C:A6:92:7D:8D:F3:6A:CC:14:F0:82:22:4E:64:D6:EE:65:98:D2
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858478A5BA5A87114D3F4652A2580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5bbb6b01-e504-3ffa-9ce0-74afafdfceec.roa
Signing time:             Mon 14 Oct 2024 16:46:10 +0000
ROA not before:           Mon 14 Oct 2024 16:46:10 +0000
ROA not after:            Sun 12 Jan 2025 17:46:10 +0000
asID:                     834
IP address blocks:        173.46.82.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8a:5b:a5:a8:71:14:d3:f4:65:2a:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 14 16:46:10 2024 GMT
            Not After : Jan 12 17:46:10 2025 GMT
        Subject: CN=271e40f6-4130-4aff-97a2-0a23c88e409c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:37:eb:ee:d2:b6:5f:af:8c:58:ba:46:00:
                    d3:aa:29:9d:a2:09:32:37:34:6c:1a:fa:7e:52:d2:
                    2b:53:0d:96:f9:0b:f1:2c:c6:fb:70:49:a9:c8:82:
                    da:94:49:cc:94:2c:22:1c:eb:1d:b4:f9:dd:12:70:
                    6e:ee:45:84:65:e7:9e:64:52:ee:f4:fa:fb:c8:72:
                    2b:d0:a6:36:e6:a9:81:df:67:9a:3d:d0:ef:43:0e:
                    04:40:45:b1:21:c9:5f:f9:bc:b6:fd:97:73:1b:82:
                    26:4f:4c:8f:a0:aa:bd:ce:21:45:e1:a7:52:da:82:
                    25:da:cf:c8:e1:54:f9:71:a9:26:44:56:6c:51:0d:
                    5f:da:13:0e:ca:8d:70:05:d7:8d:dc:69:4a:d5:16:
                    7b:6a:b5:ad:7b:53:20:ad:eb:5f:e6:6d:86:40:f4:
                    18:7b:28:50:1f:7a:f4:ef:a1:0b:12:d5:7a:dd:e1:
                    b2:a5:ed:fc:3b:eb:ac:2b:da:f9:cb:da:87:52:d5:
                    b5:24:6a:48:29:6b:72:8e:b4:06:62:df:20:09:36:
                    12:b0:76:fa:c0:15:c7:14:2a:5b:27:f1:d2:46:c7:
                    d2:5b:a1:fe:c8:cc:e0:08:f4:64:59:04:a3:70:cb:
                    36:31:c1:e6:d3:3a:72:c5:1e:af:4e:06:8a:60:91:
                    e9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5C:A6:92:7D:8D:F3:6A:CC:14:F0:82:22:4E:64:D6:EE:65:98:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5bbb6b01-e504-3ffa-9ce0-74afafdfceec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.46.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:26:2b:ac:8a:37:fb:3e:77:30:ef:87:04:58:cc:cf:7d:fa:
         46:89:bd:e9:e6:a2:55:a4:e5:83:78:0a:ef:9e:a3:22:aa:37:
         eb:c1:c6:e3:c1:65:4b:a7:de:63:30:19:d7:e2:60:ce:ee:77:
         46:e9:80:cb:dd:5d:a0:e6:0b:7c:f4:87:59:c6:f3:d8:d3:1b:
         27:d6:94:14:b3:6b:b2:c7:42:0a:ce:f0:70:e1:53:47:a8:b6:
         2b:c8:f3:00:59:45:06:2c:a7:20:70:50:92:f0:08:33:48:e7:
         b4:37:d2:e4:41:a1:1b:69:23:77:da:55:49:2f:0f:ca:0e:29:
         1e:a7:18:8c:a8:7d:76:16:ad:58:79:5b:12:80:d0:d4:d3:cf:
         05:9f:7e:d5:25:0c:54:4b:17:53:0b:a2:e7:b0:4f:fb:e9:1f:
         1a:45:e9:88:96:7b:ba:c7:8d:71:34:50:15:de:a8:d9:74:59:
         f3:80:9f:bf:fe:01:76:0d:5f:30:66:d2:ae:66:a3:fb:de:9e:
         2e:1a:31:82:c3:0e:21:8e:6c:50:99:a6:d3:c4:a6:41:71:7b:
         6f:c3:37:a5:38:69:39:64:5b:ae:5c:07:b9:bd:db:92:35:9a:
         48:77:1c:2f:e1:08:db:85:ad:ec:95:47:1c:db:64:1d:c2:69:
         ed:da:4b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:23:05 2025 by rpki-client