Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b7e25758-0a31-32d2-ba75-de538997db4b.roa
File:                     b7e25758-0a31-32d2-ba75-de538997db4b.roa (raw, json)
Hash identifier:          pwYZIemUFX5vuJGq7QAeI+p96EnxaqToCcOCozta9XI=
Subject key identifier:   2F:FB:BE:0D:12:27:65:03:15:A9:C5:D8:FC:23:D0:C2:D1:FF:8F:E8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328583F315DD41B39FE77CB32446F00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b7e25758-0a31-32d2-ba75-de538997db4b.roa
Signing time:             Tue 02 Aug 2022 17:30:08 +0000
ROA not before:           Tue 02 Aug 2022 17:30:08 +0000
ROA not after:            Thu 12 Dec 2024 05:00:00 +0000
asID:                     49999
IP address blocks:        184.174.4.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:31:5d:d4:1b:39:fe:77:cb:32:44:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  2 17:30:08 2022 GMT
            Not After : Dec 12 05:00:00 2024 GMT
        Subject: CN=91c8ae9e-346c-43b5-a155-4275405f6383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:81:13:b5:1c:68:ba:0f:29:d6:08:7c:cd:93:
                    8b:0b:a1:73:08:8d:91:8b:c5:d5:c3:35:bc:ca:2f:
                    51:9d:85:ad:42:ef:6d:66:05:8f:9a:8d:d1:2c:a5:
                    69:2f:a2:ad:72:f8:6c:f9:b2:a0:18:32:37:34:6e:
                    63:4c:79:11:fc:8f:12:fc:d6:47:75:fd:be:d4:56:
                    e2:6f:09:f1:42:83:03:92:91:68:0e:fe:d8:fc:c5:
                    5e:38:cf:41:ef:ae:16:4a:0d:4a:90:3e:d6:37:49:
                    62:20:0f:40:44:8d:ae:34:4b:d7:45:5f:6d:1b:18:
                    72:1a:6c:af:ed:73:55:8c:fa:b6:d4:99:b3:5e:de:
                    66:65:96:c6:a6:d0:ec:d9:fa:0e:71:61:36:cc:aa:
                    c4:d6:84:44:7f:48:01:c8:95:6d:98:d2:cd:19:68:
                    84:9c:62:c2:6e:e3:19:b5:8e:e8:c3:a7:20:a2:08:
                    f4:b5:4a:96:61:31:0f:d3:22:e0:17:21:2a:40:b7:
                    e4:41:6f:f2:12:6f:58:5e:63:61:cc:94:48:7b:6c:
                    1e:9f:7d:ad:94:db:39:d2:9b:1a:d5:d3:c2:8c:16:
                    5e:0a:f0:16:81:df:b3:c6:fd:d1:6a:92:a7:0f:91:
                    ca:b3:65:a3:de:ff:46:1e:cb:97:29:6a:79:77:2a:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FB:BE:0D:12:27:65:03:15:A9:C5:D8:FC:23:D0:C2:D1:FF:8F:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b7e25758-0a31-32d2-ba75-de538997db4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:01:e7:90:ad:32:c7:88:cd:0b:30:af:e0:78:04:71:50:bc:
         99:1c:3f:18:3f:7a:9d:dc:6c:03:9b:98:50:0a:66:ad:bb:3a:
         72:6b:d7:da:fe:ae:e5:c3:57:ad:e7:81:29:6e:1b:63:4a:76:
         c7:74:7a:3d:c2:63:4e:6e:d4:15:3b:8a:92:97:24:34:bf:3b:
         54:04:45:71:d2:49:de:fc:6a:e7:75:55:3e:db:0a:4a:49:d4:
         26:aa:08:14:80:e6:0b:b9:7a:50:2e:3a:6d:85:c3:01:d1:f8:
         4e:bb:03:be:d4:e1:97:a3:77:85:38:1f:ae:2d:28:dd:82:f0:
         3e:67:96:92:79:3d:18:00:0e:1e:9b:35:87:4f:9b:2a:af:f6:
         ba:20:7e:7f:37:2f:e5:23:c7:12:2b:18:e8:f7:ff:c4:c3:99:
         63:4b:ff:c5:12:7d:81:22:34:6c:d5:90:c9:99:da:33:bc:b8:
         65:c6:09:43:3e:4b:83:8b:b8:21:b8:9e:51:cc:71:39:2c:61:
         30:85:d9:25:71:8e:4a:d8:7f:8c:52:f1:27:67:45:af:d8:bc:
         cb:47:01:8f:a7:07:f2:8b:81:e4:4a:22:48:b7:33:a6:76:de:
         ee:50:51:aa:7c:a3:0d:88:82:ba:c5:10:ff:ea:5d:87:72:a6:
         0b:b3:63:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:05 2025 by rpki-client