Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ba2bb932-b380-353a-a940-e52faf03f5bc.roa
File:                     ba2bb932-b380-353a-a940-e52faf03f5bc.roa (raw, json)
Hash identifier:          svfnhI2NHMlV4Ft25yulfkS/C1QnWBqgPT1kZEESlMU=
Subject key identifier:   EA:CA:00:F9:54:73:0D:AE:2F:3C:4D:EB:CB:E6:76:FB:FD:A8:D3:65
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858475ADEB91858C90F0FB01BE380
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ba2bb932-b380-353a-a940-e52faf03f5bc.roa
Signing time:             Fri 27 Sep 2024 16:31:28 +0000
ROA not before:           Fri 27 Sep 2024 16:31:28 +0000
ROA not after:            Thu 26 Dec 2024 17:31:28 +0000
asID:                     212238
IP address blocks:        216.74.84.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:de:b9:18:58:c9:0f:0f:b0:1b:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 27 16:31:28 2024 GMT
            Not After : Dec 26 17:31:28 2024 GMT
        Subject: CN=42788a2d-75ea-47f8-a8aa-8da5bee94500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cb:0e:17:4b:78:ca:7a:5c:e9:87:61:36:f4:
                    d4:ae:e9:fa:2e:58:ca:08:dc:8a:03:cd:c1:01:ec:
                    c6:00:9b:ea:2f:bd:02:2d:5c:e6:0e:93:17:4e:56:
                    b0:a5:8a:7b:09:ce:9f:cb:a9:7f:d8:6a:4d:49:50:
                    83:70:5f:0d:72:26:2d:42:9f:85:38:18:9d:c2:50:
                    54:d2:b5:8c:a2:b5:bc:1d:6e:a7:e7:6d:0f:ed:c0:
                    83:de:6c:96:79:fe:15:03:d5:c0:ab:6f:92:d3:f3:
                    4d:0c:27:22:57:51:67:a8:83:db:96:bc:a8:ba:0d:
                    03:4a:0c:e4:55:16:ef:8c:c0:d1:65:f4:0a:f4:e0:
                    51:b3:2c:8b:09:c8:83:df:ea:fe:f8:45:af:08:56:
                    ca:99:39:45:31:b1:ab:a6:e8:ab:85:4e:62:c5:e8:
                    93:e3:db:f4:54:84:e4:d6:cd:99:5e:2d:1f:85:01:
                    89:a8:b2:bd:41:63:39:be:c9:a9:0f:72:04:ac:bc:
                    3e:d6:fe:c3:cd:7b:4c:89:ca:db:2b:64:41:ea:51:
                    93:f5:3f:3f:00:c2:ad:78:c2:b2:d6:e4:92:73:ff:
                    e8:bf:58:fc:65:9e:1f:88:5f:d6:d1:21:fb:27:fc:
                    13:3a:f0:6a:e3:a4:44:a0:41:28:40:e8:83:e7:45:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CA:00:F9:54:73:0D:AE:2F:3C:4D:EB:CB:E6:76:FB:FD:A8:D3:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ba2bb932-b380-353a-a940-e52faf03f5bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a0:f2:8c:7e:76:b3:4f:a5:c8:5d:f7:38:c1:51:6c:ec:bb:
         aa:65:a2:b8:5a:ff:0d:5a:53:ee:a3:b1:9f:cb:49:3b:53:e2:
         48:b5:00:ff:8e:5c:d1:47:ac:0b:55:14:d1:23:69:78:9d:03:
         0f:9b:a8:d4:5a:e7:36:11:dd:61:ea:c4:f7:f7:27:7c:75:99:
         15:76:41:87:74:7c:ea:17:ee:0a:d4:60:a7:e7:67:e2:ec:96:
         9c:c3:b8:7a:c9:d8:11:5f:fd:30:78:79:bb:d9:53:97:44:96:
         1d:44:79:0f:8f:42:f6:26:70:75:d0:57:85:a4:4e:46:71:0d:
         c8:12:af:6e:4f:df:62:e1:ef:51:bc:50:bf:33:97:ba:8e:15:
         81:aa:44:c6:8c:28:23:38:4d:0c:71:f0:ef:69:83:7a:b9:3c:
         c9:ac:15:8f:fc:dd:ae:7f:ec:83:e7:89:05:d9:ec:5b:ba:bf:
         94:27:00:e7:45:3e:e7:2d:2d:81:37:c3:d0:f4:38:6f:5a:77:
         dc:0f:85:84:af:32:8e:ce:55:7b:fe:47:a0:f1:df:45:39:53:
         b5:2b:cd:95:9a:ba:5a:40:27:f4:9e:fc:79:0b:dd:e4:b3:64:
         aa:20:65:47:69:09:03:77:d6:0a:78:dd:42:83:8b:2f:2d:8d:
         ba:a0:d0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:28:10 2025 by rpki-client