Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e16e7221-9e3e-3db6-a444-10c1de1728f5.roa
File:                     e16e7221-9e3e-3db6-a444-10c1de1728f5.roa (raw, json)
Hash identifier:          Y6Xri9V/IBNonuUxz/gCxWS2Nf0NEPomAd2AvxHg5BM=
Subject key identifier:   BE:55:2A:60:64:44:1F:88:F2:6E:D2:B7:C4:D4:7D:DC:62:C2:FB:38
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845BD48DF04386EC75018846B40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e16e7221-9e3e-3db6-a444-10c1de1728f5.roa
Signing time:             Thu 02 May 2024 13:00:34 +0000
ROA not before:           Thu 02 May 2024 13:00:34 +0000
ROA not after:            Wed 31 Jul 2024 13:00:34 +0000
asID:                     834
IP address blocks:        45.40.121.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bd:48:df:04:38:6e:c7:50:18:84:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May  2 13:00:34 2024 GMT
            Not After : Jul 31 13:00:34 2024 GMT
        Subject: CN=e73ea178-426c-45a3-ac13-1cd08674568c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:3f:6c:6e:63:34:8d:81:ee:ae:71:b3:4e:
                    d7:0f:70:2d:be:38:9a:3b:65:b2:0b:d3:7c:96:55:
                    40:50:ea:f0:91:13:89:a2:34:69:09:5b:16:f7:d8:
                    e5:aa:d5:12:2b:f6:4d:9c:72:ab:5e:49:39:7b:56:
                    2f:01:51:6d:81:2e:90:ef:4e:d3:c4:52:f6:7f:0e:
                    d2:5e:00:b5:e8:fb:ed:83:e0:8f:cc:3c:78:01:60:
                    de:5d:ab:82:7b:c4:66:76:25:18:a2:60:71:36:a2:
                    78:11:2a:45:c8:94:54:86:44:50:3c:fe:d7:d2:47:
                    ce:13:ff:bc:b7:cb:a6:16:aa:c0:88:ab:0f:75:fc:
                    ec:36:8c:c4:2b:36:fa:ff:d8:e9:4c:c1:e3:da:4a:
                    2c:68:1a:c2:c0:6d:d8:28:99:20:9b:6a:27:75:6d:
                    f1:64:0f:bc:78:86:f1:47:4a:46:30:fd:64:c6:51:
                    8d:7f:1c:80:59:73:eb:b5:dd:17:8e:d5:84:5b:60:
                    61:0e:88:b4:e7:3a:35:db:a0:a8:38:77:1c:86:17:
                    56:a4:c5:9d:8f:94:80:2e:25:58:14:34:f2:f2:0c:
                    ca:e7:20:2a:7d:3f:0b:ec:bc:ef:e3:71:8e:e3:4a:
                    67:0e:44:25:cc:5c:6b:ec:30:53:f6:63:89:17:7a:
                    67:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:55:2A:60:64:44:1F:88:F2:6E:D2:B7:C4:D4:7D:DC:62:C2:FB:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e16e7221-9e3e-3db6-a444-10c1de1728f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:4c:b4:f0:8d:bd:8c:0b:ab:08:20:47:7a:06:fe:f2:46:47:
         f4:a3:64:e6:7d:cc:f7:64:c1:dd:69:af:7a:9f:3a:32:5a:5f:
         33:0a:51:73:51:01:4a:70:1c:15:8a:03:18:60:ee:d5:e1:dc:
         96:88:19:b0:a4:b5:65:10:64:19:a9:cc:9d:5b:54:23:63:ce:
         ac:7d:78:cd:57:14:c3:dc:78:d8:e7:d4:bb:d9:3e:14:69:44:
         ba:90:f3:19:1a:34:b1:7c:0a:dc:74:47:70:80:07:67:18:42:
         b8:2c:7a:f9:4c:6a:9d:05:32:c7:54:09:73:5a:a6:98:08:88:
         92:f7:eb:20:3e:00:59:bf:72:dc:a5:9e:c3:aa:e5:16:ef:9c:
         8d:e3:65:7f:65:19:1a:10:b7:80:35:a2:6f:00:9c:00:aa:89:
         ea:79:2e:7a:99:fd:48:9d:c4:e0:ac:d2:0e:48:fd:d8:3a:8d:
         2e:f4:39:77:3c:f5:88:00:dd:5c:46:f3:b4:2e:75:f9:c7:d6:
         cd:bd:8d:19:34:fb:ce:ac:e6:47:58:cd:1f:02:da:f7:54:7d:
         9a:62:41:a7:51:c5:c7:05:93:f7:14:80:c0:e8:4d:ef:a1:c1:
         5b:52:0c:7e:dd:dc:0c:ff:22:af:a9:09:a0:0e:de:74:88:7d:
         52:9a:d3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:37:38 2025 by rpki-client