Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e239aacb-4a62-375f-a395-082c791b7ace.roa
File:                     e239aacb-4a62-375f-a395-082c791b7ace.roa (raw, json)
Hash identifier:          hOy3nLjYx4Q6xiDkAmPlZ4ow7bUd9dPF+1mPvKAA5YI=
Subject key identifier:   FC:C3:B1:7A:E6:10:E8:87:3B:F4:90:10:3C:4B:8C:41:4A:18:56:A3
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584785BBAFB31BEF4A6B2580B700
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e239aacb-4a62-375f-a395-082c791b7ace.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     1239
IP address blocks:        63.174.142.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:af:b3:1b:ef:4a:6b:25:80:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=950f736a-f9a2-41e6-a19e-74cae3487ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:45:0b:75:cb:3f:ca:76:b5:35:03:cf:60:
                    59:1e:76:e5:f8:49:4a:1a:73:34:72:3d:8a:9d:fb:
                    81:c3:6e:e8:fe:c6:22:e9:da:11:f0:65:02:76:12:
                    2e:c6:e0:68:ce:09:57:12:a8:72:ba:33:1c:f8:62:
                    17:1b:0e:cb:89:2a:35:22:93:af:7c:a2:2f:65:7b:
                    80:3f:01:1c:bc:eb:49:86:69:05:ef:76:fa:68:62:
                    bb:95:61:c6:90:05:5b:2d:7c:7a:e4:bd:ad:eb:44:
                    d9:d0:d4:da:39:66:32:7b:cf:4b:54:45:e5:ff:88:
                    84:32:42:94:54:1b:d2:82:8c:d4:5a:58:8c:6e:0b:
                    0b:15:9c:27:9c:0a:d9:56:fd:9c:51:c2:20:f0:4c:
                    6f:a5:16:ac:40:f0:4f:05:3d:76:da:19:a6:8c:96:
                    fc:01:35:e4:55:3c:34:7c:df:28:dd:e6:a0:e9:f4:
                    93:72:d0:48:d7:89:b4:be:e3:9f:d1:95:14:1e:bc:
                    c7:e4:8c:ad:48:01:70:7f:b3:5e:57:69:50:de:5f:
                    97:d7:31:02:cd:3d:2e:1a:c5:74:a5:e7:14:62:22:
                    40:f9:3b:60:f4:a5:75:ab:4f:d9:d3:2a:94:fb:76:
                    9a:25:ce:75:26:df:94:cc:74:1d:f8:9e:b8:fd:7f:
                    82:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C3:B1:7A:E6:10:E8:87:3B:F4:90:10:3C:4B:8C:41:4A:18:56:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/e239aacb-4a62-375f-a395-082c791b7ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.174.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:89:62:aa:17:89:55:57:1b:c6:ec:7b:6d:dc:b4:95:5d:36:
         84:c8:28:fb:a5:9d:fc:c6:8e:ee:c5:37:7a:a7:6b:f7:a6:c3:
         de:73:c7:44:d1:d9:25:b0:55:00:25:9c:4a:62:2f:23:ba:b4:
         a8:99:77:2d:f1:58:7d:a1:c6:f6:0f:e4:e7:9d:77:a1:0e:5d:
         03:ee:bb:62:79:c4:e6:70:6d:9b:12:18:2a:27:6d:76:93:57:
         40:35:ee:9f:33:13:c0:60:f1:5a:33:a9:29:fe:5a:19:8e:2e:
         cc:12:c3:94:ee:0d:f4:d0:e3:6b:82:97:b2:04:f7:34:bf:f2:
         b2:3c:99:34:7d:e4:bf:62:9d:cc:25:81:7a:39:05:16:97:27:
         3b:95:f8:1d:04:97:3f:78:48:04:37:18:0b:21:2d:75:db:c4:
         ab:d8:94:93:a8:c1:82:15:3c:02:1b:61:ce:2c:5a:47:0a:c6:
         4a:3c:49:ff:e0:a3:df:41:06:58:c4:8a:db:09:da:56:5e:a7:
         d0:0c:a0:79:43:ec:ba:6c:09:4e:3c:b1:ce:68:00:54:f4:6b:
         dc:80:bd:6f:14:83:21:b6:dd:17:99:b4:33:6e:09:6f:7b:03:
         28:04:95:46:f8:8b:93:91:94:3e:ed:60:48:ef:2d:f1:54:0c:
         36:30:f5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:47:31 2025 by rpki-client