Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/083e1ba1-766f-365a-9420-3925e59bd6bc.roa
File:                     083e1ba1-766f-365a-9420-3925e59bd6bc.roa (raw, json)
Hash identifier:          EV8TIf7ApLnFMkM1aXAXXJ9b+RPrc5VU7o9mW1lDO5I=
Subject key identifier:   9E:39:F1:AD:CB:CA:C2:A4:DB:87:6D:75:EE:FC:B6:71:25:A9:C0:A8
Certificate issuer:       /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Certificate serial:       010D0C9F4328584776610613C7272FA40DF63580
Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/083e1ba1-766f-365a-9420-3925e59bd6bc.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     393474
IP address blocks:        64.90.139.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:06:13:c7:27:2f:a4:0d:f6:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=aff62c08-029f-496a-af32-426300158e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:21:34:87:ce:7a:f0:bc:85:f5:09:fc:76:a5:
                    1d:b6:03:d3:4e:df:b6:b3:96:df:b1:36:a7:1a:3f:
                    9c:23:b4:2b:31:16:e8:80:68:c1:2d:bd:f4:e2:da:
                    03:c2:78:a4:0f:96:58:f8:17:bf:d8:3c:2e:0b:a7:
                    0b:ff:21:4a:f7:f1:26:da:11:c4:fa:48:b0:41:19:
                    3a:96:cd:7b:71:82:8a:d8:3a:71:80:69:9d:f7:68:
                    ba:7e:f0:ce:4b:5d:c2:70:d2:70:d5:00:25:1f:6e:
                    7c:64:ef:40:49:e3:c0:58:b0:c4:71:df:70:ed:73:
                    50:47:b4:f0:9f:cd:46:0a:b9:6c:2a:ac:9f:e1:52:
                    d6:b3:28:af:83:14:2f:ce:c5:07:d5:8d:3f:a6:5a:
                    7c:6c:0f:15:6a:a8:22:c1:74:3b:81:b9:6b:1d:12:
                    bf:f9:ef:45:6f:61:2d:4b:9f:bd:48:82:46:b1:15:
                    22:19:dc:2a:d0:47:39:60:51:08:c0:d0:e7:7d:c4:
                    2a:b7:1d:6d:46:42:8a:e2:19:de:5c:14:66:36:aa:
                    67:e1:4c:69:ed:45:2c:7a:44:f7:d6:9b:46:e6:57:
                    98:b2:3d:23:9d:26:85:b7:13:d5:09:96:bc:cf:65:
                    d3:e8:b2:da:19:11:ea:dd:26:f8:f3:43:2f:67:d9:
                    2c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:39:F1:AD:CB:CA:C2:A4:DB:87:6D:75:EE:FC:B6:71:25:A9:C0:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/083e1ba1-766f-365a-9420-3925e59bd6bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.90.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:67:2a:16:85:24:f9:28:c1:45:77:19:64:74:1e:8d:12:a4:
         3b:e6:35:24:eb:3f:3c:af:f8:21:26:6d:4b:a4:5a:0c:1a:65:
         55:17:0c:3d:a2:15:37:ce:98:75:dc:8f:42:11:67:4d:83:47:
         d5:0a:d9:dc:c7:9b:ed:f4:f2:28:ac:3e:4e:ce:10:f7:4b:16:
         67:48:78:78:99:2c:d4:53:ea:85:4e:9b:e8:88:7a:79:2f:48:
         22:98:7f:d4:a4:75:41:39:8d:9f:6d:da:01:3b:be:42:fc:c2:
         98:35:93:e2:55:f3:6d:c1:23:78:1a:b0:c9:52:2d:70:88:4b:
         82:7e:b4:68:ef:3f:4c:5f:f2:fb:90:5c:56:6d:0b:e7:30:09:
         07:7f:ce:c3:57:4e:46:92:f8:81:ea:b1:4b:1a:1e:d2:15:e9:
         27:ff:66:7b:e2:e1:e6:00:d6:fa:fd:ad:3b:52:56:3c:62:0f:
         cc:e5:de:9d:6c:71:f4:67:d5:71:72:60:e6:9e:87:df:f1:0a:
         3a:b6:a2:fd:18:e0:fa:2b:9a:29:ed:51:8f:5f:9d:18:37:cf:
         dd:d9:26:80:23:58:01:d2:c6:83:f5:27:ff:24:fd:cb:4d:15:
         2d:bf:fe:9e:55:9d:ca:1a:df:06:e7:83:7f:99:96:3b:fd:6d:
         24:38:42:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:10 2025 by rpki-client