Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/60c27ecc-ef6c-3e51-ab5e-d481138b83d8.roa
File:                     60c27ecc-ef6c-3e51-ab5e-d481138b83d8.roa (raw, json)
Hash identifier:          nZsVVq5uYTalYztDiGP95b9F1uKW8hU2a3LETsjiVzg=
Subject key identifier:   DD:14:94:7D:1F:4E:CE:43:E3:BE:82:0A:50:77:5F:D4:0F:DB:4E:69
Certificate issuer:       /CN=4e15d598-623b-4ab3-ad43-b720fb599027
Certificate serial:       010D0C9F432858464A4462CE1A043491EE99B700
Authority key identifier: B0:0B:40:9A:14:8B:AE:3F:03:86:25:50:26:AB:3F:80:15:AD:E5:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/60c27ecc-ef6c-3e51-ab5e-d481138b83d8.roa
Signing time:             Sat 22 Jun 2024 01:00:24 +0000
ROA not before:           Sat 22 Jun 2024 01:00:24 +0000
ROA not after:            Fri 20 Sep 2024 01:00:24 +0000
asID:                     16276
IP address blocks:        23.174.184.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:4a:44:62:ce:1a:04:34:91:ee:99:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e15d598-623b-4ab3-ad43-b720fb599027
        Validity
            Not Before: Jun 22 01:00:24 2024 GMT
            Not After : Sep 20 01:00:24 2024 GMT
        Subject: CN=a9ce1f98-5f66-44a8-a1db-2feb97cf963b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:00:05:91:ad:6f:8d:8f:56:23:12:22:69:b5:
                    86:ec:82:ae:41:ba:4c:22:bd:62:db:97:a4:2d:7f:
                    c7:8f:8b:ac:0a:a7:ac:ea:26:e5:dd:86:62:45:ea:
                    a6:11:3f:b8:05:da:de:3d:0f:d8:12:a1:c1:37:01:
                    ee:c5:9e:a4:02:b5:79:6c:97:8f:15:b6:2c:84:bb:
                    b6:74:cd:ff:44:9d:21:f7:ad:f4:8c:bb:e7:0d:20:
                    8d:4b:96:a1:74:87:44:f3:bb:1e:39:e6:1c:a5:fa:
                    ed:65:87:36:2d:e7:13:ae:5e:e6:32:69:3c:3e:01:
                    14:9d:8a:61:8f:f8:86:df:cc:ce:33:21:e6:11:cc:
                    bf:21:0e:51:96:b5:1b:60:0e:10:82:5d:67:5c:fa:
                    76:4e:a2:a9:af:86:b6:65:3c:a2:74:35:c6:66:b4:
                    56:93:8d:eb:44:b1:30:e1:4e:2a:cf:26:be:e6:eb:
                    e4:f3:ff:de:13:3a:6e:ef:95:8c:19:51:8f:59:98:
                    2a:12:6f:f2:75:a9:80:61:14:00:67:43:70:a7:56:
                    8b:37:3b:ad:78:91:6c:e6:19:07:65:1c:36:be:4c:
                    11:9a:39:75:bd:6f:d4:66:16:34:9a:55:80:24:72:
                    b3:f9:bc:b2:6c:c1:9e:5d:36:55:2f:c0:cf:b4:33:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:14:94:7D:1F:4E:CE:43:E3:BE:82:0A:50:77:5F:D4:0F:DB:4E:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/60c27ecc-ef6c-3e51-ab5e-d481138b83d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027/4e15d598-623b-4ab3-ad43-b720fb599027.crl

            X509v3 Authority Key Identifier:
                keyid:B0:0B:40:9A:14:8B:AE:3F:03:86:25:50:26:AB:3F:80:15:AD:E5:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4e15d598-623b-4ab3-ad43-b720fb599027.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:25:76:69:d3:75:71:24:18:5a:b1:db:86:3e:80:5b:59:92:
         54:f0:d4:e2:44:fd:a1:df:a4:c3:0d:b6:73:b3:7f:7e:4c:8f:
         8b:93:b9:12:2e:39:0d:80:6f:fb:55:f5:08:c7:67:d5:23:e6:
         3d:21:9c:12:7d:03:8c:79:84:fd:4c:e8:43:65:f6:9a:9e:d0:
         1b:47:d0:e1:53:12:a5:55:b1:b4:71:ee:f4:c5:75:2d:98:61:
         2c:55:9f:fe:eb:17:77:c1:65:18:dd:49:2d:c7:86:ca:62:e8:
         d7:70:97:96:02:c0:c5:74:c7:ba:d7:83:94:64:bb:65:29:67:
         54:fc:59:bd:19:32:ba:3d:06:43:8b:54:f9:a1:3f:7e:08:45:
         34:64:99:36:58:db:e8:a5:26:f3:5f:83:57:59:82:03:04:bf:
         93:57:c0:df:75:aa:8e:30:3b:13:de:63:78:34:60:22:2f:be:
         49:0e:a3:ce:1b:fc:b5:ff:ee:a5:d1:83:66:24:9e:61:50:ec:
         e3:d9:0f:5d:34:35:8c:32:e7:f8:02:92:95:bd:d6:9f:21:3f:
         2a:d1:3a:8c:b2:52:e2:77:d1:a1:cb:c6:ca:ed:e9:5c:30:f8:
         bd:2a:12:93:a4:d8:05:71:fb:93:c2:e0:5e:f3:90:ec:d6:31:
         b2:9f:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:19 2025 by rpki-client