Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23871dc6-1861-309a-8020-bbe029b26b10.roa
File:                     23871dc6-1861-309a-8020-bbe029b26b10.roa (raw, json)
Hash identifier:          hnTEEQIsew++drY5qyt8FjRqtEkdLOsM/HOMd9bwC3A=
Subject key identifier:   B0:50:0F:4A:A0:14:D1:69:BE:28:A0:76:4C:B5:F0:1F:DB:FA:99:EB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846BF851300A5022FD39CCDDF80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23871dc6-1861-309a-8020-bbe029b26b10.roa
Signing time:             Sat 03 Aug 2024 01:00:27 +0000
ROA not before:           Sat 03 Aug 2024 01:00:27 +0000
ROA not after:            Fri 01 Nov 2024 01:00:27 +0000
asID:                     5650
IP address blocks:        168.93.255.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:bf:85:13:00:a5:02:2f:d3:9c:cd:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  3 01:00:27 2024 GMT
            Not After : Nov  1 01:00:27 2024 GMT
        Subject: CN=e0dfd71d-f14d-4a7c-9642-84305efd642f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:e4:ad:7f:7d:1a:a2:98:71:2f:ec:09:69:
                    0a:db:a2:08:ef:67:38:3d:13:21:ba:8f:d7:ce:f6:
                    d1:82:c2:14:b7:09:f1:7d:8f:f1:64:d8:8a:e7:a0:
                    90:6c:47:c1:99:60:a0:2d:97:3d:96:2a:ad:d8:15:
                    26:af:ef:50:b8:64:6e:d2:c6:a0:3f:f6:ac:e6:0e:
                    a7:81:ab:a9:e8:cd:f0:da:e9:10:ee:35:43:5b:26:
                    ea:08:ea:dd:63:a4:94:73:97:e4:7b:60:ce:35:48:
                    ae:75:c0:43:fd:0e:57:3a:03:e2:a0:ac:0d:cf:ff:
                    e6:77:45:65:6e:e1:40:82:ff:60:fe:66:ea:55:a7:
                    c5:a4:8a:9b:bf:1a:e9:3a:71:d2:a7:62:42:44:b5:
                    bf:a8:10:35:b5:7e:13:61:93:f5:40:08:24:1a:ec:
                    b0:e6:32:72:19:bb:31:cf:56:85:4c:73:0e:88:8c:
                    d7:df:3c:f1:34:c5:03:7f:70:0f:76:5f:5d:e8:c0:
                    00:11:1b:a4:7f:2b:52:3b:ec:1b:fb:e2:ac:34:b3:
                    ae:c3:ce:fc:8f:11:85:af:43:05:30:11:96:97:60:
                    34:5b:8e:42:8b:bf:bd:73:30:a2:22:ff:5c:99:19:
                    62:a2:f4:f0:6b:bc:cd:8d:72:2b:5b:12:25:43:95:
                    41:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:50:0F:4A:A0:14:D1:69:BE:28:A0:76:4C:B5:F0:1F:DB:FA:99:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23871dc6-1861-309a-8020-bbe029b26b10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:aa:ea:38:f9:dd:35:bb:54:3e:b4:ce:a0:c5:ea:07:fd:7d:
         4c:da:1f:6f:d0:9d:1a:86:26:fc:ca:b4:9b:0b:15:b6:90:3d:
         d8:f1:dd:6b:a2:2d:12:6b:7a:44:d4:58:29:bd:b7:7b:67:3a:
         65:b1:5b:1f:b1:88:3e:f3:0f:9e:0c:1e:d9:ff:ad:f0:94:53:
         01:03:fb:39:b3:a4:54:52:88:b2:7f:a8:6a:eb:77:74:76:c0:
         8b:a9:8a:a6:d3:7f:15:f8:b5:90:72:0f:5c:86:fb:96:aa:f8:
         f7:de:a3:2a:03:2a:96:74:bd:c4:05:17:27:20:c9:92:0e:6e:
         5d:e5:56:ef:62:aa:6d:da:3f:25:86:b8:be:da:77:56:e3:41:
         78:e9:d3:48:49:1d:bc:c1:a5:3d:2a:53:59:6f:80:b6:35:eb:
         95:2d:71:8d:5e:64:28:db:35:ba:94:21:28:ec:46:90:28:d5:
         95:3c:d9:3c:b8:6e:02:fc:be:77:e5:b6:36:73:66:46:16:65:
         cf:85:d0:12:af:1b:42:71:e6:e1:18:67:f0:c1:2b:7c:d6:11:
         70:83:f4:44:a6:40:58:6c:4e:48:ff:ae:4c:fc:1d:3e:bd:e6:
         ef:41:f0:cd:01:33:0f:c7:e7:76:e9:f4:f1:fe:de:77:2a:6a:
         a4:0c:9a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:03 2025 by rpki-client