Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9f15624e-2fac-3973-bae2-c31bfabd5c4c.roa
File:                     9f15624e-2fac-3973-bae2-c31bfabd5c4c.roa (raw, json)
Hash identifier:          6lVgJ4hwqoGmyQAz4o3X/vmcloggue6bNFz/PKPUTJ0=
Subject key identifier:   BF:8E:EA:7E:55:38:E7:80:33:92:4C:EE:A2:9E:A1:BF:6D:99:7A:F4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846BF8512E0AB5EFC233E3DE700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9f15624e-2fac-3973-bae2-c31bfabd5c4c.roa
Signing time:             Sat 03 Aug 2024 01:00:27 +0000
ROA not before:           Sat 03 Aug 2024 01:00:27 +0000
ROA not after:            Fri 01 Nov 2024 01:00:27 +0000
asID:                     5650
IP address blocks:        168.93.253.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:bf:85:12:e0:ab:5e:fc:23:3e:3d:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug  3 01:00:27 2024 GMT
            Not After : Nov  1 01:00:27 2024 GMT
        Subject: CN=b920ec20-c65f-47cf-af54-36cd98f92fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:53:7c:fd:05:3d:13:18:f5:5f:03:54:92:c6:
                    26:ed:57:ac:d6:e3:7d:d4:dc:50:41:1b:54:94:ad:
                    ae:a4:0f:91:39:ab:f4:dd:f7:a2:e8:3f:71:d6:2e:
                    73:70:73:23:be:5c:c0:f5:6b:9a:6f:cf:ad:11:71:
                    f3:12:84:80:7c:ab:16:41:ff:b4:f8:51:18:be:ce:
                    fd:d3:cf:ac:10:9e:05:ed:86:a3:18:d0:6b:5f:34:
                    c1:70:da:b2:f6:de:4d:7f:5b:6e:b8:9b:ec:2d:de:
                    fc:9e:85:32:27:99:40:85:11:7b:5b:13:4d:07:1e:
                    13:01:66:49:ea:2f:0c:3a:ef:23:ef:ff:bb:ba:50:
                    26:e5:5e:d3:8a:62:c3:1d:9c:4e:e5:6f:53:c0:92:
                    b5:04:a3:a2:1f:19:21:fa:63:d9:9c:8e:ae:de:ac:
                    21:ea:13:e4:1d:a2:8e:86:ac:fb:47:b7:21:1a:c9:
                    b1:55:a7:2e:0a:c7:4c:80:4d:6f:9a:a0:12:f9:8d:
                    89:f4:40:2e:7f:c7:87:32:2f:20:08:96:93:32:e5:
                    51:46:ce:0f:28:e9:2c:da:15:f1:9d:0a:e9:6e:24:
                    79:b3:c5:02:d1:ed:4a:e3:4f:6d:ff:3b:82:28:ec:
                    bf:de:62:49:45:bc:c4:8b:ee:a8:0a:80:3f:e3:1d:
                    01:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8E:EA:7E:55:38:E7:80:33:92:4C:EE:A2:9E:A1:BF:6D:99:7A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9f15624e-2fac-3973-bae2-c31bfabd5c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:9e:e4:3b:d2:ca:0c:34:2c:02:e7:61:e5:7e:92:31:d4:65:
         db:fa:c8:60:ce:3f:33:f4:41:5a:a0:7e:d5:e6:1b:09:38:5c:
         cb:9e:83:33:1c:b7:a8:e0:2f:62:63:6e:5c:b5:7b:1e:bf:99:
         7d:3d:88:49:23:0f:0e:1f:be:4b:c3:a9:c9:e4:9b:aa:0b:23:
         1a:2e:40:d5:ce:74:59:20:50:d6:7e:ed:bc:b4:21:d7:ca:a4:
         af:0c:d4:fa:b4:c1:ad:47:3e:3f:33:a7:70:99:9a:02:23:ba:
         99:50:70:9f:26:b0:38:0a:1f:04:8f:79:8c:ba:91:ee:2b:f0:
         ae:90:87:38:84:d3:c3:05:ee:0e:4f:ad:12:b4:c4:24:56:77:
         ee:cf:3c:24:53:02:6b:01:c6:b6:4b:cd:c0:15:e7:5b:30:4d:
         54:ef:98:10:82:46:ac:27:2e:81:39:5e:a6:ce:41:55:e4:1b:
         9b:f5:f4:b7:83:1e:af:54:87:ce:d8:86:54:46:72:75:f7:fe:
         1a:51:b8:16:26:f5:24:2c:94:c4:da:2e:7f:cb:80:46:db:38:
         9a:51:34:16:73:7f:5d:5e:45:2f:a9:be:b7:2e:f8:92:83:c7:
         f9:31:39:a2:54:08:f8:00:53:06:e3:05:a6:78:22:15:a7:94:
         1a:07:04:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:03 2025 by rpki-client