Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bc75df05-8887-3af6-bbf4-5395311724ce.roa
File:                     bc75df05-8887-3af6-bbf4-5395311724ce.roa (raw, json)
Hash identifier:          +29vyJjOK23Wm4/ZmOeagIfiN2NQ7U83gycNuDnwKXM=
Subject key identifier:   D1:37:02:B6:0C:10:72:E4:93:49:D1:6C:0B:4A:94:7F:E6:51:D1:5E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858460C7695396E0BF434FD3D1A80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bc75df05-8887-3af6-bbf4-5395311724ce.roa
Signing time:             Thu 30 May 2024 21:41:39 +0000
ROA not before:           Thu 30 May 2024 21:41:39 +0000
ROA not after:            Wed 28 Aug 2024 21:41:39 +0000
asID:                     399823
IP address blocks:        23.27.4.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0c:76:95:39:6e:0b:f4:34:fd:3d:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: May 30 21:41:39 2024 GMT
            Not After : Aug 28 21:41:39 2024 GMT
        Subject: CN=6ed80dba-48a8-4eae-b666-79c1ddb50373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e9:c5:c0:4c:2b:be:ca:53:72:da:6f:55:a4:
                    d0:47:91:06:6c:df:b2:2f:4f:33:44:f3:b9:53:41:
                    98:4c:12:6a:68:20:58:fa:f8:6a:d5:f8:bc:74:74:
                    76:e6:1e:02:a9:9e:42:23:ef:d5:98:5f:b6:be:95:
                    7f:24:a1:b4:6c:97:ed:37:e6:51:70:dc:e2:97:c3:
                    4c:e1:8b:29:82:56:a5:7d:17:b1:03:dd:28:36:21:
                    f3:dc:9f:2c:2c:2a:7a:fd:69:dc:d0:eb:20:fc:13:
                    10:e5:0b:f2:a1:92:f4:d5:99:ff:d6:be:3a:54:c8:
                    a9:65:7f:b1:85:90:2e:b6:77:2b:84:ff:32:a8:23:
                    fc:ba:7a:f7:09:82:d6:7f:91:cf:2c:e1:0e:c9:c6:
                    44:4f:87:b9:93:82:93:f4:08:65:b3:04:3a:93:09:
                    cc:4d:2a:9f:bc:93:ab:59:ac:4e:55:69:b4:d3:01:
                    b6:bf:04:41:84:79:d2:a8:97:18:4f:75:8c:11:2d:
                    96:be:b6:1d:94:86:8f:1b:c3:5a:c2:89:78:47:f0:
                    e6:f0:7c:49:ed:98:0c:d4:75:52:8f:6c:dd:d7:56:
                    79:73:56:ed:0a:95:90:13:70:a4:e7:20:f9:ad:45:
                    6f:56:6d:5a:6c:e2:96:1e:75:5c:b4:47:4b:3f:b2:
                    5a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:37:02:B6:0C:10:72:E4:93:49:D1:6C:0B:4A:94:7F:E6:51:D1:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bc75df05-8887-3af6-bbf4-5395311724ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:9d:73:51:50:d8:f1:50:1a:a1:7b:3c:60:98:46:82:1d:2e:
         52:f4:9b:c6:03:f3:0c:86:7b:a5:ae:ab:42:37:4f:08:2d:a2:
         88:1c:cf:cc:be:da:05:4d:83:7e:52:ed:2e:fa:6c:85:a4:b6:
         9f:20:34:01:8a:d0:b1:f3:36:7b:b2:a0:d0:c1:d7:dc:db:fc:
         58:a4:85:f2:5c:5e:7f:fd:36:63:18:08:fe:ec:09:6b:02:e5:
         bf:b6:5f:c0:d1:f4:65:48:af:38:1f:71:4e:a2:4b:59:dd:87:
         82:b4:3d:c5:9b:37:30:61:d1:65:b7:5e:5a:69:ef:66:f1:f3:
         8b:78:e2:35:62:95:7b:92:d5:36:90:49:81:85:09:d0:b8:d3:
         0a:0a:cf:86:8f:46:54:91:c5:fc:f1:c1:37:2f:e9:c9:4b:2e:
         82:d0:7a:f1:30:90:78:c5:dd:b4:6c:dc:fe:3f:e6:d5:b7:f5:
         fa:cb:83:dd:ef:3d:4f:a9:53:4c:a1:64:85:7b:2a:a4:66:9b:
         60:f5:9d:c5:ef:af:01:b9:20:d2:e6:f5:99:eb:43:51:59:91:
         c2:cd:46:da:ec:b0:d6:85:d6:e8:c7:cc:41:3f:93:ef:97:bd:
         af:34:47:08:e6:a2:fe:b6:49:28:d5:67:8b:d7:36:ea:1d:06:
         0b:1c:fd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:53:14 2025 by rpki-client