Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c8b7e593-6657-3ea8-82b1-73e81475c4ee.roa
File:                     c8b7e593-6657-3ea8-82b1-73e81475c4ee.roa (raw, json)
Hash identifier:          160VFOlAL9/i4IKkg06nVvbys15XNciQdczVmZYHBRo=
Subject key identifier:   16:CC:3F:03:A4:F1:6F:3C:60:C2:EB:78:D2:15:F0:1E:8B:BB:37:7A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846EC30080938E4DFBB1C8E55C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c8b7e593-6657-3ea8-82b1-73e81475c4ee.roa
Signing time:             Mon 19 Aug 2024 01:00:31 +0000
ROA not before:           Mon 19 Aug 2024 01:00:31 +0000
ROA not after:            Sun 17 Nov 2024 02:00:31 +0000
asID:                     5650
IP address blocks:        23.27.23.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ec:30:08:09:38:e4:df:bb:1c:8e:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 19 01:00:31 2024 GMT
            Not After : Nov 17 02:00:31 2024 GMT
        Subject: CN=8f19a29a-4ade-440a-bd42-ebfc60c3e6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:fe:bb:7c:d6:89:97:0f:c9:07:8d:b7:0d:
                    7b:44:dd:0f:67:f2:ee:fc:e7:6f:71:90:72:7f:e6:
                    4e:d6:d4:26:67:af:79:56:66:21:c0:05:98:70:3e:
                    75:5b:25:53:c0:67:42:01:9d:df:8d:45:bd:a0:0a:
                    e2:5d:f9:61:2b:ed:c2:b6:ea:47:a9:7c:51:db:68:
                    dc:bf:b0:53:92:8b:2e:37:b7:26:66:5e:f0:fa:e4:
                    c3:3b:07:56:39:64:4c:03:03:65:12:11:c0:41:eb:
                    9e:d0:f9:e9:9c:2e:a0:b3:87:39:46:88:db:50:f0:
                    ac:92:05:95:96:a7:96:e6:17:e1:6c:9a:9f:8a:0a:
                    26:6d:29:bc:28:e4:fd:dd:9c:65:07:3c:24:78:8a:
                    83:d2:3a:82:1e:8e:c4:bb:a3:45:44:ee:fa:36:ae:
                    a2:12:59:dc:a9:d5:84:bf:13:8b:58:08:23:15:b2:
                    29:d0:71:2b:34:01:d3:95:f3:ea:38:b8:db:c0:66:
                    d0:29:1c:ad:58:d6:01:88:e9:92:a1:01:a9:c4:06:
                    b6:e2:04:95:a6:12:00:3b:92:cc:77:cb:21:28:1d:
                    61:c1:d2:de:7a:6c:a6:1b:c0:ee:1b:d1:6d:b1:5d:
                    2e:b4:c8:41:73:67:03:20:77:1f:36:59:69:28:89:
                    12:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CC:3F:03:A4:F1:6F:3C:60:C2:EB:78:D2:15:F0:1E:8B:BB:37:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c8b7e593-6657-3ea8-82b1-73e81475c4ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e9:3d:82:57:95:d0:1e:2e:04:12:76:68:c1:5f:1e:f9:7d:
         85:2f:51:97:da:06:aa:82:b7:31:f4:9a:8c:cd:c5:e8:21:52:
         67:35:d0:55:c5:1d:10:9f:06:fc:7e:91:b8:83:49:fb:12:37:
         e6:ae:f9:ef:06:df:e3:c7:b0:54:57:6e:71:f4:8b:e6:69:f7:
         6d:dd:d0:9a:67:06:2e:49:8a:33:26:52:b6:ea:3b:14:50:12:
         22:25:28:1d:d0:9e:fc:15:46:75:15:8d:b5:43:96:5a:c9:68:
         c2:dd:a1:29:bf:93:22:ca:6f:04:f8:00:4f:17:8a:41:14:bd:
         a7:5c:42:b1:02:80:4a:8e:5f:bf:bf:4e:ab:81:07:c3:b0:88:
         df:f9:28:86:b5:42:c1:75:51:79:79:c5:22:2b:ae:c2:6b:50:
         1a:44:0b:ca:74:bc:4f:77:42:da:c8:d4:b8:bf:13:63:55:fb:
         6a:f2:fc:27:7c:40:09:97:0b:ce:e7:84:47:c7:57:31:01:ef:
         87:08:00:21:c9:af:a1:de:97:74:03:46:39:ab:a1:39:96:55:
         95:f8:71:04:9f:ce:1e:60:12:dc:aa:53:83:b7:74:b5:6f:b2:
         ec:20:2a:75:7b:37:44:45:7e:31:c0:53:9d:21:2a:74:11:86:
         24:2a:44:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:57:49 2025 by rpki-client