Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce5362ad-628d-3463-8881-9fd838fd6b1f.roa
File:                     ce5362ad-628d-3463-8881-9fd838fd6b1f.roa (raw, json)
Hash identifier:          I2Nm3eZJaDTUTzFXudXoiuOqhV/G3ak0KSTCamz5BQ4=
Subject key identifier:   D9:4E:B0:F2:0A:65:B8:22:F2:D0:32:A6:5D:AA:16:9B:43:FA:35:8A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584777CDB041D1FF100B9E351F80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce5362ad-628d-3463-8881-9fd838fd6b1f.roa
Signing time:             Tue 08 Oct 2024 01:15:35 +0000
ROA not before:           Tue 08 Oct 2024 01:15:35 +0000
ROA not after:            Mon 06 Jan 2025 02:15:35 +0000
asID:                     5650
IP address blocks:        166.88.149.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:cd:b0:41:d1:ff:10:0b:9e:35:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  8 01:15:35 2024 GMT
            Not After : Jan  6 02:15:35 2025 GMT
        Subject: CN=e5a951cf-d6e7-4a58-b013-d8d3f326979e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:42:41:00:9d:cf:8b:fb:cf:7b:79:3a:e6:ef:
                    e6:d5:99:f8:df:a3:79:78:d5:7a:87:63:c9:0f:19:
                    c8:8b:2c:a6:ae:09:5d:d6:81:b0:52:01:78:82:22:
                    eb:ad:01:eb:4d:69:9e:91:02:12:2d:d5:da:b3:86:
                    09:61:9a:db:dd:b6:7d:d2:73:a5:f5:e2:3a:cc:50:
                    1f:34:be:b5:57:7a:dc:1d:5c:33:a3:6c:6f:68:0f:
                    b2:e4:bf:88:96:9e:43:eb:76:9f:8e:c8:21:12:5a:
                    3f:ee:0a:ce:c9:11:5f:5e:62:15:74:d9:1d:e5:41:
                    73:a1:06:41:af:93:d5:9b:8d:de:03:e2:8c:e2:95:
                    eb:dc:43:58:a7:43:32:bb:73:37:69:d2:5f:3e:2d:
                    48:0f:13:32:9b:a8:d8:3e:cb:7a:9f:8b:79:1d:58:
                    d6:48:10:c0:80:1b:cd:e9:ed:1b:c2:c9:3f:ef:d1:
                    d8:eb:85:7f:3e:ba:c9:ad:e9:27:6f:e4:c5:38:32:
                    e0:64:27:2b:08:47:e9:04:c9:6b:4e:ab:51:bd:a2:
                    35:08:30:ee:11:df:e9:75:f4:0b:6f:53:48:1e:05:
                    c1:7b:7d:9e:b6:e7:9b:65:45:2f:45:aa:6e:8f:c5:
                    53:1b:de:e1:07:79:d1:c3:c7:c9:37:3b:34:b3:d3:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4E:B0:F2:0A:65:B8:22:F2:D0:32:A6:5D:AA:16:9B:43:FA:35:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce5362ad-628d-3463-8881-9fd838fd6b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d5:45:b2:7f:48:ae:99:8b:04:1d:b8:ec:85:54:49:cf:75:
         db:c1:1a:f2:35:2b:9a:ef:5c:a5:b2:e0:e0:05:a5:a4:58:71:
         45:4e:35:0c:ad:25:d4:de:2e:ff:e7:8d:4a:ed:61:a1:0f:03:
         97:fd:44:f8:86:a3:ca:24:a5:b4:08:6a:89:38:65:9e:5d:b8:
         54:92:54:09:44:d1:69:d6:90:44:30:f0:33:2a:06:e5:24:6f:
         ff:93:bb:bf:82:51:9a:0c:18:cb:52:cb:3f:20:9f:35:fa:d2:
         f0:80:08:ac:e5:e1:00:08:38:66:e6:fb:e5:2a:d9:79:51:c9:
         3c:7c:06:4e:91:a3:1b:b5:32:b7:01:8a:59:a6:84:ce:e1:b4:
         ab:44:16:53:3a:13:80:df:47:80:ac:27:98:e6:f1:0b:f1:29:
         50:ab:35:10:8b:be:ef:a4:b3:01:e0:a3:ad:86:b4:3e:5b:8d:
         ce:4a:7d:98:e8:8a:04:c8:6b:b4:a3:26:89:43:0a:5d:af:42:
         ce:4e:08:fa:df:a4:12:e4:aa:5f:eb:66:02:33:f2:d3:b6:17:
         8f:36:3c:dc:94:7c:0e:65:93:59:09:4f:68:50:03:bc:f2:8b:
         6f:8d:98:81:f3:6e:aa:f0:5c:78:83:79:53:f2:71:94:31:ff:
         42:eb:87:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:16 2025 by rpki-client