Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/029cf132-57c5-3bbe-a29a-c3dd1c970b71.roa
File:                     029cf132-57c5-3bbe-a29a-c3dd1c970b71.roa (raw, json)
Hash identifier:          H2EDLwioyxRx8V6U9M9cTH6EbVE4DQrM4JyB9FAjHwM=
Subject key identifier:   FC:A5:4D:8D:43:3D:BA:98:11:09:04:ED:C5:4F:D4:86:65:B2:CD:96
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858463289A77AAAEAD0918B87CDA0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/029cf132-57c5-3bbe-a29a-c3dd1c970b71.roa
Signing time:             Thu 13 Jun 2024 13:00:34 +0000
ROA not before:           Thu 13 Jun 2024 13:00:34 +0000
ROA not after:            Wed 11 Sep 2024 13:00:34 +0000
asID:                     7029
IP address blocks:        98.19.32.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:32:89:a7:7a:aa:ea:d0:91:8b:87:cd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun 13 13:00:34 2024 GMT
            Not After : Sep 11 13:00:34 2024 GMT
        Subject: CN=8c3057b8-e24b-4447-b5a3-0090ab25cd55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:c9:1f:5d:2e:f0:33:6f:9c:2e:58:ab:6f:
                    46:64:e9:cc:2d:b3:8d:78:ab:3d:c3:ac:07:89:24:
                    09:6d:c1:0b:ce:6a:e3:50:53:07:26:61:42:a6:71:
                    e8:69:fa:f2:cb:08:12:5b:c6:62:aa:5e:4d:8a:cc:
                    a2:ea:4b:e8:54:fd:d5:2d:87:b2:be:8a:de:72:e4:
                    ad:91:8e:f3:88:73:ae:80:c3:bb:1e:50:72:ac:95:
                    1b:1f:4c:22:3c:f3:6e:f4:ec:2f:46:65:fb:df:a9:
                    ec:60:27:94:62:38:87:f4:6a:c8:94:52:72:4d:80:
                    5b:76:1d:e4:16:38:52:4e:a6:bb:e7:c0:08:64:38:
                    94:7a:84:72:e1:56:79:4f:4f:f7:f5:f4:5a:a9:bb:
                    33:24:94:f8:2c:b3:1e:46:e4:72:c4:aa:04:91:67:
                    94:40:ac:e0:7b:30:33:cb:75:1d:ed:4b:b3:3f:bd:
                    e9:74:94:88:ce:a0:55:1e:5f:6d:72:a6:e6:06:70:
                    09:d5:9f:be:0f:ce:1a:ee:c0:93:b0:bb:13:b1:ab:
                    3b:e0:39:32:6d:2f:4a:fe:69:11:a3:9f:84:2a:c7:
                    a2:0d:c5:b2:9f:66:ee:60:7d:7e:b9:81:e4:a6:82:
                    f1:03:ff:88:d2:ed:9c:1a:0e:9a:34:35:78:4b:15:
                    af:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A5:4D:8D:43:3D:BA:98:11:09:04:ED:C5:4F:D4:86:65:B2:CD:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/029cf132-57c5-3bbe-a29a-c3dd1c970b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.19.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b5:0c:47:dc:31:bf:98:92:f2:c0:cf:1c:47:71:78:3f:9c:
         e4:93:5a:9a:e9:4e:e1:69:bf:f7:5d:81:bf:f7:32:f1:35:a8:
         92:43:79:33:ea:5d:94:da:91:b5:44:59:b5:5f:95:8b:37:a7:
         ec:bd:22:12:02:97:24:c5:13:c8:1d:8d:d2:1d:19:1f:ce:db:
         b4:84:32:63:26:43:78:03:c0:4b:c7:5e:01:f9:d3:e0:8a:a0:
         08:2e:95:b3:f6:d1:09:34:67:8f:0a:c1:5e:12:26:5a:00:e1:
         5b:da:bd:fa:0e:77:03:bb:8e:47:a4:3b:a8:84:9b:d1:4a:b4:
         6a:8e:9b:28:09:67:00:b4:60:38:e9:64:2d:f0:20:c3:38:b2:
         53:bc:b0:ef:47:17:47:6d:19:df:7f:54:87:52:10:b2:51:55:
         ad:39:24:d3:0f:53:a5:aa:31:5a:8b:b1:35:eb:54:40:ae:c2:
         4b:03:9c:ac:8c:c2:ca:6d:14:50:1d:4b:26:fa:67:9e:40:21:
         85:aa:45:08:b3:06:f7:9d:da:c1:41:71:f8:06:c8:88:22:ea:
         c7:d6:b8:0f:83:41:37:ca:8d:cb:6d:3b:a7:24:48:ae:03:48:
         ec:7c:ca:12:c0:d5:a1:ec:c3:98:d2:a1:08:4a:87:22:5c:b3:
         13:c7:1b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:51 2025 by rpki-client