Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/05369644-9ded-3c42-9676-c9f26be40288.roa
File:                     05369644-9ded-3c42-9676-c9f26be40288.roa (raw, json)
Hash identifier:          /B6BQ8xGJ9YOI9JENW94n76FqbZyWY0DL5rmdpoIhlU=
Subject key identifier:   76:39:FB:36:67:38:AE:8A:1D:D0:B5:59:EB:C0:DB:69:90:DE:A8:57
Certificate issuer:       /CN=6d11a6b3-8058-4e95-9e9c-20c0a442fb47
Certificate serial:       010D0C9F4328584812D527362E35E0A9D0F8EA40
Authority key identifier: 38:D3:96:8E:5C:17:D9:D5:C8:7A:95:EE:EB:04:54:9F:71:C0:C6:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/05369644-9ded-3c42-9676-c9f26be40288.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     7029
IP address blocks:        23.189.104.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:27:36:2e:35:e0:a9:d0:f8:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d11a6b3-8058-4e95-9e9c-20c0a442fb47
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=e7374db0-bb90-4c29-bc4c-38f339882699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:40:8c:9c:70:f5:62:05:5f:1b:9e:0c:58:0d:
                    cd:e2:72:10:c5:c2:20:cf:9d:21:06:40:f0:66:6e:
                    96:b6:a6:cd:27:29:26:30:25:7a:fb:bf:d8:97:0e:
                    60:9f:23:44:be:0e:0e:4e:33:72:95:a9:58:34:27:
                    30:33:b3:b4:21:f7:21:9f:d7:8f:b9:ad:ad:f0:58:
                    ee:5f:91:40:c7:6e:6f:c1:1b:79:8e:a3:ca:4f:5f:
                    b1:95:09:4f:3c:07:c3:56:e3:d8:8c:0e:56:5b:ee:
                    35:80:a2:66:8e:7c:fd:4c:bd:12:a9:c2:20:f9:d5:
                    ff:44:c1:03:20:07:7c:51:67:b2:ae:28:17:45:77:
                    b9:56:34:7c:31:dc:c9:f9:f7:41:4c:c8:2c:3d:92:
                    69:f0:92:f3:47:1e:cd:26:74:a8:3a:e6:2f:5d:3b:
                    49:46:98:80:e0:5b:7a:72:10:5d:23:0c:c1:ca:f5:
                    e2:90:bf:2e:91:af:f4:02:ff:9b:03:03:10:99:b0:
                    bc:e8:e5:46:1e:54:70:24:bd:46:af:49:32:d4:6a:
                    64:37:18:77:f2:af:c4:ea:6d:bc:8b:8a:f4:03:dc:
                    c6:53:cd:14:f3:e1:86:a7:35:1b:eb:65:67:ef:ed:
                    4a:e7:2a:9c:4e:a7:ec:b6:3a:2a:c1:80:c7:81:c9:
                    fe:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:39:FB:36:67:38:AE:8A:1D:D0:B5:59:EB:C0:DB:69:90:DE:A8:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/05369644-9ded-3c42-9676-c9f26be40288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.crl

            X509v3 Authority Key Identifier:
                keyid:38:D3:96:8E:5C:17:D9:D5:C8:7A:95:EE:EB:04:54:9F:71:C0:C6:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d11a6b3-8058-4e95-9e9c-20c0a442fb47.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:4c:1b:95:bb:ab:d8:f9:7a:6c:2c:65:27:ce:40:48:e2:63:
         24:1a:41:96:e2:9c:d3:32:b1:5b:85:69:10:47:af:df:3c:8e:
         7c:4b:e3:db:e5:79:a5:fd:bb:4d:f9:0e:b4:b2:df:90:ae:9b:
         c9:8f:95:59:1a:8e:84:44:65:d6:c9:84:4c:71:26:6a:a5:e5:
         17:07:f0:23:e7:96:31:16:76:22:a2:15:3a:ec:97:20:1e:c2:
         73:e8:0d:e1:a1:a5:8a:23:e0:d0:fd:5e:6a:7a:37:54:b6:20:
         2a:64:a9:cb:0e:ff:92:f0:41:16:de:8a:88:a6:9b:aa:4e:28:
         e8:45:7f:6c:fb:bd:ef:55:84:4a:c2:cb:7d:8a:c9:93:79:a9:
         0b:3d:bc:21:63:ac:a5:b0:f7:a1:e3:34:fc:e6:6d:f6:c5:71:
         30:c8:d3:75:d4:8c:6a:9a:47:ba:31:d9:67:a5:bc:94:c1:20:
         9c:6b:47:72:23:c7:08:26:77:b9:39:09:54:f7:42:67:1f:b8:
         28:69:95:a3:8b:b6:45:00:6e:16:25:6e:f4:69:4a:23:96:97:
         bb:c1:9f:d5:e8:51:29:68:d5:71:69:bb:ea:8e:33:70:ee:f1:
         92:ba:31:c4:cc:c5:13:8a:03:d2:ba:20:cf:b3:41:06:94:94:
         3f:e5:58:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:33:50 2025 by rpki-client