Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dab2e1e5-6612-390c-a451-677aa3e24551.roa
File:                     dab2e1e5-6612-390c-a451-677aa3e24551.roa (raw, json)
Hash identifier:          x4iml+rH6Bo6kQTw1t8+l5bblYAOXcyiqcvemV/hrZI=
Subject key identifier:   D6:24:A9:D5:E7:DB:94:7B:38:2D:6E:95:5A:30:06:EF:7D:4C:5A:25
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285844CAB7E89D11D25762BBAD8D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dab2e1e5-6612-390c-a451-677aa3e24551.roa
Signing time:             Mon 05 Feb 2024 15:42:59 +0000
ROA not before:           Mon 05 Feb 2024 15:42:59 +0000
ROA not after:            Sun 05 May 2024 14:42:59 +0000
asID:                     397630
IP address blocks:        23.230.167.0/24 maxlen: 24
                          104.164.183.0/24 maxlen: 24
                          104.165.127.0/24 maxlen: 24
                          104.165.169.0/24 maxlen: 24
                          104.252.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ca:b7:e8:9d:11:d2:57:62:bb:ad:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  5 15:42:59 2024 GMT
            Not After : May  5 14:42:59 2024 GMT
        Subject: CN=4c2cd26d-7fc6-48ff-92db-b5258604c7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e2:d4:8c:df:57:6e:3b:1f:40:43:c5:d2:46:
                    80:57:43:b5:f7:9e:0a:75:4b:8b:7e:de:ab:ab:18:
                    7c:28:e1:a2:6a:1e:9a:90:57:8e:31:74:9f:91:b1:
                    03:7c:a1:a6:73:51:d7:de:1e:00:32:cd:5a:4d:a1:
                    39:69:79:6a:ca:51:25:69:d9:cd:e0:97:9d:54:cc:
                    3b:57:e0:94:fc:0e:3b:cf:85:ea:d3:a5:5c:04:f2:
                    7c:60:93:50:f3:0d:12:fc:f4:56:c7:64:69:fc:bf:
                    02:0a:8a:1e:d5:0e:ba:7f:6a:a6:65:82:d4:bb:ee:
                    6a:cf:67:23:91:ee:b2:fd:63:43:e8:ee:fd:bd:7b:
                    e6:11:f3:4d:39:98:04:6c:f9:13:5e:bc:29:ca:53:
                    7a:57:34:d6:85:dd:74:14:cc:96:51:15:8f:66:dc:
                    31:6d:c8:24:05:f8:9c:f6:5b:45:88:b1:59:fe:e6:
                    48:27:e1:70:ac:63:fd:0a:bc:e5:0e:b6:be:b4:11:
                    f8:5b:c2:d1:fc:0f:8b:bc:bc:2c:ea:21:22:e9:86:
                    74:65:7a:95:3f:ca:23:20:c4:22:06:39:b2:22:cb:
                    c8:e3:f1:08:42:3e:b5:71:1c:8e:3b:bb:a9:08:5f:
                    16:eb:c9:b6:be:91:76:2a:74:c0:ed:b8:e0:44:7e:
                    c9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:24:A9:D5:E7:DB:94:7B:38:2D:6E:95:5A:30:06:EF:7D:4C:5A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dab2e1e5-6612-390c-a451-677aa3e24551.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.167.0/24
                  104.164.183.0/24
                  104.165.127.0/24
                  104.165.169.0/24
                  104.252.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b7:2e:56:01:ec:66:26:91:af:a5:98:c6:3b:95:e3:01:1f:
         f1:bf:31:d2:92:8b:89:13:4a:57:44:bf:e4:92:f1:89:23:7f:
         a7:3d:84:ff:15:0e:60:1f:a5:a9:32:d3:0f:b7:70:97:6f:6c:
         86:7f:ec:e0:b0:7c:5d:b0:96:11:fc:8c:2f:d7:8f:27:3d:bf:
         9d:ad:bf:20:12:35:a7:41:d3:b9:d6:7b:61:41:5d:3c:da:6c:
         0b:fa:73:49:0c:e3:ee:25:9f:93:c2:df:e4:35:ad:42:bc:d2:
         79:23:64:04:33:8b:6d:a7:a9:ce:44:79:f2:74:02:af:da:df:
         fe:48:83:ad:21:f4:e0:99:9b:06:3e:6e:42:23:d6:64:cc:74:
         ed:a5:ed:35:2e:97:8e:18:26:8d:07:3c:ad:81:d2:4e:1a:ef:
         a4:98:80:10:0c:6f:b5:46:fd:b4:c1:5b:92:e4:d0:be:d4:a1:
         b0:42:03:86:a8:ab:c4:f7:e8:cf:97:cd:81:68:f0:2e:af:b2:
         28:b7:76:43:88:0b:46:7c:bb:12:70:92:3b:cf:a6:18:4a:f7:
         11:2b:93:7c:47:ac:ed:96:71:72:77:35:52:c7:05:a4:bd:d5:
         3d:af:fc:76:0b:c2:44:c2:16:c7:49:ad:34:e9:55:10:bd:86:
         0c:85:d9:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:32 2024 by rpki-client on console-fra.rpki-client.org