Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/2c3c6fb9-2083-328f-b76e-7517c1cd8db8.roa
File:                     2c3c6fb9-2083-328f-b76e-7517c1cd8db8.roa (raw, json)
Hash identifier:          46kszImLy4cPzDfihE4kAxlwNivGUbL3FSTAjCjNPeg=
Subject key identifier:   7F:A4:F2:73:5F:69:E9:00:7D:FC:CF:60:C1:89:F1:2E:E2:31:D7:04
Certificate issuer:       /CN=c5188e20-1297-4b61-a494-1ca0036777f2
Certificate serial:       010D0C9F43285847B1015D48859DDDB0CC5978C0
Authority key identifier: B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/2c3c6fb9-2083-328f-b76e-7517c1cd8db8.roa
Signing time:             Mon 28 Oct 2024 13:00:40 +0000
ROA not before:           Mon 28 Oct 2024 13:00:40 +0000
ROA not after:            Sun 26 Jan 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        74.117.19.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b1:01:5d:48:85:9d:dd:b0:cc:59:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5188e20-1297-4b61-a494-1ca0036777f2
        Validity
            Not Before: Oct 28 13:00:40 2024 GMT
            Not After : Jan 26 14:00:40 2025 GMT
        Subject: CN=9067cc73-f6a8-4db2-9e63-f04a6df32e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:7e:7c:c0:3a:76:2f:67:4d:53:46:00:2c:
                    69:04:2f:b8:dc:83:18:9f:47:eb:98:d8:c6:9f:d8:
                    63:1d:3e:7e:c4:1a:69:52:85:d5:f4:e5:3f:64:dc:
                    cd:95:42:30:3a:a7:16:5f:9a:48:40:1f:d3:82:7e:
                    ae:05:f1:16:fb:3e:29:ff:7c:b1:24:1c:c2:96:17:
                    7f:3d:b5:89:42:4a:bf:6b:94:bf:e9:f5:2f:20:fe:
                    d5:e2:25:8e:1f:b7:f6:52:25:0c:b0:bb:12:1b:25:
                    da:49:c6:ba:0f:ec:8c:eb:1a:12:a1:4d:d9:70:7f:
                    80:bf:8c:15:0a:ae:ff:5e:32:2e:1b:1e:be:33:66:
                    b3:35:c1:4d:50:c1:c1:fd:83:bd:7a:47:96:26:cf:
                    8e:9a:11:ea:e3:78:d1:a7:76:72:de:e4:08:70:fb:
                    0b:60:b5:8f:53:f6:3e:69:6d:8e:c0:df:61:45:be:
                    24:81:fd:77:9f:4d:95:92:73:1f:85:89:e5:49:d4:
                    2a:5e:01:40:fe:cc:76:f3:08:1d:f7:76:2c:73:0f:
                    a1:be:0c:56:20:9c:f7:df:42:80:39:44:0c:5a:80:
                    44:b7:c8:f5:b9:cc:d6:62:8a:10:ba:2b:78:79:44:
                    36:91:72:a5:06:e2:fb:54:07:dc:8e:d0:01:3a:63:
                    89:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A4:F2:73:5F:69:E9:00:7D:FC:CF:60:C1:89:F1:2E:E2:31:D7:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/2c3c6fb9-2083-328f-b76e-7517c1cd8db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2/c5188e20-1297-4b61-a494-1ca0036777f2.crl

            X509v3 Authority Key Identifier:
                keyid:B9:8C:A3:1D:F9:15:C7:D8:15:12:EB:2B:25:75:D3:E6:C4:6E:97:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c5188e20-1297-4b61-a494-1ca0036777f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:73:c9:eb:56:6b:d3:b1:c7:ef:63:e7:b5:cc:85:0d:70:a5:
         3f:02:a6:25:c2:78:1b:a5:c1:2a:cd:ad:18:78:07:74:a2:65:
         58:19:13:76:da:c1:50:25:9d:3e:6d:b2:71:5c:f6:b0:5c:c9:
         8d:0f:08:d7:57:7b:8e:a0:01:39:27:22:77:98:f6:ff:a7:35:
         01:af:40:3a:c7:6f:2b:1c:b4:d4:5b:22:f2:53:9f:bf:5f:95:
         a5:a9:b2:da:47:35:0e:b2:5e:2c:77:46:d1:f2:45:6e:23:1f:
         6c:c9:fd:11:a5:72:60:72:a0:f2:61:b1:bf:92:e2:a6:74:6c:
         ac:bc:21:ac:d0:ac:13:38:a6:2b:e0:4d:71:3a:0f:75:1f:ce:
         12:04:40:31:50:90:67:51:24:ff:58:53:20:91:fe:bc:60:ff:
         bd:cf:bc:47:24:05:2d:12:27:34:45:cf:cd:2a:b7:89:5e:02:
         1e:60:d3:20:27:4f:2a:63:3a:cc:e9:03:2a:04:da:0c:ae:a9:
         d6:1e:62:8b:24:2b:fe:4a:5d:c4:a2:19:e9:da:7a:34:4b:c6:
         13:45:43:9d:95:21:80:27:93:a7:3b:f2:a1:56:68:e6:57:3a:
         e8:79:4d:8d:87:f0:e0:9a:17:e0:87:1e:79:d8:f5:fc:54:1f:
         08:c2:fa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:55 2025 by rpki-client