Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/134a952c-d343-37df-9976-1aac383a8dab.roa
File:                     134a952c-d343-37df-9976-1aac383a8dab.roa (raw, json)
Hash identifier:          Li5E1yNiEFMvMDH3xRRas0J7xlA9FA2DLzDe9s/ZlxQ=
Subject key identifier:   0E:78:9A:7F:E2:84:C2:35:D4:51:B2:34:23:8F:B2:E4:A4:43:4B:7D
Certificate issuer:       /CN=e7060a03-da54-4766-9b77-667ebbb66ffe
Certificate serial:       010D0C9F432858476C9E74F8B01C3C0D454358C0
Authority key identifier: BD:2E:98:F5:D4:36:9B:81:AB:83:21:F0:51:BF:9B:EF:BA:EC:45:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/134a952c-d343-37df-9976-1aac383a8dab.roa
Signing time:             Fri 04 Oct 2024 01:06:31 +0000
ROA not before:           Fri 04 Oct 2024 01:06:31 +0000
ROA not after:            Thu 02 Jan 2025 02:06:31 +0000
asID:                     399188
IP address blocks:        23.131.208.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9e:74:f8:b0:1c:3c:0d:45:43:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7060a03-da54-4766-9b77-667ebbb66ffe
        Validity
            Not Before: Oct  4 01:06:31 2024 GMT
            Not After : Jan  2 02:06:31 2025 GMT
        Subject: CN=5dfb8721-18a6-498b-936a-51caf480b62f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:60:b8:21:01:1c:b1:d1:3e:79:f7:a7:d2:
                    77:64:49:96:8a:8b:3f:55:49:0d:7e:a1:b2:25:e1:
                    b5:3f:fe:a2:fb:8f:1e:68:d8:37:b6:6b:bd:bf:74:
                    c0:dc:ec:34:01:85:a5:b8:5a:c3:40:c3:fb:77:93:
                    17:bf:4f:36:02:92:da:e0:0c:e6:97:57:40:d1:09:
                    dc:5c:c5:14:10:af:56:e5:29:e4:c8:80:d1:50:4e:
                    63:a7:19:9a:d7:d3:50:ce:75:8a:b9:ef:37:63:80:
                    a7:f5:5a:1d:04:fe:07:55:a4:2e:ad:87:e2:e1:1c:
                    c1:82:e8:a0:1d:46:26:62:b2:a2:87:9c:2e:b8:3b:
                    c9:2e:43:85:ed:41:02:f6:ae:5e:f2:da:e5:ec:9f:
                    ac:64:c3:cc:3f:4f:08:94:8a:aa:7d:91:be:ec:5f:
                    ad:6b:5b:ad:ad:24:7d:b2:c3:26:51:5c:4b:96:f0:
                    36:5c:cb:dc:3f:7b:54:59:40:96:59:27:b3:4a:59:
                    49:d1:f7:04:0b:cc:e2:65:31:b3:2e:0b:2b:fe:16:
                    63:6c:e6:f8:17:0f:4b:5b:b9:22:07:82:05:95:7b:
                    53:49:3c:71:88:12:0d:e8:9b:58:3b:51:65:74:fa:
                    91:45:8c:0b:07:61:42:2a:b1:86:03:34:ca:86:c5:
                    c4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:78:9A:7F:E2:84:C2:35:D4:51:B2:34:23:8F:B2:E4:A4:43:4B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/134a952c-d343-37df-9976-1aac383a8dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe/e7060a03-da54-4766-9b77-667ebbb66ffe.crl

            X509v3 Authority Key Identifier:
                keyid:BD:2E:98:F5:D4:36:9B:81:AB:83:21:F0:51:BF:9B:EF:BA:EC:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7060a03-da54-4766-9b77-667ebbb66ffe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:36:26:34:0f:af:57:05:57:ec:94:21:04:26:da:ca:a1:f3:
         53:a1:a6:9d:5d:26:e4:8c:a5:42:20:63:82:12:83:de:c1:38:
         b5:12:45:8a:57:d5:6a:14:da:a8:4d:61:8d:3a:47:a1:cc:29:
         d2:55:b0:66:07:69:12:17:ed:b2:e9:a4:9e:b3:13:47:94:de:
         a7:75:5e:de:f7:1c:60:3a:5e:2c:c6:65:1a:42:95:7d:32:86:
         43:c2:38:82:6b:df:1b:db:c3:0a:af:9a:49:ec:45:c0:bd:d4:
         b0:2d:68:b3:db:99:ad:81:12:e7:95:1a:3f:35:a6:d3:85:29:
         ce:2b:a6:6a:27:40:22:aa:aa:6d:4d:80:b1:94:2f:3a:58:3c:
         86:ed:ab:e8:9c:32:f1:02:31:bc:a3:ca:3e:cc:1e:e2:9f:5b:
         d0:16:6d:0e:d6:22:a9:08:f0:8b:57:1f:0e:3c:86:1c:7f:8e:
         4d:4f:6f:6c:57:83:d5:09:17:33:ee:83:14:c9:e2:08:c5:0d:
         51:69:cc:64:82:cb:e0:0f:d3:1c:ed:72:8f:a7:d1:52:2b:45:
         16:9d:aa:0b:f1:30:4f:88:ac:1f:18:8d:00:90:60:66:d8:f7:
         d1:ca:29:77:75:df:dc:b8:d8:56:b8:52:c2:b4:11:4f:18:21:
         76:77:c1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:35 2025 by rpki-client