Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/07601200-5f55-3971-aa74-1f7dab8ed25e.roa
File:                     07601200-5f55-3971-aa74-1f7dab8ed25e.roa (raw, json)
Hash identifier:          Q3mPbfQVcHWEDaY88Y/Su/V9qUUE8KQutDXPbTdKaU0=
Subject key identifier:   E0:E9:0C:AE:D1:89:CF:E4:AA:44:1A:33:8B:A3:28:12:8A:D9:C8:AA
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285847D76AF0BAD0DC6200EC51C780
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/07601200-5f55-3971-aa74-1f7dab8ed25e.roa
Signing time:             Mon 11 Nov 2024 07:14:13 +0000
ROA not before:           Mon 11 Nov 2024 07:14:13 +0000
ROA not after:            Sun 09 Feb 2025 07:14:13 +0000
asID:                     13767
IP address blocks:        103.49.153.0/24 maxlen: 24
                          103.49.154.0/24 maxlen: 24
                          103.216.0.0/24 maxlen: 24
                          103.216.2.0/24 maxlen: 24
                          103.251.25.0/24 maxlen: 24
                          139.5.20.0/24 maxlen: 24
                          139.5.21.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d7:6a:f0:ba:d0:dc:62:00:ec:51:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Nov 11 07:14:13 2024 GMT
            Not After : Feb  9 07:14:13 2025 GMT
        Subject: CN=4384a6cd-9a4b-426f-938e-41b862ffee53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:11:b6:c9:48:6d:f8:0e:b4:cb:36:57:7b:0f:
                    cf:4e:ac:6b:6c:96:b2:39:d9:c7:ab:0c:ed:5e:ae:
                    c3:c4:f0:c8:f7:1d:f4:b4:aa:2d:fc:4b:5a:a8:2a:
                    96:2c:8f:79:7e:fe:9e:44:e8:2a:49:db:28:71:ad:
                    16:4d:f7:33:96:39:29:c2:4e:c5:26:9d:ff:19:2d:
                    75:0c:2a:7b:eb:95:13:be:d9:a5:56:f5:b2:49:ba:
                    a4:7e:2c:54:2b:2a:2f:96:64:cc:46:7d:6a:dc:85:
                    a0:f1:98:55:0c:e6:80:09:15:83:94:30:7e:ea:cb:
                    70:62:59:f8:9f:2b:91:fc:25:c4:63:c0:0f:d6:8a:
                    78:89:6f:1d:47:cd:86:df:d1:eb:04:1f:f5:7a:2e:
                    71:05:52:74:87:9a:39:90:68:7f:e8:05:d2:18:d2:
                    63:43:0c:55:d5:dc:c5:cd:e0:6c:3c:bc:6c:d1:2a:
                    a0:89:48:78:b5:6f:c1:2e:cd:02:00:6a:28:fe:31:
                    07:ce:ea:c3:3b:14:07:d2:69:04:36:b5:3e:86:c3:
                    14:06:74:89:51:a3:ff:84:3f:b8:05:a4:b7:22:06:
                    62:b1:b4:6b:8f:f1:50:26:6a:1f:24:d7:06:7b:f5:
                    c3:e5:1d:18:39:e2:ff:12:cc:dd:7c:9a:90:a9:8d:
                    ef:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E9:0C:AE:D1:89:CF:E4:AA:44:1A:33:8B:A3:28:12:8A:D9:C8:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/07601200-5f55-3971-aa74-1f7dab8ed25e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.153.0-103.49.154.255
                  103.216.0.0/24
                  103.216.2.0/24
                  103.251.25.0/24
                  139.5.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ae:fd:d7:c8:36:18:24:e1:1e:c4:01:ea:60:fb:f0:3a:f4:
         e7:45:75:72:53:9a:cb:36:15:04:df:1d:32:92:6a:61:d1:fd:
         c6:1a:16:1f:00:92:e7:ce:73:48:34:6c:5b:67:0a:ca:df:5e:
         5b:42:77:e2:ca:42:1e:d6:20:e3:21:7e:fb:54:e3:17:8b:5d:
         10:ef:df:35:a6:64:8d:fc:17:a7:55:ff:57:58:90:b5:d3:73:
         4f:26:67:86:96:51:32:cf:27:65:ab:18:3c:8b:a7:54:3a:1a:
         9d:af:c3:b2:3c:c1:fe:ef:88:ac:5c:05:dd:8e:7b:6b:37:d0:
         ae:0f:2b:e5:11:5c:52:69:11:ba:8f:46:3e:7f:cd:f7:26:10:
         36:f4:f3:a9:da:21:cc:4b:bf:32:3a:52:bf:4a:96:65:d0:ac:
         a0:fb:b8:a6:61:2f:ae:ad:6f:39:11:2b:db:34:25:cb:81:22:
         74:84:3a:7f:3a:dc:6f:f3:60:47:63:b0:08:48:14:55:76:2a:
         71:8c:f0:86:c3:14:5c:6f:ec:3e:7c:ba:b6:04:57:0e:8d:3f:
         45:7c:f5:5a:93:d1:9f:e1:82:37:db:ad:17:90:68:af:ff:f5:
         bf:a1:09:cf:67:88:9c:ac:7a:93:9e:ef:b7:27:17:64:4f:5f:
         0b:d7:bf:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:10 2025 by rpki-client