Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/21a07ea5-8cd7-3b9e-a091-c8fcc755015d.roa
File:                     21a07ea5-8cd7-3b9e-a091-c8fcc755015d.roa (raw, json)
Hash identifier:          /8iEvK5y+ohmmxkFEUcHGEeUTyDpCQ6adsdvCPyppgI=
Subject key identifier:   C9:0C:40:C2:4B:12:73:6B:5E:2C:C5:D5:A9:46:C8:6A:90:C4:AE:9E
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328584789C4089FC52F8DF446E09980
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/21a07ea5-8cd7-3b9e-a091-c8fcc755015d.roa
Signing time:             Mon 14 Oct 2024 11:40:41 +0000
ROA not before:           Mon 14 Oct 2024 11:40:41 +0000
ROA not after:            Sun 12 Jan 2025 12:40:41 +0000
asID:                     147194
IP address blocks:        103.21.52.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:c4:08:9f:c5:2f:8d:f4:46:e0:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Oct 14 11:40:41 2024 GMT
            Not After : Jan 12 12:40:41 2025 GMT
        Subject: CN=fd9bdd31-606a-4bcd-8451-d3a8f6c7977d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1c:f5:2e:af:e0:07:bb:ca:63:f3:93:f5:c7:
                    1c:a7:4e:8a:77:8b:6f:63:cf:6f:be:17:a3:e7:d6:
                    f4:bd:2f:fc:44:a7:da:ee:55:d7:c1:c6:2c:6c:0b:
                    34:52:75:4c:33:af:44:ab:f7:0e:c5:66:c3:e1:58:
                    62:e1:7b:e6:d7:de:ef:08:19:cb:f7:ff:b5:75:ff:
                    4c:3c:80:7b:bd:68:d1:2e:3f:44:23:f6:7a:b4:31:
                    d6:06:d2:b6:8e:f1:79:fa:31:15:2f:56:19:35:82:
                    e7:92:92:f0:d2:75:8f:69:39:00:cd:78:f7:bd:e5:
                    0d:04:ff:07:b1:79:09:10:27:e8:e0:44:ec:aa:32:
                    0b:b4:91:33:e5:18:cd:41:6a:4c:87:38:e0:86:7c:
                    e3:17:bc:2b:96:5b:36:76:52:73:2e:a1:0c:b9:9d:
                    7a:8e:5c:d9:0b:34:3d:b9:05:c2:21:6e:62:ae:5a:
                    55:53:c1:f1:37:4d:7f:5b:39:3f:ac:b7:e8:4f:12:
                    fa:cb:de:1b:f4:15:eb:16:28:39:9c:af:ac:ac:13:
                    53:02:fa:47:26:19:75:57:1a:dd:c9:2e:07:74:1d:
                    f7:8e:73:b2:78:b6:3c:a1:62:07:a8:32:24:c6:6c:
                    16:d0:ce:dc:e0:b6:7d:e9:e2:a0:9e:81:ce:9c:b9:
                    79:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0C:40:C2:4B:12:73:6B:5E:2C:C5:D5:A9:46:C8:6A:90:C4:AE:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/21a07ea5-8cd7-3b9e-a091-c8fcc755015d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:d6:f1:0b:13:a5:a6:b5:26:1b:ae:f2:f8:03:ee:0c:a5:
         04:3f:e1:c1:d6:47:d4:22:c2:04:ca:73:e4:95:14:f7:dc:46:
         67:03:6d:4f:40:73:4d:23:62:49:1b:2f:2e:25:91:c3:cf:43:
         56:4c:17:1b:54:4b:b8:9b:92:b6:af:6a:87:32:f0:4f:3d:d3:
         2c:e5:9e:29:f1:b2:d4:8a:40:39:c8:dd:7a:a8:8b:fa:74:81:
         e9:f6:9b:40:da:31:df:01:ee:17:80:ab:11:5a:00:29:24:87:
         90:95:c4:8b:18:c9:ad:03:eb:5a:74:0a:79:af:cf:24:d8:dc:
         d8:90:77:ee:34:dd:2e:f0:59:83:b7:6f:9a:41:b4:87:14:4f:
         c3:9e:7b:0a:76:02:78:6a:27:fc:f5:b2:f6:c9:17:55:81:ae:
         88:a1:c0:ad:38:72:5e:91:bf:2c:f3:01:5c:63:8f:a0:6c:58:
         73:6b:3d:ff:80:a5:07:b8:d8:40:25:22:8b:6f:16:34:d9:ef:
         6b:26:d3:5c:db:dc:99:97:d2:20:96:5b:19:5a:b6:63:4d:a8:
         fc:21:d7:98:63:9f:63:33:fc:75:82:4d:a8:3e:7d:19:eb:f0:
         6f:3c:7d:c9:e5:80:ae:06:9f:de:8f:ec:36:49:3d:aa:da:31:
         46:05:34:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:39 2025 by rpki-client