Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/345ecb7c-6ad4-36a3-a89b-55038e0c0a20.roa
File:                     345ecb7c-6ad4-36a3-a89b-55038e0c0a20.roa (raw, json)
Hash identifier:          XWKc79GFE5wCkU16/sbtnkhbkgFW2kLRH1DWy1Gf7B8=
Subject key identifier:   5C:7C:F0:38:52:84:15:7E:E4:7B:DE:CB:A0:B7:5A:32:E4:C4:29:EE
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F432858472B0083F509D4C58E3FE0E680
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/345ecb7c-6ad4-36a3-a89b-55038e0c0a20.roa
Signing time:             Tue 10 Sep 2024 13:00:40 +0000
ROA not before:           Tue 10 Sep 2024 13:00:40 +0000
ROA not after:            Mon 09 Dec 2024 14:00:40 +0000
asID:                     7018
IP address blocks:        116.206.96.0/24 maxlen: 24
                          116.206.99.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:00:83:f5:09:d4:c5:8e:3f:e0:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Sep 10 13:00:40 2024 GMT
            Not After : Dec  9 14:00:40 2024 GMT
        Subject: CN=dac4e153-173d-4871-8d81-7c7f0d0df7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:2c:77:54:5b:92:90:bb:e4:7f:42:d6:43:
                    14:e6:95:50:fd:7b:fb:f5:40:ce:5c:da:36:5a:e4:
                    d1:de:b4:0d:bf:10:16:cb:48:48:f0:74:a6:48:b7:
                    b6:ee:97:bf:5b:59:1f:c5:8f:8e:97:23:bd:d5:5f:
                    82:29:97:80:9d:9a:79:f3:19:c5:b0:f7:e6:59:85:
                    37:28:60:f2:9a:66:7e:26:ae:13:88:dd:79:57:84:
                    32:73:61:6f:82:b1:f4:06:4d:3c:51:eb:6b:c4:f0:
                    9c:00:a9:0f:0f:ea:b0:dc:6f:92:ac:7a:5b:32:c8:
                    62:c8:bc:0b:d3:c6:8e:66:28:26:c5:cc:03:6c:75:
                    e0:5d:de:fb:b3:5d:b2:e9:90:2c:38:c8:12:63:5c:
                    a1:a9:3c:48:de:28:0b:11:9f:16:59:68:5b:b6:1c:
                    65:d2:e3:fd:57:53:7a:f1:02:37:b3:75:3b:5e:fd:
                    ad:59:db:8c:ec:27:43:e7:d2:dd:83:52:7c:6d:8d:
                    01:8a:45:f3:30:5a:52:1f:21:11:e4:ca:f7:10:17:
                    22:ae:a0:d1:b5:d6:b2:ff:a1:aa:f3:1e:ee:5a:dd:
                    c2:ec:bf:09:d5:58:86:c2:f7:2b:89:3c:33:b3:7a:
                    f6:86:3f:39:74:ce:56:e0:be:5a:c0:09:83:ba:b9:
                    5f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7C:F0:38:52:84:15:7E:E4:7B:DE:CB:A0:B7:5A:32:E4:C4:29:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/345ecb7c-6ad4-36a3-a89b-55038e0c0a20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.96.0/24
                  116.206.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:05:df:49:76:5b:fe:2d:f2:0a:b1:da:c3:7e:2a:b8:68:b7:
         0e:c2:7b:ce:71:60:54:fe:7a:c2:b0:2c:3e:9f:b9:33:ea:b7:
         90:df:d1:85:aa:00:d3:6d:d9:d1:24:11:6f:02:76:a8:6c:2a:
         a2:d2:b4:ac:f0:ac:ca:4d:21:3b:5c:88:f7:30:bc:c4:05:74:
         66:e8:7a:81:a0:29:40:42:fe:46:b4:07:46:60:8e:57:37:21:
         41:62:8c:11:ff:ee:b0:e5:1d:97:eb:00:f2:ce:bb:ce:cf:55:
         e9:b4:86:37:99:db:60:9a:c8:d6:92:f6:a0:85:79:61:9f:71:
         82:c8:5e:16:cf:30:e0:c3:2b:94:d1:82:a3:81:d4:34:ff:97:
         eb:6c:6f:93:ec:29:46:af:bb:1f:4c:26:a9:3e:18:00:4b:7e:
         1a:1b:28:4d:85:f2:45:0d:27:24:db:73:f8:c3:3e:0b:f7:77:
         64:36:51:8f:27:eb:02:d3:48:67:29:c5:8f:97:c2:0c:08:25:
         c9:8d:b4:67:15:8c:23:da:c0:56:a0:27:6d:9d:ba:7d:f9:ee:
         96:1f:c3:a6:4f:dd:1e:72:ca:18:6e:62:79:d0:df:13:77:80:
         e0:68:be:d7:68:5a:61:63:de:22:a9:bf:ee:ac:b9:0b:82:55:
         a9:91:c3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:18:04 2025 by rpki-client