Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3e2765d4-b3b7-3c7d-ac3c-4f1c44db24af.roa
File:                     3e2765d4-b3b7-3c7d-ac3c-4f1c44db24af.roa (raw, json)
Hash identifier:          0Jjt1R2lJjp7/jKG9uZbvuGBSAaOaXbVxjsBiTTSgRg=
Subject key identifier:   A7:82:89:1B:9D:E8:FD:C8:A5:65:3A:AF:31:E0:64:2D:57:E5:3F:E5
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285847AA61D27B1C443973826DD9E0
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3e2765d4-b3b7-3c7d-ac3c-4f1c44db24af.roa
Signing time:             Sat 26 Oct 2024 04:04:28 +0000
ROA not before:           Sat 26 Oct 2024 04:04:28 +0000
ROA not after:            Fri 24 Jan 2025 05:04:28 +0000
asID:                     16509
IP address blocks:        163.53.214.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:aa:61:d2:7b:1c:44:39:73:82:6d:d9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Oct 26 04:04:28 2024 GMT
            Not After : Jan 24 05:04:28 2025 GMT
        Subject: CN=032086b6-8eef-4809-825e-b054b994c515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9f:6a:b7:b4:6e:2b:a0:78:be:a2:c7:35:66:
                    73:89:c7:a7:65:6f:34:fe:ff:37:54:92:f7:43:1d:
                    5f:9a:94:7f:2d:83:00:e6:bc:c0:e6:ab:47:9d:18:
                    18:f7:31:b4:45:51:19:81:26:9b:c1:de:57:9e:df:
                    a0:b2:99:1e:41:3d:39:38:99:b5:e3:f6:2c:67:27:
                    77:2c:a6:3c:26:af:65:ad:a1:7d:66:6d:19:fb:3d:
                    5f:3d:bc:c8:a7:41:da:ca:7e:bf:cc:32:66:12:89:
                    14:f7:b9:e8:35:69:5a:55:18:7f:47:f4:bc:1a:41:
                    b3:22:24:01:77:af:9b:db:1a:ad:e3:4c:90:15:49:
                    62:10:aa:76:ff:38:db:7f:51:fd:e0:ea:1e:b3:fc:
                    7a:91:b9:0b:05:50:f2:a2:8a:10:92:f6:29:94:f1:
                    58:7c:b9:72:81:a6:6a:a6:51:a9:aa:d7:3c:f1:de:
                    ba:f5:7f:25:1b:dc:06:e7:cd:49:21:9f:1a:b8:41:
                    18:03:d1:b3:ed:7a:6b:01:9f:31:ee:06:02:c4:5a:
                    52:58:c8:1e:70:ba:7e:09:61:6f:a4:d0:73:d1:9d:
                    a4:69:52:96:40:67:14:ff:e2:cf:7f:e5:97:51:fd:
                    99:cb:a6:81:51:d9:7c:b8:3d:f9:e0:60:38:c8:da:
                    f7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:82:89:1B:9D:E8:FD:C8:A5:65:3A:AF:31:E0:64:2D:57:E5:3F:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/3e2765d4-b3b7-3c7d-ac3c-4f1c44db24af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:a4:1f:da:22:ec:72:df:4c:a2:a1:96:e4:28:9f:2c:0f:24:
         da:f6:97:d7:1e:31:fa:08:7d:49:39:f6:49:b9:8d:56:74:c2:
         62:f1:53:64:86:44:1d:3d:e5:c2:13:4e:79:1e:55:bc:55:f6:
         d2:a1:5d:ab:21:6f:73:1b:4a:b1:b2:df:b7:8b:d8:21:16:ab:
         9d:25:4e:b3:60:5b:8f:75:da:e2:19:f9:20:0b:db:4d:29:6b:
         6c:d7:dd:9b:01:f2:a7:d2:50:f8:3c:e0:4b:b5:08:54:67:65:
         f6:b5:ab:5e:c3:65:0f:76:1a:8a:e3:ff:30:06:6f:6b:34:b4:
         eb:4b:97:d5:cc:d8:63:e5:9b:57:1d:5a:97:db:eb:4e:18:d6:
         c3:e7:cc:c4:f1:3a:45:23:13:a5:37:0f:66:5f:b4:f9:d9:62:
         10:40:1f:9d:12:cf:d6:5f:1b:b3:e1:12:fb:1e:23:da:78:61:
         03:ff:01:57:fb:82:9e:ce:4f:6b:27:b2:9a:74:a6:46:64:f1:
         49:d8:80:fb:06:a6:02:aa:20:92:a0:56:96:95:6b:7c:97:60:
         1e:83:9f:8d:bb:95:9f:7f:66:f1:1a:d7:4b:bc:2a:6e:9d:8c:
         c0:81:b5:cd:f8:54:52:9d:1a:04:d2:5d:c2:3f:1e:db:63:55:
         42:e6:ef:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:29:00 2025 by rpki-client