Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/89d369c9-c2a3-390e-932e-b7bd10c23ebd.roa
File:                     89d369c9-c2a3-390e-932e-b7bd10c23ebd.roa (raw, json)
Hash identifier:          QqTS+4VIHpMOiA3NHBN1pZAp1r9VEkIOYbbeux4Ej3E=
Subject key identifier:   25:E3:3E:24:3F:B7:32:4D:F1:CE:BD:F0:26:2B:22:64:4F:3E:01:83
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328584709805567737BB3B728764200
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/89d369c9-c2a3-390e-932e-b7bd10c23ebd.roa
Signing time:             Thu 29 Aug 2024 13:00:40 +0000
ROA not before:           Thu 29 Aug 2024 13:00:40 +0000
ROA not after:            Wed 27 Nov 2024 14:00:40 +0000
asID:                     28753
IP address blocks:        45.117.55.0/24 maxlen: 24
                          45.123.146.0/24 maxlen: 24
                          45.123.147.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:09:80:55:67:73:7b:b3:b7:28:76:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Aug 29 13:00:40 2024 GMT
            Not After : Nov 27 14:00:40 2024 GMT
        Subject: CN=3121812f-ea38-40b5-8ceb-5dc4ce3e1e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:0a:c7:4c:e3:4e:70:09:c8:2a:13:9d:12:
                    fe:dd:72:7e:78:19:16:53:13:b3:d6:99:c8:f2:08:
                    40:1b:51:2e:dc:51:c7:c3:a8:51:28:dd:bb:fa:2f:
                    8a:14:19:ce:39:9f:bd:4d:d1:2a:73:28:29:bf:75:
                    d1:1d:6f:c8:d6:8f:32:38:d5:ed:2e:3e:f3:d5:0f:
                    b2:29:54:d4:98:16:4a:90:ad:e9:3e:90:bb:bd:20:
                    ab:c7:3a:30:c4:ae:6d:5f:65:22:c5:49:17:fe:ba:
                    6e:23:57:3e:b0:b5:42:ad:62:83:5b:00:66:8b:11:
                    be:4d:e7:4f:ba:05:7a:39:9b:ea:8e:63:f8:dd:07:
                    7f:6d:ca:fa:42:98:d1:8e:57:da:51:10:93:ef:dd:
                    aa:ca:d9:67:02:54:ac:49:40:cd:3a:cd:c2:1d:1f:
                    98:28:bf:cf:30:ff:fa:ac:97:85:b5:a2:f5:c4:da:
                    b8:41:d6:b0:bc:7b:93:45:5a:62:a8:d7:34:02:5f:
                    9c:22:c7:eb:c2:02:ab:a1:6b:b9:e8:9c:7d:51:49:
                    79:a3:8d:66:c1:10:13:ae:59:d4:ef:36:95:0b:e9:
                    54:55:08:70:98:b4:6d:9d:0c:b1:d3:37:3a:a0:a8:
                    b5:d7:4b:88:95:99:a2:8a:fe:e4:c6:dd:cc:ea:34:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E3:3E:24:3F:B7:32:4D:F1:CE:BD:F0:26:2B:22:64:4F:3E:01:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/89d369c9-c2a3-390e-932e-b7bd10c23ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.55.0/24
                  45.123.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:43:1f:6e:ba:19:0b:b8:5e:a7:a9:0b:60:5f:8c:d8:19:
         48:a5:09:0a:a6:a1:36:b8:24:89:e4:30:1e:4d:9d:8e:3f:d7:
         18:b5:24:a1:74:a5:f9:68:3a:2f:bb:31:5a:3a:8c:b4:df:f9:
         e5:ba:be:0b:1c:e5:a3:f8:a2:b5:17:4b:6f:a7:36:70:12:34:
         8f:ee:cf:e1:20:f8:a7:07:d2:89:a1:af:c7:a6:7b:2b:00:c4:
         a1:36:18:ed:27:c2:99:59:fb:ba:7b:19:d0:2a:05:28:9d:e5:
         d1:b6:95:de:e3:a0:a1:94:c9:00:29:b5:e2:0e:60:42:af:b2:
         ee:87:9d:1f:24:cc:4e:22:42:a4:fe:9b:86:5a:2a:86:f0:c4:
         35:de:88:7c:45:13:05:d5:cd:2b:92:59:a3:dc:7f:ec:28:6c:
         5f:59:fc:57:84:b2:49:ba:fd:ba:b0:d9:f4:d3:ab:00:6f:7e:
         19:fd:ad:99:9c:43:8e:08:14:48:a1:29:80:ed:92:75:70:f1:
         98:4f:95:af:de:53:a5:6b:43:ae:03:17:8a:34:ae:4a:b6:2b:
         99:64:fe:27:59:04:d0:af:9f:61:5e:ed:bc:cc:34:14:81:10:
         3b:78:02:1d:8a:bb:17:95:46:07:66:ab:58:04:01:eb:ae:81:
         e5:2e:64:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:44 2025 by rpki-client