Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/90d3eeae-012f-3ad8-8fa5-7b851c6745b6.roa
File:                     90d3eeae-012f-3ad8-8fa5-7b851c6745b6.roa (raw, json)
Hash identifier:          TkeqYTwehqWKii5yFjML7aBzFhXrIMvuttYLppp770g=
Subject key identifier:   8B:28:25:BC:C5:27:FA:C7:CA:8C:D6:27:03:6B:08:43:51:8A:47:71
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F432858476A93550E5D447057F199AA80
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/90d3eeae-012f-3ad8-8fa5-7b851c6745b6.roa
Signing time:             Thu 03 Oct 2024 07:32:29 +0000
ROA not before:           Thu 03 Oct 2024 07:32:29 +0000
ROA not after:            Wed 01 Jan 2025 08:32:29 +0000
asID:                     149197
IP address blocks:        139.5.21.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6a:93:55:0e:5d:44:70:57:f1:99:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Oct  3 07:32:29 2024 GMT
            Not After : Jan  1 08:32:29 2025 GMT
        Subject: CN=52ba036f-5d7c-4aa1-a837-1f0169a33813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:48:e9:5e:2a:a9:dd:df:7a:e9:cf:88:c5:8e:
                    cf:50:94:27:d5:06:89:50:b7:bf:54:db:b7:90:cd:
                    a7:24:f7:35:6f:7d:5b:4c:88:e2:b1:71:48:5f:12:
                    2a:da:6f:62:7e:69:46:2a:bd:aa:a9:73:e2:c1:45:
                    91:20:d7:76:bc:c4:66:1c:d2:5e:03:f9:81:37:f3:
                    83:78:dc:dd:5e:b9:16:57:6c:70:7b:a5:a1:5f:d1:
                    e0:44:bf:2b:d1:e2:8b:2a:42:45:7f:db:63:7c:0e:
                    9c:e4:ff:0c:34:56:b0:5e:11:87:2e:29:24:8a:e9:
                    6f:20:c6:82:54:e3:12:6c:4b:e4:e7:6f:ff:31:a2:
                    53:8c:0c:0b:48:52:3e:ab:eb:d7:7f:58:52:01:4c:
                    8e:50:9d:3e:4b:b7:a1:c2:92:8b:b3:95:50:78:f6:
                    48:95:57:b8:ff:98:63:b0:5c:b3:d5:16:cf:ff:bd:
                    9a:db:05:8d:0e:dd:2b:e9:f7:87:3b:ea:fd:7c:e4:
                    e2:55:45:dd:d9:93:a7:71:f6:4f:0d:b0:30:3f:1a:
                    70:6b:bd:ab:20:24:cf:74:dd:0c:51:94:f6:f1:a6:
                    55:b4:2c:ae:f6:64:c8:b1:88:77:96:3d:14:e3:6c:
                    a8:de:a0:97:c4:0e:85:cd:17:c3:71:a3:be:e2:d4:
                    e8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:28:25:BC:C5:27:FA:C7:CA:8C:D6:27:03:6B:08:43:51:8A:47:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/90d3eeae-012f-3ad8-8fa5-7b851c6745b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.5.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:1a:e8:ea:fd:5a:89:fb:54:93:be:75:74:34:22:9c:b9:f4:
         49:8a:f4:c6:bc:6c:ca:e1:1d:16:71:8e:38:7c:ba:54:50:54:
         c6:20:d8:9b:7b:68:ca:28:43:e7:e2:07:8a:e8:8a:8e:4b:c8:
         b5:9e:ab:33:54:dc:d4:4e:ce:cc:ae:2b:a7:f3:1a:2b:8a:32:
         ff:9a:15:e3:db:f8:94:23:be:ae:6e:00:59:9e:08:67:a7:89:
         86:e1:37:49:bb:7c:8b:6c:26:2a:14:86:c4:a1:d8:51:4b:72:
         ef:05:55:54:da:58:15:aa:aa:2b:c0:52:09:ee:8b:64:3a:b0:
         f7:86:2f:d3:07:87:a1:59:b4:2c:cb:25:41:8d:d5:e4:80:21:
         f7:42:55:85:8b:12:02:26:78:53:ad:ec:a8:32:cf:a4:43:47:
         a8:40:4c:a0:61:16:bd:0a:17:f8:20:66:ca:0d:92:90:d5:72:
         d3:d3:30:21:8c:db:16:ba:7e:0d:75:f5:26:f4:7a:85:98:6b:
         a6:0f:0d:dc:cd:d0:9b:1c:e7:56:f3:45:ea:fd:e2:20:7f:26:
         7b:d0:62:a5:16:a9:7c:f5:39:a0:ed:ff:93:03:5c:43:d2:77:
         bd:b9:55:a1:9c:d2:6d:eb:62:d5:8b:0c:1c:ba:3d:ea:4f:50:
         18:37:1c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:02 2025 by rpki-client