Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/93ad6f5e-a300-3e2e-b675-3f690e3ecb67.roa
File:                     93ad6f5e-a300-3e2e-b675-3f690e3ecb67.roa (raw, json)
Hash identifier:          +OMFni52v3G2BYURlEAfYHuyuPPeQrd5gX8MoIu4V9c=
Subject key identifier:   E7:DA:6E:F6:D3:0A:FF:B3:9F:8A:36:C9:D6:E6:51:48:00:E7:25:D5
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285845BC53265A1471DEADFE693C00
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/93ad6f5e-a300-3e2e-b675-3f690e3ecb67.roa
Signing time:             Thu 02 May 2024 04:45:35 +0000
ROA not before:           Thu 02 May 2024 04:45:35 +0000
ROA not after:            Wed 31 Jul 2024 04:45:35 +0000
asID:                     149197
IP address blocks:        103.49.152.0/24 maxlen: 24
                          103.228.85.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:bc:53:26:5a:14:71:de:ad:fe:69:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: May  2 04:45:35 2024 GMT
            Not After : Jul 31 04:45:35 2024 GMT
        Subject: CN=3e3c799a-ceef-464f-bd8e-1a265ec31694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9c:7f:4f:d2:22:38:34:42:df:26:42:43:07:
                    16:e4:00:92:ed:83:ad:3d:4f:93:4e:9d:16:40:4c:
                    94:db:30:31:d7:c1:b1:c2:f5:5d:ed:90:e9:e0:21:
                    87:c6:2a:f6:67:a6:ca:a7:8e:fe:a6:73:de:b2:ca:
                    35:f2:2f:fb:f6:d0:46:6d:85:26:a2:a0:e0:aa:31:
                    be:15:21:ed:10:c9:13:1c:e1:78:ac:fb:c6:10:64:
                    32:fb:b2:2e:b2:66:04:cd:d2:b8:11:a1:a3:90:ae:
                    94:11:45:9b:72:bf:c5:f6:4c:0a:10:c6:e9:1b:77:
                    a0:13:ff:ee:42:41:80:bf:8b:eb:36:b5:99:0c:d1:
                    7e:e9:71:16:5e:28:e6:ca:51:3b:9a:e6:d7:ee:0a:
                    29:39:1b:94:d1:2e:ce:50:b3:b1:df:fa:f0:c7:ad:
                    f9:5f:c6:89:49:a8:9c:ca:6e:da:41:47:61:8b:47:
                    2e:9e:58:a3:2a:0f:86:02:3a:50:62:fb:f0:be:fd:
                    7a:13:0e:33:65:58:10:f6:40:12:5f:5f:48:d6:52:
                    ea:45:84:7d:bb:0f:34:51:93:60:59:37:05:d2:ae:
                    a2:a8:96:ac:44:5b:f6:e5:fd:87:26:d5:e5:36:fe:
                    fb:b6:ba:e4:22:bb:a6:ea:28:4f:f3:ee:2f:41:68:
                    1d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DA:6E:F6:D3:0A:FF:B3:9F:8A:36:C9:D6:E6:51:48:00:E7:25:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/93ad6f5e-a300-3e2e-b675-3f690e3ecb67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.152.0/24
                  103.228.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:42:2d:f3:6a:9e:09:a3:4c:a5:86:fc:d8:38:32:14:07:38:
         b7:a7:f7:7e:9e:48:92:79:b7:95:2e:c5:8b:54:04:d2:8f:58:
         eb:d9:be:fa:a6:3e:f7:48:9e:29:79:e7:20:9c:36:50:bd:4f:
         dc:93:3d:70:dd:7c:d6:3c:25:5d:eb:5c:5c:b1:77:04:38:41:
         0d:bd:66:63:8e:68:20:c3:6a:af:3c:9e:ad:13:b7:c1:b7:01:
         57:9a:6e:1a:ab:02:2c:a8:98:b5:f0:fc:9d:63:f8:fc:21:50:
         93:59:f0:b6:1a:50:f0:23:35:64:3a:01:c9:08:03:02:a6:65:
         f4:3c:db:e8:bb:9f:aa:39:61:da:05:8a:f8:9d:5d:5b:44:a1:
         74:3e:ef:f6:64:da:b0:ab:15:47:54:43:92:ef:db:19:73:05:
         24:24:df:d0:10:3d:33:45:8d:da:24:0f:e9:9c:42:9b:da:70:
         87:d7:38:e7:f6:ba:5b:ed:2f:5d:3c:63:21:6a:4a:6b:41:63:
         d0:1c:19:27:84:25:f0:7f:96:90:88:3b:b0:41:02:24:56:d1:
         8b:89:69:28:ec:e0:78:0f:5b:e0:f2:8e:36:bf:f1:44:0b:04:
         52:eb:f8:e6:f0:98:ff:d4:a0:88:44:c1:dd:ad:28:4f:b2:a4:
         a4:30:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:04 2025 by rpki-client