Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/d43fee01-b37e-335e-9cac-4935e1851bfd.roa
File:                     d43fee01-b37e-335e-9cac-4935e1851bfd.roa (raw, json)
Hash identifier:          mkg3Hqr1qHfLrJVU9hiaxGTD1FwvzF+MebGZELnEc0Q=
Subject key identifier:   7F:49:18:0E:21:72:6C:B6:BC:22:37:BA:50:6F:9E:33:12:04:4A:4F
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328584751F623F4A31B2B3E042F9C00
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/d43fee01-b37e-335e-9cac-4935e1851bfd.roa
Signing time:             Tue 24 Sep 2024 11:56:22 +0000
ROA not before:           Tue 24 Sep 2024 11:56:22 +0000
ROA not after:            Mon 23 Dec 2024 12:56:22 +0000
asID:                     149208
IP address blocks:        103.228.86.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:51:f6:23:f4:a3:1b:2b:3e:04:2f:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Sep 24 11:56:22 2024 GMT
            Not After : Dec 23 12:56:22 2024 GMT
        Subject: CN=888e5e71-6c05-4882-93c3-6333261246b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:b7:81:d3:d5:fc:26:a0:67:67:04:87:1a:
                    87:95:f3:12:10:3a:f8:5d:3d:40:73:1e:61:b7:76:
                    2c:64:94:82:b1:25:0f:36:da:0b:63:fa:1e:97:eb:
                    ed:5b:df:b3:6a:5e:b0:b5:0a:2c:92:d4:d5:3f:03:
                    25:58:f7:9b:65:84:e6:c7:72:53:09:e2:98:0f:76:
                    7c:eb:15:f9:f3:25:99:18:a5:4c:54:f1:9e:e6:97:
                    30:fc:0a:e6:3f:56:1a:e9:ef:74:e6:ab:62:59:f1:
                    c6:eb:bd:5b:a2:28:86:58:7b:83:a2:17:2c:44:bb:
                    23:04:f0:15:bd:4b:0c:8c:88:d9:4b:5a:34:08:33:
                    55:ff:8d:6f:08:62:95:07:a4:01:ad:8a:c5:6c:a2:
                    1e:a5:23:1b:21:2e:db:a7:f6:10:d8:40:b6:e0:e3:
                    7c:3c:e7:92:44:27:4a:66:9a:e6:a0:03:61:cd:41:
                    d4:d0:cb:65:ad:ae:07:fb:3a:ef:4a:9e:74:1d:4a:
                    97:0d:a6:40:0c:02:f0:f5:89:40:23:20:91:3c:1e:
                    57:bd:e3:25:53:d7:c6:91:41:4f:9b:d2:36:26:f1:
                    4b:60:84:54:86:3a:99:a9:98:7d:05:ba:b8:65:21:
                    34:fa:a5:7a:64:4e:e8:0c:fd:8e:0e:da:42:68:ca:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:49:18:0E:21:72:6C:B6:BC:22:37:BA:50:6F:9E:33:12:04:4A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/d43fee01-b37e-335e-9cac-4935e1851bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:71:49:d3:7d:6d:08:73:f1:27:ea:fe:7e:d4:2c:fc:1a:fc:
         5f:2d:5a:da:06:0b:fc:2d:ea:f1:ef:a5:6e:d6:f5:28:b0:36:
         6b:2b:67:be:8d:34:99:1a:81:b1:76:ac:47:10:c9:5f:f0:97:
         89:7f:03:e1:28:e8:1a:80:29:0e:75:73:7e:8a:cd:42:90:84:
         de:36:aa:bc:40:e0:ba:6d:e7:d7:8f:f8:03:65:b6:2b:90:24:
         e1:52:50:15:1f:b3:e1:bd:27:74:8f:08:93:77:7d:22:df:bb:
         5a:0d:ec:62:61:0d:fb:3c:b4:72:f0:9f:be:a4:6f:c2:b0:63:
         ae:f1:42:fe:09:ac:61:60:6b:8f:d7:ab:8b:20:24:18:6b:07:
         8b:5c:4f:25:1b:e9:34:30:82:66:61:0f:2f:a5:db:c9:11:54:
         58:e0:25:dc:8e:11:4b:f9:87:b4:fd:3a:f1:28:b9:46:d7:03:
         6b:ff:51:b8:ca:88:ee:be:05:ff:c6:ff:ce:52:ee:83:dd:6d:
         96:bd:96:ab:47:ca:ae:4c:ca:99:09:3e:aa:b4:7c:0e:05:f0:
         9f:33:27:07:8d:9e:2a:74:52:a9:94:c3:a0:7b:95:93:a9:6a:
         62:2d:bf:be:ee:47:d4:bb:17:39:1d:54:8b:21:db:db:2c:8e:
         94:db:d3:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEdR9iP0oxsrPgQvnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTljMDUwYzgtYmQxZi00ZTQxLTkzMWYtMTZlYTdiOWVj
YWZhMB4XDTI0MDkyNDExNTYyMloXDTI0MTIyMzEyNTYyMlowLzEtMCsGA1UEAxMk
ODg4ZTVlNzEtNmMwNS00ODgyLTkzYzMtNjMzMzI2MTI0NmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvG3gdPV/CagZ2cEhxqHlfMSEDr4XT1Acx5h
t3YsZJSCsSUPNtoLY/oel+vtW9+zal6wtQosktTVPwMlWPebZYTmx3JTCeKYD3Z8
6xX58yWZGKVMVPGe5pcw/ArmP1Ya6e905qtiWfHG671boiiGWHuDohcsRLsjBPAV
vUsMjIjZS1o0CDNV/41vCGKVB6QBrYrFbKIepSMbIS7bp/YQ2EC24ON8POeSRCdK
ZprmoANhzUHU0Mtlra4H+zrvSp50HUqXDaZADALw9YlAIyCRPB5XveMlU9fGkUFP
m9I2JvFLYIRUhjqZqZh9Bbq4ZSE0+qV6ZE7oDP2ODtpCaMp+BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH9JGA4hcmy2vCI3ulBvnjMSBEpPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMw
NTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVhN2I5ZWNhZmEvZDQzZmVlMDEtYjM3ZS0z
MzVlLTljYWMtNDkzNWUxODUxYmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTljMDUwYzgtYmQxZi00ZTQxLTkz
MWYtMTZlYTdiOWVjYWZhLzE5YzA1MGM4LWJkMWYtNGU0MS05MzFmLTE2ZWE3Yjll
Y2FmYS5jcmwwHwYDVR0jBBgwFoAUgMASK73s01oy3eeuG/C5I0LAtzMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xOWMwNTBjOC1iZDFmLTRlNDEtOTMxZi0xNmVh
N2I5ZWNhZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+RWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAExxSdN9bQhz8Sfq/n7ULPwa/F8tWtoGC/wt6vHvpW7W9SiwNmsrZ76N
NJkagbF2rEcQyV/wl4l/A+Eo6BqAKQ51c36KzUKQhN42qrxA4Lpt59eP+ANltiuQ
JOFSUBUfs+G9J3SPCJN3fSLfu1oN7GJhDfs8tHLwn76kb8KwY67xQv4JrGFga4/X
q4sgJBhrB4tcTyUb6TQwgmZhDy+l28kRVFjgJdyOEUv5h7T9OvEouUbXA2v/UbjK
iO6+Bf/G/85S7oPdbZa9lqtHyq5MypkJPqq0fA4F8J8zJweNnip0UqmUw6B7lZOp
amItv77uR9S7FzkdVIsh29ssjpTb01k=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:30:16 2025 by rpki-client