Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ebf90c9-709f-3f99-a61b-f734c492a4c9.roa
File:                     1ebf90c9-709f-3f99-a61b-f734c492a4c9.roa (raw, json)
Hash identifier:          ieOjSJnmzZDLTH88RZ4CGFZ5L2Biq7HJDO2efHMkmOg=
Subject key identifier:   58:D8:23:B4:A8:C0:D1:01:D1:74:0E:64:01:2D:23:05:0A:BB:3A:2C
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285846EDC618AD70A27B25CCC38BB8
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ebf90c9-709f-3f99-a61b-f734c492a4c9.roa
Signing time:             Mon 19 Aug 2024 14:38:44 +0000
ROA not before:           Mon 19 Aug 2024 14:38:44 +0000
ROA not after:            Sun 17 Nov 2024 15:38:44 +0000
asID:                     25867
IP address blocks:        216.240.204.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ed:c6:18:ad:70:a2:7b:25:cc:c3:8b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 19 14:38:44 2024 GMT
            Not After : Nov 17 15:38:44 2024 GMT
        Subject: CN=1f64a315-cd6c-43bb-b07b-53d6d1cdb7e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:55:e0:5f:68:58:df:7c:7f:c5:b7:84:8d:
                    87:91:cc:6a:f9:8d:34:60:b8:d2:55:b2:80:6b:62:
                    62:72:bb:db:5a:77:4a:19:45:f4:47:92:b4:d8:42:
                    12:14:f6:31:6e:48:e1:ba:13:93:db:03:3c:9f:f8:
                    b2:13:5e:39:2e:e3:eb:ca:24:4c:63:4c:7a:5d:28:
                    78:d7:fe:2f:99:0f:d6:2a:5b:b6:b9:40:d8:87:a7:
                    b4:8f:e6:bd:1e:37:b9:ba:4f:3f:35:aa:15:4a:d3:
                    29:2b:1a:9f:a7:aa:c6:dd:c3:6e:51:99:7e:44:0e:
                    2d:a5:a6:34:78:80:0c:29:62:bd:41:0b:b5:b4:71:
                    53:65:ed:ec:56:46:68:46:a0:81:99:af:f4:54:ea:
                    85:83:7d:fa:21:81:20:53:dc:f6:d7:94:38:e6:e6:
                    04:af:75:00:59:96:66:c2:2d:15:d5:78:26:8f:7a:
                    71:d6:b6:cc:7b:8d:2d:d2:f5:57:ad:c8:44:0b:fb:
                    5a:c4:9c:3e:b2:2b:65:15:ed:5f:e4:44:b5:d4:0c:
                    3a:db:a6:4a:99:46:e1:2f:b7:02:50:86:ee:2a:8e:
                    3a:bf:f8:d9:3a:61:67:4f:d3:70:c2:34:0b:f1:2a:
                    4e:1c:36:35:8e:b7:c8:52:9d:8e:ce:68:36:2f:bb:
                    74:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D8:23:B4:A8:C0:D1:01:D1:74:0E:64:01:2D:23:05:0A:BB:3A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ebf90c9-709f-3f99-a61b-f734c492a4c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.240.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:dc:b0:68:b5:4b:de:0f:b0:05:e6:07:5b:c1:13:0b:16:44:
         bf:18:49:a8:6d:49:5c:ab:d4:c5:2b:90:48:a7:85:be:cf:14:
         eb:93:c0:f3:65:fc:65:b1:8a:f1:c2:f1:e0:96:63:f5:aa:62:
         b6:be:17:4f:2e:cb:f1:a2:b8:c4:41:67:65:33:9d:7a:7d:ad:
         ae:5d:4c:2b:ab:c3:5b:f8:5e:12:eb:dc:05:84:d8:ab:8c:8d:
         81:71:b1:27:d7:23:4c:4f:63:74:bd:f7:bc:e1:a4:1f:1a:d6:
         3f:65:25:0e:dc:6b:7f:ee:69:51:1a:5d:55:c1:40:50:42:5e:
         ab:36:5a:58:29:e5:a9:d9:dc:b9:04:93:ea:e3:3e:a2:e3:d6:
         40:26:6b:07:70:ea:03:1e:af:3d:fa:cf:0b:9b:64:bb:fc:26:
         91:30:6c:99:08:d1:80:5b:9d:7c:f3:c2:a2:85:8f:c6:35:63:
         54:67:51:47:5d:7f:6b:2d:6d:a8:b1:90:d8:c2:3e:b1:e5:e3:
         57:e2:e4:f1:df:74:2f:e8:d8:5c:d2:30:3a:a8:ed:58:ba:c3:
         71:a0:aa:83:8c:20:31:bc:c6:53:9c:56:64:e8:ca:94:16:01:
         f0:fd:75:38:a0:5c:3d:77:07:86:a3:8a:e5:b5:b6:e3:b3:55:
         f0:2f:03:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:44 2025 by rpki-client