Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87/88682d49-9b5c-3730-8798-19a9819e29e9.roa
File:                     88682d49-9b5c-3730-8798-19a9819e29e9.roa (raw, json)
Hash identifier:          fRQ81dzb5C3iu7pdiNEFJUXl/k6wQ8PzV/cyF2RMSZM=
Subject key identifier:   50:13:95:DA:D6:31:06:75:CD:BF:C5:6B:FE:34:22:D1:A8:AB:B9:23
Certificate issuer:       /CN=da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87
Certificate serial:       010D0C9F432858440E145279D3572819BF5DE100
Authority key identifier: 96:1D:16:6F:94:C7:F0:16:F0:03:C8:56:35:8D:D4:E1:67:F2:BC:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87/88682d49-9b5c-3730-8798-19a9819e29e9.roa
Signing time:             Thu 30 Nov 2023 02:01:24 +0000
ROA not before:           Thu 30 Nov 2023 02:01:24 +0000
ROA not after:            Wed 28 Feb 2024 02:01:24 +0000
asID:                     8075
IP address blocks:        199.233.162.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0e:14:52:79:d3:57:28:19:bf:5d:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87
        Validity
            Not Before: Nov 30 02:01:24 2023 GMT
            Not After : Feb 28 02:01:24 2024 GMT
        Subject: CN=38fac9ca-967e-40b5-8ff7-cab1163f3e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:87:5a:68:7a:df:33:21:4b:26:14:84:e7:ac:
                    69:b6:16:ed:44:a7:aa:5d:66:d7:57:3e:41:27:d7:
                    02:f4:21:27:c2:c7:3d:cd:45:43:05:e0:61:90:c5:
                    dd:d9:a5:d3:93:ae:4f:30:4e:88:da:ce:b2:09:82:
                    2c:b6:71:f0:cb:1f:3e:40:ec:21:88:0b:be:26:fd:
                    94:ad:8a:da:66:c6:33:4f:db:61:13:61:a4:e9:08:
                    66:eb:cf:06:a0:da:0b:6b:77:95:9f:5c:ac:85:aa:
                    e0:44:62:f4:4d:b3:c8:f1:c2:68:6a:bb:ca:78:5f:
                    e2:25:67:93:18:37:96:92:ee:a8:38:4f:bb:63:f1:
                    74:48:07:e9:b4:ae:c3:f7:f0:56:8a:e3:ab:34:b1:
                    dc:8c:6c:bf:6b:07:8b:0f:53:1e:90:09:ae:e3:81:
                    be:14:be:7b:5a:fc:01:cb:20:35:cf:8e:1c:cb:6e:
                    5e:42:29:b2:b7:7b:01:c8:5a:49:1d:4c:03:78:24:
                    d1:3a:82:d3:8b:db:e9:e7:03:99:c5:e7:63:05:3b:
                    6a:b8:7d:04:80:17:bb:49:7b:5e:bc:02:d3:30:74:
                    af:76:72:70:a9:8b:ef:59:dd:1f:9f:2c:17:ae:25:
                    f8:4f:9e:a3:aa:95:bb:c8:bb:bb:ad:57:36:d5:6f:
                    81:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:13:95:DA:D6:31:06:75:CD:BF:C5:6B:FE:34:22:D1:A8:AB:B9:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87/88682d49-9b5c-3730-8798-19a9819e29e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87.crl

            X509v3 Authority Key Identifier:
                keyid:96:1D:16:6F:94:C7:F0:16:F0:03:C8:56:35:8D:D4:E1:67:F2:BC:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/da6cdf9e-a7b6-4103-bbb1-4ff04c5a9c87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.233.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:74:a9:f6:37:29:ad:23:1e:83:14:7b:0e:3c:55:4f:4f:92:
         75:2e:fa:a9:c4:ed:e9:82:36:54:bb:8c:cc:4c:30:73:d2:60:
         67:b6:02:c3:a3:dd:5f:49:b0:39:cd:2a:24:69:00:70:3e:7c:
         41:b9:b0:eb:3a:4b:1f:a5:8f:c7:5e:b7:38:0c:a2:a4:2f:f0:
         67:4c:89:92:42:66:88:73:8f:94:cf:b6:83:28:ab:04:f0:c6:
         78:18:2d:1c:d3:63:1a:4a:1b:41:9c:fb:e8:87:97:8a:4b:b0:
         87:95:6b:d9:97:af:a2:ec:46:3c:d0:8d:70:dc:6f:b6:20:43:
         a8:da:7f:68:7b:59:0a:16:de:4d:26:88:4b:65:10:0c:f0:71:
         ab:17:0c:e8:68:e8:f3:00:a9:e8:76:c9:31:78:7f:fe:29:07:
         02:d1:07:bb:bc:fe:35:c9:fd:0d:17:c0:5a:54:44:c0:bf:c1:
         33:17:bf:51:5a:db:00:22:1c:f6:af:af:5a:a6:eb:5c:73:10:
         ba:f5:e6:ee:da:b6:52:16:b2:94:63:fb:9f:70:fb:65:c4:e5:
         49:97:3a:13:31:c0:d2:a5:14:57:bc:0f:18:a0:97:a0:e2:13:
         a9:0b:fe:fc:c8:d7:eb:74:8d:96:47:81:fb:a1:17:28:22:35:
         11:e2:b3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:12:00 2025 by rpki-client