Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03e459fb-6959-318b-b25d-a5074977a03f.roa
File:                     03e459fb-6959-318b-b25d-a5074977a03f.roa (raw, json)
Hash identifier:          4kppHvjkrbT152wHNU6tdYcONYO/xRjMWLp1RWmH9u8=
Subject key identifier:   9A:DA:A2:95:57:02:B6:8F:87:4B:3C:92:0D:26:30:FB:1E:09:95:2C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584834558C3304B88BF3F983A2A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03e459fb-6959-318b-b25d-a5074977a03f.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     20940
IP address blocks:        23.67.36.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:8c:33:04:b8:8b:f3:f9:83:a2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=3a5713ab-4ebe-44cf-b187-dad1b5e5aaaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:45:44:70:bb:d1:49:2b:15:76:f3:db:5f:
                    dd:03:93:e6:33:45:70:15:c3:e7:a8:98:c3:60:46:
                    3b:39:02:d7:41:cc:02:b6:16:57:74:c1:9f:74:cc:
                    81:9f:7d:9c:72:66:96:3a:51:7b:88:6d:17:88:3c:
                    78:5e:fb:45:a0:2a:48:c2:74:ad:b7:87:99:8a:66:
                    63:d6:1a:6c:b9:78:b5:b5:0a:77:73:20:45:f2:a9:
                    e2:7c:da:31:1b:08:31:62:6c:da:8f:b9:85:2e:8c:
                    b4:46:93:63:46:48:09:8a:61:15:f2:1b:e5:9a:5a:
                    e1:04:f5:67:6f:8b:ab:f0:b1:b7:0a:d1:74:8e:72:
                    01:49:14:17:64:7e:47:dd:06:02:03:66:d1:30:bf:
                    7e:97:b7:58:26:7e:77:95:54:4f:73:cd:be:76:14:
                    5a:c5:c6:d4:6b:72:1b:91:3a:9e:f2:22:0c:5d:18:
                    fb:b2:17:af:8f:9c:78:a4:84:98:c5:be:1b:34:bb:
                    55:f7:e1:21:da:e9:97:36:aa:41:2e:cf:d2:03:84:
                    db:eb:44:fd:8c:43:9c:ba:87:74:d4:43:ba:13:9e:
                    06:3d:82:0f:bc:a5:38:51:7f:36:1a:bb:a5:38:0a:
                    b9:c2:ba:44:bc:a5:7f:ed:96:61:16:fb:35:b6:e1:
                    88:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DA:A2:95:57:02:B6:8F:87:4B:3C:92:0D:26:30:FB:1E:09:95:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/03e459fb-6959-318b-b25d-a5074977a03f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.67.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d8:c7:4b:6c:f6:02:3b:b8:d0:79:83:11:05:02:68:e4:68:
         99:69:c8:65:f8:b0:83:08:1d:6c:3d:24:8e:e1:24:04:26:c4:
         39:4d:f8:d3:32:f2:22:8d:51:5c:6d:7d:ae:cf:7b:37:6d:18:
         63:7e:e3:ca:68:b6:df:73:f8:cc:3f:04:10:18:20:40:87:04:
         75:56:e9:df:ec:2d:6b:f8:0b:9c:d3:af:59:60:4f:7b:7e:43:
         30:ff:30:df:6a:d9:9e:76:b7:3f:eb:ff:c1:02:9d:a2:58:0c:
         84:e5:1f:ff:ba:3e:80:24:2d:38:ba:45:c2:f4:3e:7d:9d:05:
         c9:7e:16:54:88:87:ba:c2:d7:b7:02:0d:dc:e0:da:4f:b0:83:
         95:b6:4f:9c:85:78:87:fc:ec:1b:aa:cf:ea:88:dd:06:88:5f:
         f3:98:7d:6a:0d:f6:2b:c5:f7:6f:a8:d0:d3:7a:84:8d:d1:46:
         04:66:fc:74:6d:c8:ac:02:74:68:1f:5b:52:b4:14:34:32:9f:
         96:61:c1:37:89:63:96:bf:7f:0d:cc:21:53:42:de:97:bd:eb:
         33:1c:29:96:db:d1:4e:fe:c5:5c:7a:46:71:bc:d8:92:9b:38:
         0a:8d:d2:88:a5:ef:8c:31:91:c7:32:f2:4c:9d:7c:d8:59:93:
         a4:93:98:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----