Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e15541e-a40e-35e5-93b6-c58ec44a1720.roa
File:                     2e15541e-a40e-35e5-93b6-c58ec44a1720.roa (raw, json)
Hash identifier:          q1ZzytF32MRZ9csfTWnktsPcJ1pSfp6al8Sdi3nWtCs=
Subject key identifier:   F5:11:B1:2B:D3:3C:6B:C4:6D:BF:57:CA:9F:5E:D9:4D:88:CE:23:52
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285846D0452F63D000BAAC10C7D700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e15541e-a40e-35e5-93b6-c58ec44a1720.roa
Signing time:             Fri 09 Aug 2024 01:00:28 +0000
ROA not before:           Fri 09 Aug 2024 01:00:28 +0000
ROA not after:            Thu 07 Nov 2024 02:00:28 +0000
asID:                     20940
IP address blocks:        23.63.76.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d0:45:2f:63:d0:00:ba:ac:10:c7:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  9 01:00:28 2024 GMT
            Not After : Nov  7 02:00:28 2024 GMT
        Subject: CN=7b10f592-f929-4635-97c5-e03f7e101540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:eb:e5:68:57:27:d4:2b:5a:21:dd:be:df:45:
                    8e:a4:34:02:b8:2e:6a:ad:83:8f:a8:d1:c8:4b:2c:
                    46:44:fa:4d:b6:2b:ff:46:a8:8e:35:1a:c0:d0:1d:
                    db:29:a0:00:25:d3:a4:59:6f:5d:ec:95:50:8d:62:
                    0f:7a:6d:b8:f1:36:9c:80:06:4b:31:ed:a8:49:19:
                    16:07:31:24:4e:5a:11:d6:24:bc:3a:32:e6:e1:11:
                    55:4b:3b:06:b9:d7:51:f6:74:c7:7a:05:63:27:cd:
                    7b:2f:48:c0:75:bf:2c:a8:26:64:41:d2:26:b4:10:
                    6e:1e:f1:bf:db:25:fe:11:88:00:10:ee:20:0f:1a:
                    be:6a:31:2c:95:d1:0a:d6:7e:b2:8a:dd:8a:dd:bf:
                    07:e8:5b:6f:d0:36:e6:09:af:1d:04:7a:30:45:f3:
                    8e:82:e4:07:3c:77:8b:4e:ed:f6:71:8e:a5:9f:29:
                    c1:70:28:69:96:4a:ed:03:1a:b5:6e:f4:bc:55:ec:
                    5e:63:4c:54:01:38:da:c1:da:76:f9:f6:59:41:8f:
                    b9:6e:6a:2b:cb:e2:11:87:a5:7b:1e:3f:a9:41:53:
                    05:31:35:d9:80:1b:2b:09:8d:97:9d:40:f2:d2:11:
                    54:37:b2:69:60:ba:d1:e4:de:e3:d8:bc:29:cb:8d:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:11:B1:2B:D3:3C:6B:C4:6D:BF:57:CA:9F:5E:D9:4D:88:CE:23:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2e15541e-a40e-35e5-93b6-c58ec44a1720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.63.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ad:17:2a:ea:c2:20:28:cd:bc:aa:72:df:17:be:a6:f0:63:
         b3:31:1c:a0:dc:4a:52:e6:92:57:45:a7:7c:2d:8c:42:08:63:
         62:5e:cd:a0:fe:87:89:2e:8a:c3:a1:71:0d:57:22:94:f5:5c:
         6c:b6:05:20:fb:76:48:05:0d:0d:d0:65:b0:5b:a0:f4:aa:00:
         d5:79:43:d7:05:a3:51:42:b4:77:ab:e2:d6:cf:bd:0d:41:0a:
         85:64:6a:66:84:9b:18:94:41:62:ab:86:b5:62:42:32:df:de:
         0a:28:f4:15:8d:fb:35:a9:84:46:be:2e:76:8f:98:88:e3:b2:
         5e:eb:23:40:3a:5f:da:c4:2b:a0:fc:0b:74:71:1f:d7:b2:99:
         57:9e:c8:13:c6:9d:b9:4a:9b:cf:ba:72:e8:60:66:4a:ee:18:
         c8:d7:78:c9:74:00:c8:5d:52:ed:20:a2:74:81:64:02:b8:0b:
         e4:a5:52:8e:44:70:81:9b:bd:13:07:eb:6c:4a:63:55:e6:3c:
         9d:78:a9:56:b6:c1:6e:ea:72:92:fe:a9:5f:d9:d7:2b:c7:3f:
         9f:8d:c1:76:dc:ed:57:9e:06:b1:7f:5c:1b:88:7b:d8:db:5b:
         d3:0a:e3:e6:dd:23:e5:12:60:b8:93:13:86:20:9f:80:ed:23:
         4b:a7:f7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:32:41 2025 by rpki-client