Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a9dbb0d-27cb-3d4c-877f-bdab11b3e92c.roa
File:                     9a9dbb0d-27cb-3d4c-877f-bdab11b3e92c.roa (raw, json)
Hash identifier:          2YLIR4fOQRrzTZAr2xMEVfWOdBuWTk18i7f9ll31hWg=
Subject key identifier:   CB:CA:D8:FC:E1:8F:91:AB:4D:1D:45:73:54:C4:28:58:A6:38:4A:A7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584769D0ED585AD5E0314D60E780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a9dbb0d-27cb-3d4c-877f-bdab11b3e92c.roa
Signing time:             Thu 03 Oct 2024 01:00:31 +0000
ROA not before:           Thu 03 Oct 2024 01:00:31 +0000
ROA not after:            Wed 01 Jan 2025 02:00:31 +0000
asID:                     16625
IP address blocks:        104.83.149.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:69:d0:ed:58:5a:d5:e0:31:4d:60:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  3 01:00:31 2024 GMT
            Not After : Jan  1 02:00:31 2025 GMT
        Subject: CN=371b464b-dbd9-4d09-b04d-af184d76563a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:14:32:c6:e0:90:24:f1:96:15:e7:1e:60:
                    aa:c7:ab:83:e2:0c:cf:ac:64:48:b9:a8:41:4a:da:
                    be:86:bf:41:ec:85:31:2b:e1:70:8c:2b:eb:18:d5:
                    c1:98:bf:4c:3b:82:24:65:2a:b3:02:5b:83:1a:00:
                    b4:03:ee:7c:ff:f8:12:3e:82:06:90:d4:8a:37:6b:
                    b1:c7:6b:09:64:1e:70:9a:a5:b1:4b:8d:db:2a:81:
                    a3:b7:72:ac:3c:19:e9:4f:f4:11:4b:b0:f0:8f:8c:
                    d1:d1:f1:ad:9c:c7:bc:fe:c0:eb:8c:c1:0d:ee:d2:
                    6c:ec:cd:6c:de:04:71:32:e5:af:36:88:ad:c7:12:
                    ed:62:f0:c0:3f:41:f4:a9:8b:e7:e5:5e:38:77:62:
                    14:c9:b4:41:5d:e7:22:e4:6e:00:22:c6:a0:30:8b:
                    ae:9e:d5:d0:64:42:af:04:bb:78:45:90:eb:43:9d:
                    93:c4:64:c8:ed:09:c2:2a:96:47:b0:b5:8d:cb:f5:
                    a8:d7:7f:ca:97:ee:5f:22:e5:09:2b:22:d5:9d:1d:
                    74:bf:5f:e6:fc:da:01:08:3c:81:88:ee:05:07:22:
                    d0:e6:c2:9c:da:2b:2a:bb:dc:1c:27:ab:ef:4c:08:
                    df:ec:e9:cc:fd:f2:26:47:21:d9:d5:0a:da:03:9c:
                    ed:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CA:D8:FC:E1:8F:91:AB:4D:1D:45:73:54:C4:28:58:A6:38:4A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a9dbb0d-27cb-3d4c-877f-bdab11b3e92c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.83.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:ad:b3:8a:f1:9f:b2:21:1d:44:b3:7e:5e:16:ce:5e:51:e0:
         12:bf:38:2f:0f:73:76:09:5f:9a:23:50:56:31:dc:53:be:6c:
         c4:4d:b9:c4:1f:74:c9:06:55:4b:d7:36:c6:58:86:9c:83:dc:
         21:9a:ec:bb:d2:2a:ae:95:ce:fb:d0:42:b1:4a:68:e1:51:a1:
         13:20:98:7c:ab:74:47:e1:7c:5e:ab:90:df:a6:90:e6:4d:e3:
         61:1c:39:b2:d3:05:9d:2f:4a:ec:b0:5d:79:37:10:a1:3d:79:
         1a:47:77:05:fe:df:6d:70:d5:16:f4:69:dc:08:9a:39:b6:a7:
         79:9a:41:28:94:92:0c:a5:14:16:79:69:c8:29:ad:8f:fe:ca:
         85:e9:8f:ed:4a:2a:30:a7:9e:40:1c:82:55:76:ca:5a:22:28:
         42:00:d7:d1:bb:82:40:59:99:d1:14:76:24:61:67:1e:4c:aa:
         31:6c:54:b2:19:72:84:93:c2:1d:d2:47:f7:d3:88:76:17:03:
         4d:06:48:9f:74:d2:2a:cc:da:7e:3f:da:8d:2c:c6:d5:74:9a:
         15:8b:53:e5:4b:2d:bf:c0:a3:3b:8e:26:18:fe:9b:35:76:3c:
         95:a2:82:43:59:dc:ad:40:90:7d:f4:0b:7c:01:0e:15:f9:7b:
         b6:0c:13:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:14:15 2025 by rpki-client