Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d595d889-211a-3226-834c-60745a68efac.roa
File:                     d595d889-211a-3226-834c-60745a68efac.roa (raw, json)
Hash identifier:          wPmmyEmXkXJXBg9jGy7FjdFApZc9sJ9ODmUuv59y0F4=
Subject key identifier:   23:64:BF:1E:14:8B:EC:6E:64:1A:06:38:AD:CE:62:FC:2C:D2:5A:AA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285846C0EA81ADB50D3583E5056900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d595d889-211a-3226-834c-60745a68efac.roa
Signing time:             Sat 03 Aug 2024 13:00:37 +0000
ROA not before:           Sat 03 Aug 2024 13:00:37 +0000
ROA not after:            Fri 01 Nov 2024 13:00:37 +0000
asID:                     9605
IP address blocks:        23.48.86.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c0:ea:81:ad:b5:0d:35:83:e5:05:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  3 13:00:37 2024 GMT
            Not After : Nov  1 13:00:37 2024 GMT
        Subject: CN=4825ffe8-3aa4-463f-8ea2-0fb85c1aa72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:50:b2:4c:ed:b8:1b:6e:89:38:6b:92:67:
                    ad:82:10:4b:30:3b:17:2f:22:a1:43:cc:0e:de:ba:
                    58:3a:ce:1c:a4:ab:5a:16:9f:0b:7f:c3:44:79:f9:
                    7d:7d:29:8d:fe:73:40:de:e4:c6:47:ca:b2:9c:c0:
                    5d:b2:54:79:33:4f:1d:cc:85:c0:d1:00:52:d0:1d:
                    aa:6b:5d:10:17:58:96:44:4f:2f:2b:eb:51:ce:5a:
                    7a:89:90:cf:92:80:2f:1f:fc:d8:59:d8:eb:30:49:
                    db:a8:90:88:73:f9:49:8c:80:ac:a4:2e:1b:f8:6e:
                    1b:84:d6:6a:97:97:22:ff:ee:42:9c:e6:75:0c:2b:
                    1a:3d:e5:dd:08:f0:e6:96:8c:d8:a9:5f:7d:ac:0d:
                    32:6a:76:0b:8f:c0:17:a4:ea:b9:99:48:01:15:c9:
                    b9:a1:a4:79:02:94:39:f2:04:eb:57:47:40:ec:4c:
                    dc:54:32:41:ef:8e:bc:a5:f0:c5:4c:a9:30:f7:1c:
                    8c:09:d1:4b:ff:18:b1:33:a6:98:0e:2d:bd:be:18:
                    75:f8:9c:1b:47:b1:ee:f6:ef:26:38:9a:5a:c2:86:
                    60:f0:5e:7a:1c:6c:f9:0d:71:d1:33:64:a3:ff:ab:
                    85:60:2c:c6:a2:d0:70:2f:8a:86:64:da:73:d2:4b:
                    cd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:64:BF:1E:14:8B:EC:6E:64:1A:06:38:AD:CE:62:FC:2C:D2:5A:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d595d889-211a-3226-834c-60745a68efac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:cf:23:91:6a:3a:f0:07:83:3a:5e:1f:7b:69:de:6a:2a:18:
         eb:a9:c4:ba:0b:3c:51:d3:60:f7:63:54:56:c3:98:50:e8:9f:
         ce:96:de:07:ae:af:e2:c1:50:d9:a7:6a:c0:51:c6:4d:da:3a:
         fd:c2:9c:00:62:16:e6:66:f3:f5:17:17:53:4f:87:9d:2b:a9:
         0d:25:e4:da:c7:b8:5b:f0:98:52:33:75:8d:f2:97:e0:af:d3:
         64:1b:40:a6:cd:9c:db:65:69:33:db:f9:df:af:b4:8d:17:da:
         10:79:17:07:82:ac:e9:dc:86:fa:b9:99:14:69:67:5f:e8:ef:
         7f:fb:52:28:81:42:52:ac:61:ff:e6:c7:b1:ad:27:b6:40:a1:
         14:3e:f7:83:05:26:3d:3b:84:ae:0a:a4:4d:3f:32:bc:3b:da:
         a8:7b:0d:94:ac:57:5f:65:15:5d:50:01:ac:b7:ad:60:1d:b4:
         49:3c:ee:38:a3:88:2d:a1:c9:0d:21:a8:b3:7f:b1:b8:06:e0:
         77:ec:2e:28:93:c2:69:26:86:4d:77:8e:c8:fd:a6:03:84:9c:
         97:e3:c8:83:2e:fc:84:be:74:0d:83:f4:cc:d8:1c:07:a2:0f:
         14:a7:d1:e2:c0:45:b5:09:d4:3a:8d:d4:57:7a:5b:5f:0f:56:
         0b:4b:f4:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbA6oGttQ01g+UFaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI0MDgwMzEzMDAzN1oXDTI0MTEwMTEzMDAzN1owLzEtMCsGA1UEAxMk
NDgyNWZmZTgtM2FhNC00NjNmLThlYTItMGZiODVjMWFhNzJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsatQskztuBtuiThrkmetghBLMDsXLyKhQ8wO
3rpYOs4cpKtaFp8Lf8NEefl9fSmN/nNA3uTGR8qynMBdslR5M08dzIXA0QBS0B2q
a10QF1iWRE8vK+tRzlp6iZDPkoAvH/zYWdjrMEnbqJCIc/lJjICspC4b+G4bhNZq
l5ci/+5CnOZ1DCsaPeXdCPDmlozYqV99rA0yanYLj8AXpOq5mUgBFcm5oaR5ApQ5
8gTrV0dA7EzcVDJB7468pfDFTKkw9xyMCdFL/xixM6aYDi29vhh1+JwbR7Hu9u8m
OJpawoZg8F56HGz5DXHRM2Sj/6uFYCzGotBwL4qGZNpz0kvNmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCNkvx4Ui+xuZBoGOK3OYvws0lqqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDU5NWQ4ODktMjExYS0z
MjI2LTgzNGMtNjA3NDVhNjhlZmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFzBWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADPI5FqOvAHgzpeH3tp3moqGOupxLoLPFHTYPdjVFbDmFDon86W3geu
r+LBUNmnasBRxk3aOv3CnABiFuZm8/UXF1NPh50rqQ0l5NrHuFvwmFIzdY3yl+Cv
02QbQKbNnNtlaTPb+d+vtI0X2hB5FweCrOnchvq5mRRpZ1/o73/7UiiBQlKsYf/m
x7GtJ7ZAoRQ+94MFJj07hK4KpE0/Mrw72qh7DZSsV19lFV1QAay3rWAdtEk87jij
iC2hyQ0hqLN/sbgG4HfsLiiTwmkmhk13jsj9pgOEnJfjyIMu/IS+dA2D9MzYHAei
DxSn0eLARbUJ1DqN1Fd6W18PVgtL9Io=
-----END CERTIFICATE-----
Generated at Sat Apr 12 15:10:37 2025 by rpki-client