Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7ab4dc4-4580-39f4-a647-501a1424b526.roa
File:                     e7ab4dc4-4580-39f4-a647-501a1424b526.roa (raw, json)
Hash identifier:          iaMzBR+05ioBhTJeGiavaQvR9X65ryWrDDz4C249FQw=
Subject key identifier:   4A:7D:A1:89:78:04:18:12:4B:1A:0A:B9:8C:E2:88:57:18:8C:1E:B2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285846E5356B2DDB52DE4A9E54CF40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7ab4dc4-4580-39f4-a647-501a1424b526.roa
Signing time:             Fri 16 Aug 2024 13:00:40 +0000
ROA not before:           Fri 16 Aug 2024 13:00:40 +0000
ROA not after:            Thu 14 Nov 2024 14:00:40 +0000
asID:                     45899
IP address blocks:        23.194.136.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e5:35:6b:2d:db:52:de:4a:9e:54:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 16 13:00:40 2024 GMT
            Not After : Nov 14 14:00:40 2024 GMT
        Subject: CN=e414f482-7b40-45af-ad7f-2f27f4554406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d7:73:33:29:9c:a3:a3:6b:2e:98:c1:07:aa:
                    e3:97:04:45:29:b6:a1:2b:a1:37:bb:f9:6f:9b:28:
                    76:de:b3:96:71:cc:d9:32:ea:b5:51:46:92:b0:e8:
                    e6:77:18:46:f7:65:a1:9c:a0:23:22:1c:37:a6:ca:
                    cc:21:0a:e2:1a:b9:7f:53:9a:ec:80:ab:9b:64:e7:
                    34:a2:25:97:5f:78:fa:3a:87:34:04:b2:02:84:d7:
                    c0:d4:b4:82:c3:b8:1f:80:5a:2f:fa:3a:33:a9:55:
                    4c:13:fd:22:48:60:65:bb:76:4d:e9:6b:41:fc:1a:
                    57:dc:8a:c0:d9:78:95:b8:15:a3:a9:2b:bb:c3:f3:
                    26:9e:d4:67:a0:15:ca:cf:17:fc:16:44:7a:00:ad:
                    1a:a8:60:6e:90:a3:91:fb:4e:c7:52:ea:85:d3:0f:
                    29:fc:a3:07:35:39:a5:1f:50:f2:89:19:c0:90:8b:
                    9a:1a:b7:d3:b3:3d:07:10:e3:f6:e9:43:71:b2:59:
                    b8:88:ec:8e:0a:73:9a:5f:f2:15:d5:e9:e1:43:47:
                    f6:2d:e1:92:12:34:05:a4:89:cb:91:95:dd:2b:b8:
                    70:97:f9:4a:9f:7b:31:48:d5:e0:26:ef:9e:35:79:
                    fb:eb:0e:83:95:cb:00:01:2a:4d:41:bf:ff:ab:c3:
                    ae:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7D:A1:89:78:04:18:12:4B:1A:0A:B9:8C:E2:88:57:18:8C:1E:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7ab4dc4-4580-39f4-a647-501a1424b526.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:9f:68:70:bd:3b:ef:ce:c3:0d:9e:6e:04:3d:f1:99:90:9e:
         56:73:37:ce:b1:58:c3:4e:4e:42:4c:81:93:69:b7:d6:10:91:
         f4:2f:e0:62:66:81:6d:ee:47:5a:86:a8:85:4e:fa:dc:43:cc:
         90:a6:c2:88:16:ce:54:a4:0c:b9:e4:d6:76:64:13:11:a2:00:
         ad:bb:a2:0f:36:25:b0:47:5d:cb:0a:d7:cc:a5:c8:f8:82:36:
         ab:e7:e5:03:9d:99:b5:1b:4a:21:77:36:c0:9a:b2:a1:c3:72:
         17:4e:bb:8e:ec:0e:6c:a0:c0:83:69:3a:e5:00:51:52:ca:4b:
         33:6c:bc:df:39:35:56:0d:f3:14:e0:95:c2:e5:ec:11:e6:ce:
         f6:f6:ef:4b:38:7e:cc:86:87:68:c5:34:de:d9:4a:21:2e:49:
         8c:82:81:47:9c:a8:8d:c6:0d:e6:c3:0d:22:bf:95:11:cd:70:
         9d:d9:39:f9:ab:1b:ef:cc:5a:ae:11:17:e7:9b:c0:76:59:23:
         ea:e6:3d:11:cc:d4:9d:cb:7b:81:05:6f:d2:83:17:07:ee:cd:
         f1:cc:77:70:7e:79:62:04:17:71:1c:87:1d:0e:b5:ff:7c:29:
         72:44:47:97:67:cb:e2:b6:00:95:f8:aa:0f:1b:11:ca:b7:92:
         13:cb:9f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:58:31 2025 by rpki-client