Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e861bbbc-47b9-3824-8d0c-bbcd5183b2b7.roa
File:                     e861bbbc-47b9-3824-8d0c-bbcd5183b2b7.roa (raw, json)
Hash identifier:          qBFNIUH5rktUshxk9zD+7wo8PvmGiOigei7jd19bPn0=
Subject key identifier:   E5:1C:90:40:DE:4F:40:45:37:FB:F0:21:7D:DA:CC:87:EF:45:AC:2C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285847643B7A0ABDDD1CF40E7328C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e861bbbc-47b9-3824-8d0c-bbcd5183b2b7.roa
Signing time:             Tue 01 Oct 2024 01:00:31 +0000
ROA not before:           Tue 01 Oct 2024 01:00:31 +0000
ROA not after:            Mon 30 Dec 2024 02:00:31 +0000
asID:                     16625
IP address blocks:        23.12.135.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:64:3b:7a:0a:bd:dd:1c:f4:0e:73:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  1 01:00:31 2024 GMT
            Not After : Dec 30 02:00:31 2024 GMT
        Subject: CN=7702c034-9057-4aad-a9a2-3b88e04792ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:59:c8:4d:d2:e9:6f:56:bb:68:29:4f:05:
                    61:34:2d:6d:30:0d:18:7c:c0:a0:8f:8c:4e:f2:5f:
                    ba:c6:b3:8c:fc:57:17:f1:ce:d3:f8:45:63:c9:2e:
                    05:7e:e9:50:41:64:a7:b2:71:f3:09:5a:c2:7d:32:
                    db:83:92:f8:e4:1c:82:3b:af:4e:75:1c:62:b6:68:
                    70:b1:a6:54:c8:96:5e:0d:4b:78:48:17:c7:26:d6:
                    62:00:7f:c4:5f:a6:84:16:b8:0b:71:12:0d:11:5c:
                    51:21:65:90:e8:72:9c:2a:98:3b:2a:34:ac:40:b8:
                    29:9b:0d:72:5e:b6:c6:b0:1f:c4:82:fb:82:5a:17:
                    88:7c:b9:a3:c0:82:bb:5e:01:04:5e:23:dc:3e:d5:
                    18:70:53:02:2c:49:68:6f:80:26:eb:5d:ba:42:c4:
                    e2:25:ab:ac:f8:29:88:43:85:30:20:ed:17:57:78:
                    51:1c:1b:ca:c6:af:2f:4b:bc:65:f3:a6:bc:37:38:
                    14:8e:a0:7c:ee:6e:29:6e:33:27:00:b1:11:05:bb:
                    9a:9b:b0:c0:89:e6:9c:78:1d:27:5b:7b:d0:5b:0f:
                    12:8e:55:34:b8:7f:b8:01:ab:a4:44:b5:d3:c1:f4:
                    53:43:76:9e:d5:d3:2c:45:1c:62:d9:1e:77:84:11:
                    0e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1C:90:40:DE:4F:40:45:37:FB:F0:21:7D:DA:CC:87:EF:45:AC:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e861bbbc-47b9-3824-8d0c-bbcd5183b2b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.12.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:95:3d:ad:fc:ce:3b:f6:03:bc:87:05:12:c0:8c:e9:7c:ef:
         bd:3e:7b:de:4f:7e:7e:91:28:6e:21:aa:cf:f7:d7:db:cc:56:
         e8:ce:49:56:a9:39:30:2d:9d:bd:c3:53:37:eb:d3:8e:fb:bd:
         68:89:a3:3d:da:1b:60:82:34:b7:1a:0f:0f:c9:f8:2e:e0:04:
         29:5a:9f:59:f2:c6:9a:62:9a:29:c2:30:41:75:f4:4a:78:62:
         cd:39:bc:1f:cb:92:c9:6a:e9:b0:5d:74:be:9b:76:58:0b:67:
         aa:6c:f5:ee:97:29:60:5b:82:ce:0f:ca:e6:0b:ed:a3:e0:fd:
         be:a3:20:3a:7b:ae:6b:e3:d5:52:72:43:67:4c:a6:38:48:9f:
         54:9f:d7:65:3a:e3:42:c1:51:37:bf:79:d1:4b:c4:0c:2d:65:
         bc:22:25:99:c5:e3:b3:0a:0b:01:ba:70:a1:63:b2:81:24:b1:
         87:64:71:cb:f6:ee:f5:df:1a:83:7b:4f:fd:e1:de:be:9c:32:
         52:4f:bf:4a:4e:51:6b:50:65:42:2e:e7:14:65:35:ef:17:f4:
         dd:6f:db:94:5c:c9:d8:ef:d3:cc:43:35:5f:ae:a5:ff:8c:ab:
         29:67:26:e4:93:76:b6:03:8c:c4:b6:53:51:b7:4d:4a:09:e4:
         6d:b1:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:58:39 2025 by rpki-client