Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/50f155ed-3a7f-3042-b715-4f9f78c79bda.roa
File:                     50f155ed-3a7f-3042-b715-4f9f78c79bda.roa (raw, json)
Hash identifier:          zdtD3pttLHPnihVbkCE7ZetTbqq0QPZywjD3nk1abiA=
Subject key identifier:   85:BA:32:D8:AB:14:E4:0E:0E:89:0F:A8:BA:86:14:19:29:2F:B1:AB
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F43285847C1DF53F163F59080D0363B80
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/50f155ed-3a7f-3042-b715-4f9f78c79bda.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     397270
IP address blocks:        23.151.17.0/24 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:53:f1:63:f5:90:80:d0:36:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=6ffb0859-acde-4cd5-a1b4-d57e9cb717d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:81:f6:12:78:8c:91:0b:42:32:01:8c:b0:45:
                    bb:c6:28:b3:32:0c:a2:3e:18:74:3b:ae:a0:cf:ca:
                    db:c5:b1:97:b0:15:f3:76:fa:f2:48:48:7b:ec:37:
                    f4:d6:d3:5c:42:e9:9c:6d:aa:34:8d:1b:74:cd:60:
                    13:db:3a:e7:23:d0:a3:cb:fb:b0:dc:57:81:fe:11:
                    b6:4c:e1:48:b0:c0:23:36:c9:7d:13:52:04:01:9a:
                    b8:b4:b4:48:aa:e4:e2:0e:37:a4:52:91:c8:41:d8:
                    d8:9b:76:7f:22:be:5b:42:46:e9:95:56:91:8d:4c:
                    7e:0c:38:45:46:ff:8d:30:97:db:f1:48:5a:0f:3e:
                    71:9f:aa:bc:2d:35:20:98:71:32:86:e6:90:70:d6:
                    be:c4:eb:30:8e:61:a2:03:c6:3c:6c:f8:58:3b:77:
                    78:92:ed:75:64:e8:aa:39:f0:cc:f2:e5:40:45:65:
                    17:db:f9:8d:0a:b7:3f:7e:c7:79:fe:6b:01:51:17:
                    fa:cf:2d:e2:ec:0f:0e:e7:11:ca:72:8a:43:d7:55:
                    e6:d7:4f:31:9f:5f:86:99:4d:ba:9c:ed:cd:47:e8:
                    73:67:66:5b:23:d9:dc:0e:cc:61:99:c1:88:e8:33:
                    4f:57:0b:c1:48:2e:40:5a:73:18:03:f4:f8:ec:9e:
                    84:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BA:32:D8:AB:14:E4:0E:0E:89:0F:A8:BA:86:14:19:29:2F:B1:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/50f155ed-3a7f-3042-b715-4f9f78c79bda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3e:d6:ee:04:b1:b5:5d:ac:78:0f:95:80:6f:42:73:2b:2a:
         93:f5:1a:0d:cb:80:01:7a:2c:4b:e9:5e:fd:87:69:e9:cc:77:
         ee:a0:7f:98:93:c5:17:eb:27:e2:11:16:27:ae:07:cb:36:b0:
         f6:06:38:8c:d5:0c:d0:9f:0d:0a:1f:e5:c5:9e:6b:89:4e:df:
         bc:49:fa:d4:94:0d:5b:13:bd:6b:c1:74:3d:63:61:0c:55:91:
         c0:5d:54:81:2f:a9:5b:00:da:be:9c:b9:c4:ad:91:a0:52:ea:
         31:7a:12:18:19:99:dd:63:b2:84:06:8c:01:b7:2f:f1:9f:82:
         77:a0:6a:88:93:f1:11:b4:64:7d:3a:cc:ba:d8:49:bc:17:b6:
         f3:3b:dc:be:10:ef:a0:65:6a:de:cd:b9:70:30:d5:21:01:3c:
         0b:89:1c:fe:4e:7c:bd:76:1c:b1:da:ef:4c:05:aa:56:4a:a2:
         dc:c2:c8:e3:d6:e8:c0:48:8c:55:c7:d5:6d:db:36:d8:07:51:
         17:9c:10:a2:e7:ce:45:ba:2c:42:1f:87:93:2f:95:54:ae:a8:
         88:3e:99:88:e1:c2:b4:0e:43:50:2a:7a:16:67:d6:e6:04:7f:
         b0:2a:61:5d:42:e3:f7:25:3a:51:d6:46:0b:66:4d:39:16:03:
         86:e2:fe:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:03:42 2025 by rpki-client