Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/188aea0d-b90f-32fa-bf3f-d8f5d93f0eb2.roa
File:                     188aea0d-b90f-32fa-bf3f-d8f5d93f0eb2.roa (raw, json)
Hash identifier:          LGOgP6yXXaQM1zoNV9QrXH753FDIrV1iuVBAzE3kNo4=
Subject key identifier:   59:71:E5:EF:63:DE:A2:49:D1:F2:FC:05:7F:2A:95:64:CD:D5:FF:29
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584694B4BD46EB3F395DAEC96800
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/188aea0d-b90f-32fa-bf3f-d8f5d93f0eb2.roa
Signing time:             Thu 18 Jul 2024 16:56:49 +0000
ROA not before:           Thu 18 Jul 2024 16:56:49 +0000
ROA not after:            Wed 16 Oct 2024 16:56:49 +0000
asID:                     1742
IP address blocks:        199.94.60.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:94:b4:bd:46:eb:3f:39:5d:ae:c9:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jul 18 16:56:49 2024 GMT
            Not After : Oct 16 16:56:49 2024 GMT
        Subject: CN=9e59945d-0eea-41c7-a7cd-9af8ba96d7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e3:40:11:5a:c3:69:de:4d:95:61:03:66:27:
                    e2:9e:22:46:b2:cb:9f:4a:c6:47:58:e5:ec:7b:57:
                    dd:1a:0e:f4:57:27:21:c5:ec:3b:92:24:62:63:82:
                    d9:8d:ec:30:be:79:15:3d:df:de:df:14:b2:60:56:
                    23:db:5b:fa:07:af:81:db:5c:54:6e:a1:e0:a9:32:
                    17:b8:e4:aa:8a:7b:08:b0:d3:62:e6:e9:31:62:8c:
                    80:80:b7:d2:0a:c3:21:98:81:2f:d8:67:4f:58:ae:
                    6a:7c:54:33:a1:22:fa:98:06:2f:fd:4d:b1:51:5c:
                    26:64:44:f0:f6:e1:8f:37:0c:8f:ac:14:9c:b8:1a:
                    71:25:59:db:2b:59:2d:ae:38:d2:4e:53:dd:f2:aa:
                    72:f6:3b:d8:ab:1a:04:01:b7:23:04:30:3e:3e:88:
                    df:74:b2:4b:0e:99:2c:70:8f:a1:d9:9f:99:18:24:
                    ad:fc:23:ec:b8:5a:e1:89:15:85:9c:79:c3:b0:3a:
                    89:f9:fb:30:27:47:76:4c:45:4e:e8:14:48:0c:0c:
                    31:7f:86:90:f0:0a:74:c8:38:40:a8:e3:79:78:78:
                    e2:44:3b:f0:c1:b5:d3:7c:0e:b9:d1:27:f3:af:e4:
                    32:52:2c:b6:d2:4e:96:d1:f9:b4:f6:b2:da:ef:7f:
                    82:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:71:E5:EF:63:DE:A2:49:D1:F2:FC:05:7F:2A:95:64:CD:D5:FF:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/188aea0d-b90f-32fa-bf3f-d8f5d93f0eb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.94.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:b9:6c:b6:ae:53:a2:b6:cb:63:53:ed:c4:a6:a9:d5:1e:26:
         4d:52:ab:7c:8b:ea:39:fe:43:86:d2:6d:a2:24:18:c6:e4:68:
         a5:de:73:f2:bf:a5:84:fd:c8:0c:a7:1a:3c:18:f8:88:f3:fb:
         e5:67:54:12:cf:c0:10:57:e5:fa:4a:60:dd:78:2e:9d:42:0d:
         cb:22:f9:7d:b9:9b:0c:a9:b2:46:83:28:4b:0a:4f:9e:d9:50:
         d3:4a:44:4f:5b:0b:15:07:c1:54:cc:4f:42:45:a1:c1:9b:c7:
         a5:36:8d:b7:8e:ad:74:14:3a:d1:5f:7d:e1:16:a3:46:79:d5:
         25:7f:20:32:63:e8:90:f6:88:d4:54:66:c7:27:fb:dd:a9:bd:
         65:c1:b7:79:66:92:89:6a:ae:a0:78:c8:96:1b:e2:9c:62:7c:
         fa:59:21:9d:88:f5:9b:6a:bf:18:0d:f7:7a:b6:b0:f2:2b:b4:
         d8:3f:0c:56:91:8a:87:27:b8:3a:5d:f2:02:83:ee:57:a7:7b:
         11:16:94:a5:9b:42:aa:a8:60:cd:ee:34:ee:b1:fd:87:39:38:
         a6:03:16:0f:0a:c6:94:b9:ea:76:ec:f3:b2:06:69:c3:d3:a5:
         7d:bf:54:cb:fa:1a:9f:93:4e:96:3c:1e:99:a2:7b:60:58:2e:
         58:20:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:41:20 2025 by rpki-client