Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0263507-a955-44be-8533-02e9941fd351/bcd04b9f-4494-303a-b487-aa50eb319ac5.roa
File:                     bcd04b9f-4494-303a-b487-aa50eb319ac5.roa (raw, json)
Hash identifier:          fL8UDG7z+JfIdvHm+SiGw2yphlFhfikW+qgVB7aQSt8=
Subject key identifier:   16:FE:F6:63:69:03:46:EA:63:E2:6D:AF:85:04:15:56:82:5F:8D:9D
Certificate issuer:       /CN=c0263507-a955-44be-8533-02e9941fd351
Certificate serial:       010D0C9F43285844F9F8AACF4836D58A1A732FA0
Authority key identifier: 98:E6:EF:5F:57:88:A0:B4:8E:B4:F0:D9:5E:17:10:0C:17:8E:A3:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0263507-a955-44be-8533-02e9941fd351.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0263507-a955-44be-8533-02e9941fd351/bcd04b9f-4494-303a-b487-aa50eb319ac5.roa
Signing time:             Thu 22 Feb 2024 13:56:27 +0000
ROA not before:           Thu 22 Feb 2024 13:56:27 +0000
ROA not after:            Wed 22 May 2024 12:56:27 +0000
asID:                     54617
IP address blocks:        192.69.102.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f9:f8:aa:cf:48:36:d5:8a:1a:73:2f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0263507-a955-44be-8533-02e9941fd351
        Validity
            Not Before: Feb 22 13:56:27 2024 GMT
            Not After : May 22 12:56:27 2024 GMT
        Subject: CN=6e01b3fc-b374-4637-b4a1-08a74f341cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:1f:45:68:c4:a3:33:e5:ca:d4:ca:fe:7f:
                    66:b4:6c:6d:04:36:bd:ee:91:ba:7c:95:b1:7a:a5:
                    ca:06:08:77:3a:5d:82:76:d0:5b:de:5d:1e:04:65:
                    bf:94:96:33:5f:0a:ff:02:f7:a7:27:d8:b2:c0:6e:
                    65:ce:42:48:b4:0c:63:db:13:a2:29:04:a0:43:31:
                    6c:ed:3c:74:7e:35:65:99:05:ca:f4:93:81:df:ea:
                    aa:09:4f:79:66:06:a1:b9:1a:8a:d7:60:ea:db:9f:
                    fb:86:b6:92:5b:44:21:39:c5:ef:c6:72:f5:1d:1d:
                    72:18:04:d7:02:c1:28:4e:f9:2c:69:ca:d6:17:eb:
                    01:34:8e:2c:21:5b:94:53:3b:ea:eb:eb:ce:e9:4f:
                    a2:67:fd:c0:6b:a2:13:34:4e:05:4d:f0:a0:39:40:
                    ec:56:ac:92:f0:cb:c2:4a:fe:c5:e1:46:4c:0b:f1:
                    5b:a3:ab:bb:40:01:ab:0b:f1:c5:71:b1:4c:d4:ff:
                    e8:d1:0d:71:2a:b3:d4:62:74:6b:92:13:bd:40:3f:
                    24:f5:3a:7f:80:80:d9:09:55:a5:74:9c:21:b1:46:
                    91:b5:c4:2c:35:cc:0d:17:75:a6:80:4f:62:1b:fa:
                    91:01:06:5e:9c:5e:f0:f7:c9:ae:a6:2e:19:0b:03:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FE:F6:63:69:03:46:EA:63:E2:6D:AF:85:04:15:56:82:5F:8D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0263507-a955-44be-8533-02e9941fd351/bcd04b9f-4494-303a-b487-aa50eb319ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0263507-a955-44be-8533-02e9941fd351/c0263507-a955-44be-8533-02e9941fd351.crl

            X509v3 Authority Key Identifier:
                keyid:98:E6:EF:5F:57:88:A0:B4:8E:B4:F0:D9:5E:17:10:0C:17:8E:A3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c0263507-a955-44be-8533-02e9941fd351.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:95:ea:b6:5f:36:79:e1:c5:49:01:59:3d:bd:e9:4b:2d:b4:
         6f:75:5f:50:4e:3e:75:f9:30:2c:c6:ee:70:74:cd:26:c0:a2:
         9a:26:f1:3b:9b:fd:13:15:e3:a4:2a:b7:60:f3:4a:96:ac:2e:
         4a:ab:ca:cd:c4:92:25:3f:11:f4:97:36:5f:4b:b4:71:68:0b:
         1e:84:85:e1:bd:a0:ed:42:94:f2:ac:9a:6e:61:db:0a:5b:79:
         64:61:79:26:b2:3d:d2:94:68:2f:cc:98:e0:63:0b:46:f6:06:
         3c:08:1d:25:d2:a4:c1:27:a1:b1:a5:08:a3:3f:2d:57:c6:a0:
         a7:2b:e9:12:9c:9c:17:de:83:c1:20:aa:39:5d:29:11:d5:81:
         be:bf:86:c3:d5:f8:e3:aa:a6:dc:8d:ac:3d:e5:66:1e:34:40:
         71:2d:9b:13:99:0d:87:db:35:fd:4e:69:73:75:4d:56:1a:95:
         61:2f:36:37:c0:02:a4:d4:c7:be:d3:f6:23:50:cf:3a:42:af:
         c4:7e:db:19:c7:8b:1c:d4:68:6e:1d:58:cb:4a:31:ac:94:73:
         a4:57:f8:5b:a2:0f:23:23:58:f5:27:d0:61:84:93:35:a0:23:
         61:b9:c8:ef:df:6b:50:59:6d:79:12:1d:2a:62:96:32:92:49:
         56:0a:b2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:14:37 2025 by rpki-client