Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/4fdb293d-1e1e-37ac-88b6-e87930947eab.roa
File:                     4fdb293d-1e1e-37ac-88b6-e87930947eab.roa (raw, json)
Hash identifier:          yqMKUVC1IRADgXgpngRjZWJMU20lwioo8WuvwqthIao=
Subject key identifier:   CD:30:1C:61:05:F2:00:D2:9E:1C:04:D5:9B:85:E8:59:8D:B5:E6:59
Certificate issuer:       /CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
Certificate serial:       010D0C9F432858461FDF2F4A749F7E78F5B70980
Authority key identifier: B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/4fdb293d-1e1e-37ac-88b6-e87930947eab.roa
Signing time:             Thu 06 Jun 2024 20:32:46 +0000
ROA not before:           Thu 06 Jun 2024 20:32:46 +0000
ROA not after:            Wed 04 Sep 2024 20:32:46 +0000
asID:                     400626
IP address blocks:        206.227.69.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1f:df:2f:4a:74:9f:7e:78:f5:b7:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6406ab50-470a-4f0f-ba5e-7500a8b97cd4
        Validity
            Not Before: Jun  6 20:32:46 2024 GMT
            Not After : Sep  4 20:32:46 2024 GMT
        Subject: CN=1e0adfba-adac-4fff-9bb7-1fbdbe9ea777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:eb:52:ff:09:7f:96:eb:2c:0b:46:fb:bd:
                    e0:08:74:de:1a:0f:f8:e6:a9:56:45:04:df:39:a5:
                    bd:28:4c:6b:c6:ad:8e:45:2b:5b:ab:b9:2f:54:47:
                    b3:f0:2d:b3:5b:b4:d7:da:0a:76:6a:99:11:36:05:
                    dd:36:fa:4d:34:77:d4:ac:e5:5a:7e:fd:2c:4a:38:
                    4f:1a:cc:9b:01:57:87:fe:67:cb:1f:81:91:86:6a:
                    be:74:55:7c:46:f3:d9:cc:42:94:96:5a:22:4e:49:
                    0a:4a:7c:c8:80:a7:aa:1e:9b:47:a3:a4:e4:87:bb:
                    ae:c5:a8:6e:07:cd:9f:79:bf:be:1f:9a:e3:70:0c:
                    ea:f2:a8:f0:83:07:24:3b:c1:eb:f6:7e:25:bb:af:
                    76:9c:07:e8:bd:f3:95:8a:e2:1d:86:5d:f3:eb:58:
                    f5:6f:d3:87:9c:e7:8d:28:5f:97:96:52:5a:3e:0a:
                    0d:18:e1:79:5e:02:04:45:41:b5:53:42:07:84:ec:
                    78:10:17:33:77:9a:9f:ae:87:14:de:99:00:bd:90:
                    48:d1:7f:f2:5a:41:e7:3f:28:55:f2:f6:84:cc:ce:
                    18:d5:e5:13:ef:17:41:8d:e0:e7:3a:da:35:10:6f:
                    4a:4f:b4:9c:4d:06:24:15:68:66:a9:5d:73:c6:6d:
                    11:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:30:1C:61:05:F2:00:D2:9E:1C:04:D5:9B:85:E8:59:8D:B5:E6:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/4fdb293d-1e1e-37ac-88b6-e87930947eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.crl

            X509v3 Authority Key Identifier:
                keyid:B7:0E:58:89:ED:AB:C8:83:04:25:60:8A:16:D1:DC:4D:3D:10:42:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6406ab50-470a-4f0f-ba5e-7500a8b97cd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.227.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:ce:05:cf:83:4d:98:26:bd:17:c4:d1:19:a6:49:0d:02:
         96:e5:71:72:62:96:8a:18:a8:9d:05:9c:31:d4:37:e1:44:12:
         51:2d:6f:c9:4f:1b:19:40:04:8d:e3:6f:9d:ab:95:e1:a1:69:
         af:69:28:da:3c:44:23:d4:ba:61:48:02:20:3e:1e:04:22:23:
         f3:53:81:6e:2d:32:c7:9f:a6:c0:32:bf:f5:56:00:5c:e0:6c:
         5e:e9:0c:cc:0c:0a:d0:de:d0:05:8c:f6:bc:97:97:79:59:d8:
         a1:4d:24:b8:53:e8:8f:64:22:dc:30:95:c3:3f:66:13:83:88:
         a6:a3:5c:75:23:17:fc:a1:d4:80:87:6c:45:ae:8a:f6:3f:ae:
         70:49:69:57:a8:ff:72:86:5d:f5:5b:7e:ad:a0:ff:87:ce:dc:
         cc:2f:19:70:6a:0c:2d:28:59:f9:e5:e5:cb:54:1d:70:3d:c8:
         a4:73:bb:21:95:f2:f4:a6:ce:e5:2f:5a:78:c1:39:e1:55:71:
         71:62:87:dc:7f:bd:75:39:cf:ea:e4:9a:a5:7e:4e:7a:b8:88:
         e0:78:5b:26:b2:24:94:1e:d9:ef:73:dd:b8:9d:f0:db:83:36:
         a4:42:4a:3d:14:db:cd:a1:e1:68:a2:ce:85:09:2d:7d:3d:d5:
         ec:38:ae:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:30:28 2025 by rpki-client