Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/f95c0e9d-c5db-39e9-b677-b19ee4dd191a.roa
File:                     f95c0e9d-c5db-39e9-b677-b19ee4dd191a.roa (raw, json)
Hash identifier:          Qz+E5cEjDkGMqcJCGxpgDEWhwNUejoonFyUDe5Gqw1w=
Subject key identifier:   5E:EA:DF:1A:BA:05:5E:8D:D0:84:9D:CA:15:D2:74:72:3A:C5:00:06
Certificate issuer:       /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Certificate serial:       010D0C9F43285848D720921B567BB08908AC6600
Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/f95c0e9d-c5db-39e9-b677-b19ee4dd191a.roa
Signing time:             Mon 10 Feb 2025 21:31:18 +0000
ROA not before:           Mon 10 Feb 2025 21:31:18 +0000
ROA not after:            Sun 11 May 2025 20:31:18 +0000
asID:                     213683
IP address blocks:        23.134.52.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:20:92:1b:56:7b:b0:89:08:ac:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
        Validity
            Not Before: Feb 10 21:31:18 2025 GMT
            Not After : May 11 20:31:18 2025 GMT
        Subject: CN=bfbe49dd-bac8-494d-9b60-ce38084ed9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:13:ae:70:72:4b:f6:41:89:d6:f9:8f:43:
                    5e:cf:7d:b4:97:1f:6f:8f:d0:f1:ea:96:9d:87:ee:
                    40:8e:81:ce:90:8d:0b:37:24:a1:21:ff:fb:24:e2:
                    f3:ac:8a:79:18:c6:d7:79:8a:04:4f:7d:d4:a2:51:
                    b0:a6:d2:b5:3d:bd:d2:cc:77:26:e0:a2:89:32:3c:
                    ae:e5:a5:4c:7f:a3:63:a1:db:e8:68:f8:c5:9b:84:
                    87:56:98:33:8a:7e:3b:a3:d1:47:51:12:1f:60:22:
                    d7:62:97:6d:00:c3:cd:ee:c4:d5:85:f0:68:83:ac:
                    ff:a8:07:d9:15:68:81:1d:9a:69:53:5f:32:c1:89:
                    c1:d8:8c:76:95:5e:c0:17:aa:0e:68:c2:31:b3:a4:
                    da:64:c3:a7:8e:28:0b:ba:4a:22:0d:8c:6e:e8:ab:
                    b9:9c:5b:04:22:55:e4:9e:6f:eb:93:54:e5:04:c0:
                    6e:00:9f:e9:27:d4:5c:ba:87:8e:a5:8e:2f:56:52:
                    58:88:2e:fc:99:66:08:0e:0a:e0:42:dd:1c:6f:d8:
                    a4:ac:d6:f1:47:75:91:9a:09:81:b3:ba:3c:6a:08:
                    df:38:0a:00:fb:7d:0a:96:ea:dc:e9:f3:c0:8d:16:
                    43:92:54:84:2a:c9:74:50:76:48:83:60:e1:af:c9:
                    bb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EA:DF:1A:BA:05:5E:8D:D0:84:9D:CA:15:D2:74:72:3A:C5:00:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/f95c0e9d-c5db-39e9-b677-b19ee4dd191a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl

            X509v3 Authority Key Identifier:
                keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:77:bd:4c:34:c4:36:41:c5:c4:46:48:de:4f:71:ad:a4:eb:
         a6:7c:0a:fe:6e:d1:56:08:33:20:69:e4:99:9b:33:44:bc:d6:
         f8:74:a9:e7:74:ef:5a:3b:0b:3e:1f:d5:13:1c:0a:35:f0:03:
         5f:34:ac:fb:17:e1:a4:51:5a:32:e0:49:07:4f:ef:25:85:ee:
         87:50:da:3b:fe:03:37:8a:0c:28:1e:f2:48:ad:9d:93:c3:7e:
         5d:86:d7:68:11:ac:f5:eb:59:58:58:bd:77:ca:32:b1:aa:15:
         eb:e1:43:68:cd:0c:69:a2:48:d8:18:74:f2:1d:7c:c6:9a:6a:
         f5:d1:00:08:e1:a5:ab:0c:78:be:69:79:97:9b:7b:1c:93:0c:
         5c:fe:ae:0e:d5:40:a5:5f:18:18:18:49:27:7c:19:01:3a:b4:
         15:fa:e6:5b:64:9b:ab:c4:8f:4d:70:30:16:77:0b:5b:18:03:
         00:e0:c8:9e:d4:d3:dc:91:20:c8:e8:1d:5f:e2:6b:61:06:51:
         dd:30:37:fc:60:97:b4:56:06:b9:75:79:ff:fb:15:67:13:d8:
         b2:59:7c:25:cd:c8:36:4c:07:8f:35:75:d1:23:0d:53:bd:75:
         cc:5c:0e:12:51:06:bb:31:64:2a:cd:51:6a:ce:92:40:67:73:
         cc:53:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:31:28 2025 by rpki-client