Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/46383528-5a3b-3bef-ab6f-296b1c058383.roa
File:                     46383528-5a3b-3bef-ab6f-296b1c058383.roa (raw, json)
Hash identifier:          Acubdg2iuuA3+9gNOAvgQEqVPIKk/1jdREhdBFMxC0U=
Subject key identifier:   92:6B:EF:75:87:B8:90:95:C7:93:41:F4:99:BA:90:36:D4:42:46:1D
Certificate issuer:       /CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
Certificate serial:       010D0C9F4328584262159945C6436D6778180580
Authority key identifier: E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/46383528-5a3b-3bef-ab6f-296b1c058383.roa
Signing time:             Thu 29 Jun 2023 18:38:00 +0000
ROA not before:           Thu 29 Jun 2023 18:38:00 +0000
ROA not after:            Wed 27 Sep 2023 18:38:00 +0000
asID:                     53597
IP address blocks:        66.97.96.0/20 maxlen: 20
                          204.9.152.0/21 maxlen: 21
                          204.11.128.0/21 maxlen: 21
                          204.15.24.0/21 maxlen: 21
                          204.15.104.0/21 maxlen: 21
                          207.200.224.0/19 maxlen: 19
                          204.11.135.0/24 maxlen: 24
                          204.15.110.0/23 maxlen: 23
                          2604:9540::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:62:15:99:45:c6:43:6d:67:78:18:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c86c353d-2ae4-4a28-8df7-0a906b7c6963
        Validity
            Not Before: Jun 29 18:38:00 2023 GMT
            Not After : Sep 27 18:38:00 2023 GMT
        Subject: CN=d4b66b32-a546-4a95-93c2-f832dc518d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a0:f7:27:a2:d1:69:b7:31:66:b8:14:8d:d4:
                    80:62:e7:35:83:7b:8f:14:92:82:cb:fd:e3:b7:cd:
                    c9:7b:46:9e:af:d0:1e:37:95:81:c6:10:1c:3d:73:
                    c6:47:a9:b1:d9:b1:b2:fc:3c:8d:76:7c:0a:49:81:
                    2e:21:ab:ec:02:fa:01:b0:80:b2:e6:6e:30:a6:b9:
                    31:ed:e9:94:dc:ae:49:d6:10:8d:ae:1b:3a:ed:32:
                    87:4a:1e:6f:9b:9e:78:9d:d4:7e:85:ac:61:f3:ec:
                    f6:5b:ca:cf:71:96:ca:34:0b:1e:a3:2d:fd:66:d2:
                    e1:45:ae:26:51:65:6e:39:87:fe:98:3f:1c:7a:c1:
                    38:b7:a5:fd:23:dd:35:fa:6e:c3:49:bc:98:f9:2c:
                    63:ee:c0:7d:91:ce:81:1f:aa:21:52:41:15:09:83:
                    41:07:a9:44:9f:00:eb:71:bb:ba:1c:0d:cd:2d:a3:
                    63:3a:37:45:79:4b:d3:b7:e9:70:af:be:5c:11:dc:
                    68:78:27:22:a9:6e:c9:be:32:33:36:12:59:9b:2a:
                    39:cf:88:70:89:52:05:20:54:d9:4f:d7:7d:2f:ee:
                    e4:45:14:36:66:c7:75:d4:17:ae:ad:7c:1e:81:fd:
                    d2:aa:fe:5b:1d:cd:60:24:02:b1:96:66:23:76:56:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6B:EF:75:87:B8:90:95:C7:93:41:F4:99:BA:90:36:D4:42:46:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/46383528-5a3b-3bef-ab6f-296b1c058383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963/c86c353d-2ae4-4a28-8df7-0a906b7c6963.crl

            X509v3 Authority Key Identifier:
                keyid:E3:D9:E1:82:0A:F3:9C:25:6C:EB:1B:B0:32:69:BE:7F:24:FD:7E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c86c353d-2ae4-4a28-8df7-0a906b7c6963.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.96.0/20
                  204.9.152.0/21
                  204.11.128.0/21
                  204.15.24.0/21
                  204.15.104.0/21
                  207.200.224.0/19
                IPv6:
                  2604:9540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ec:3e:00:bb:3c:d2:4d:7d:11:8d:74:9c:ba:1a:c4:0d:6b:
         be:ea:a6:4a:dd:6f:bd:4f:b6:5d:0e:d5:a4:91:79:e0:6e:19:
         01:54:2d:42:b1:f2:df:ad:8e:39:f9:af:5d:c8:d2:77:25:19:
         f3:5a:c6:39:68:99:1b:5a:52:c7:43:63:8b:4c:9c:37:cd:64:
         6c:e8:d8:6e:67:87:11:73:a7:fa:02:bb:32:2c:6b:46:12:14:
         37:80:4d:b4:bb:1a:18:8f:81:f0:3e:5b:56:ff:ed:79:15:94:
         a7:4b:80:c1:c9:2b:22:2c:0f:f4:17:c8:5d:a3:90:eb:dc:60:
         d5:10:30:4f:ff:af:cf:4c:cb:06:e2:b8:66:8c:36:23:c7:da:
         c2:7e:d2:e8:fe:ee:1c:d3:11:d7:72:fb:52:40:16:4a:a2:64:
         e3:9b:4e:8e:ae:b0:a3:a2:bc:81:fb:17:d2:82:e1:7c:09:18:
         51:c4:01:2b:93:fc:8f:f6:34:17:a2:19:d6:5d:ee:da:51:a9:
         5f:62:1a:02:af:c6:a3:46:6d:67:38:de:54:28:52:55:09:47:
         b1:80:ce:81:60:0a:34:ee:3d:9c:11:d0:0e:36:e5:49:d3:41:
         4c:de:dc:53:41:df:24:a1:bc:de:19:59:e5:9c:c4:60:67:b5:
         a7:a4:ef:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:22:31 2025 by rpki-client