Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30de9a42-e42f-309d-8ca6-4f59ef8b3fd7.roa
File:                     30de9a42-e42f-309d-8ca6-4f59ef8b3fd7.roa (raw, json)
Hash identifier:          LSX637w5/5qdSWOnYv4tIqHFADdUlDo5pKSfzvlGpUE=
Subject key identifier:   D2:48:B4:14:53:98:B6:E6:3B:A8:9F:15:C9:E3:1A:6D:63:03:8B:33
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858430A12040A25CD64B8B18C2180
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30de9a42-e42f-309d-8ca6-4f59ef8b3fd7.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        104.154.124.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:12:04:0a:25:cd:64:b8:b1:8c:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=5532af56-b033-4f45-8bcb-996ccf8dc575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a6:6c:7a:e3:91:62:ec:91:cb:03:9d:0a:6e:
                    a9:ad:b9:f7:d8:85:89:d5:68:d4:64:e9:50:66:87:
                    81:d0:89:2e:0e:1d:80:dd:48:0c:b6:1d:eb:7e:b6:
                    bd:56:11:21:6a:61:bf:49:07:e9:b1:d1:25:ba:7e:
                    7b:cd:17:c9:cf:d5:a2:d8:90:d5:4f:97:99:0a:bd:
                    1f:9e:13:1b:da:37:a5:40:d8:16:a7:34:00:23:21:
                    b0:49:cc:71:1a:a5:2f:f6:73:5d:00:b8:7d:23:54:
                    83:f9:be:2e:53:3a:a3:94:f1:3e:6b:34:f9:bf:ff:
                    c8:ed:ea:91:bb:6a:91:c0:65:4f:c8:8b:5c:92:26:
                    0f:99:6a:4e:65:63:0c:bc:1d:6c:e6:8e:c0:97:c8:
                    80:25:50:2b:a4:e7:92:5b:8e:f1:c4:43:c3:5a:3c:
                    82:27:0b:69:30:93:d4:f5:94:21:9f:df:b9:6a:38:
                    b7:00:0d:28:e1:82:3f:55:ad:3c:8b:b5:7b:ee:ef:
                    e9:59:dd:ee:8e:95:1b:95:7b:6e:5f:4d:d5:93:b3:
                    2b:89:14:5c:b2:91:83:ad:00:b2:e4:1b:2e:91:75:
                    e1:51:b3:ca:e6:88:f2:2c:de:4a:b1:da:fc:2e:69:
                    ac:8c:01:6d:48:bd:22:fd:ef:9d:a7:71:e6:c4:ee:
                    d9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:48:B4:14:53:98:B6:E6:3B:A8:9F:15:C9:E3:1A:6D:63:03:8B:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/30de9a42-e42f-309d-8ca6-4f59ef8b3fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.154.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c0:6d:d8:d7:2d:64:c8:99:b7:48:01:16:84:56:c8:14:4c:
         04:71:31:a3:5e:b7:7b:25:08:dd:ca:c1:4f:80:c9:5b:99:81:
         8b:38:04:f1:08:3f:6e:03:ef:fb:a8:5e:88:47:82:fa:6f:62:
         9d:10:0f:c6:78:7d:94:1f:6a:84:49:39:cd:e2:a2:ce:f1:47:
         42:48:19:24:8e:42:7b:a6:c7:1b:ff:00:9a:3b:d2:5d:c0:89:
         bf:ab:c9:dc:7c:3a:6f:98:ac:c7:9c:bc:81:45:10:b6:47:9e:
         1e:89:3a:60:df:32:bf:cd:11:cc:f4:3c:0d:7e:eb:72:ab:59:
         48:84:49:ae:c8:a5:1b:a0:29:58:f7:9f:d0:f4:14:5b:48:0c:
         00:c4:ec:9f:c1:e5:a7:84:d7:57:be:6c:32:05:52:99:e3:a7:
         bd:eb:41:f5:0e:7f:40:de:4a:2f:c2:aa:25:7a:22:e7:c8:2f:
         08:82:22:9d:0b:d9:37:69:60:52:45:72:b2:63:8e:c0:9d:8f:
         c7:a1:b3:7c:36:f2:84:d3:8b:09:1d:71:be:44:c5:d4:7e:96:
         06:32:0f:41:2c:1f:27:ad:2c:ea:b4:bf:3d:32:30:ae:b7:f6:
         8e:7e:79:21:1f:9e:56:1f:65:18:9c:aa:6b:68:b5:39:37:24:
         22:fb:ca:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:22:22 2025 by rpki-client