Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0cbe1ba2-41b2-3ad7-a9dd-5d782d4987ce.roa
File:                     0cbe1ba2-41b2-3ad7-a9dd-5d782d4987ce.roa (raw, json)
Hash identifier:          dkNu3YvJiK7vOWbGbccyUabxHIjoxgJhGQRf2l4HtCI=
Subject key identifier:   0F:F4:00:D6:56:17:26:66:EF:10:32:B7:C8:01:5B:29:3F:04:B1:3D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847BCB0E0C67CCDA0E77EE6BCC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0cbe1ba2-41b2-3ad7-a9dd-5d782d4987ce.roa
Signing time:             Fri 01 Nov 2024 17:28:18 +0000
ROA not before:           Fri 01 Nov 2024 17:28:18 +0000
ROA not after:            Thu 30 Jan 2025 18:28:18 +0000
asID:                     11798
IP address blocks:        136.0.133.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:b0:e0:c6:7c:cd:a0:e7:7e:e6:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov  1 17:28:18 2024 GMT
            Not After : Jan 30 18:28:18 2025 GMT
        Subject: CN=bd2ba010-29f5-488d-b0ac-0b4907c0a1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:91:c5:3a:18:28:ca:b7:7f:c1:ee:83:db:5f:
                    ab:07:9c:81:b8:0f:00:af:fd:62:84:f8:0e:03:3c:
                    4a:60:8a:a0:28:dc:d6:f3:b2:5c:f6:7c:de:0a:a7:
                    10:c2:1a:32:ac:06:64:5c:b6:c1:df:6c:ee:dc:90:
                    01:78:1c:fd:86:a4:11:95:f1:ac:e7:56:e9:be:83:
                    e9:a1:af:67:88:2c:97:62:01:74:4e:66:d5:35:9e:
                    54:31:e3:63:46:5e:81:26:05:d8:e6:68:61:5e:be:
                    71:ee:e6:f4:8c:d8:43:0e:27:6d:73:db:77:3f:d5:
                    13:0d:66:71:9d:05:83:05:d9:ee:ae:67:5a:d5:b9:
                    24:1d:31:1b:8a:f9:18:a0:dc:e6:40:15:33:1a:d1:
                    f2:a3:2e:07:81:f6:ad:b7:40:bb:68:a4:a5:f1:26:
                    1a:43:dc:96:1f:ec:16:19:ae:59:e4:35:79:98:b4:
                    02:4d:75:b6:59:42:36:ac:1b:7d:c8:0a:73:ba:26:
                    d2:88:30:60:d8:f3:30:92:26:a7:c1:bd:ac:49:d5:
                    f4:25:38:3d:82:64:28:22:bc:32:20:d8:ad:cb:91:
                    b6:59:94:d4:4e:32:25:63:01:da:e5:7f:1b:a8:86:
                    1a:e1:e9:13:25:64:f8:2d:18:2e:4c:f5:62:42:29:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F4:00:D6:56:17:26:66:EF:10:32:B7:C8:01:5B:29:3F:04:B1:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0cbe1ba2-41b2-3ad7-a9dd-5d782d4987ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:57:fc:c6:f0:39:ed:d8:1c:c5:e0:95:77:b8:a4:f6:00:8c:
         02:dc:3c:4e:4d:63:81:45:bb:23:9d:75:29:af:4c:6b:1f:ae:
         0e:9f:7d:20:22:ac:68:5b:c7:dc:08:e7:b0:9d:19:7d:b5:b6:
         1b:50:1a:9e:c4:4a:4b:8b:5e:a1:6b:f2:7c:b4:b2:11:c3:c0:
         2d:2c:bd:53:08:a7:ac:5b:3c:ad:a8:fc:33:00:82:b4:8b:f6:
         cb:4b:ca:8f:da:5a:6e:31:b0:09:5b:ce:76:ea:d7:f1:d9:54:
         b9:84:d5:da:9b:23:4a:7b:fa:d6:fa:a7:79:aa:00:3d:6e:34:
         5c:45:f3:09:42:87:d0:69:9e:d5:d9:c6:3f:d1:57:98:e2:c3:
         68:9f:eb:93:42:09:a9:23:29:14:90:cc:37:c8:0d:09:5b:f9:
         88:1e:30:68:d5:a7:96:56:f2:ca:ba:a6:3a:ef:d9:a1:9f:35:
         1b:4e:3e:f4:d0:49:80:84:7d:c7:36:b0:19:46:6c:ef:76:c0:
         f4:41:e3:92:ed:b6:54:6a:d2:ea:95:fc:ae:84:29:1a:ab:67:
         e3:03:6b:ff:5f:e7:5e:57:ab:b2:7c:c2:1f:93:ac:97:a7:36:
         2e:ff:7a:e7:99:ce:db:b4:bd:32:8d:6c:20:0f:52:1e:db:ff:
         e5:59:9b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:45 2025 by rpki-client