Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/135cca84-aa30-335c-a0df-e6ecea68c5ec.roa
File:                     135cca84-aa30-335c-a0df-e6ecea68c5ec.roa (raw, json)
Hash identifier:          w6B9tDJP3BLzlkm4c4lDCHUaElPEEUhqb3T7xymb7bw=
Subject key identifier:   7F:C2:BA:D4:84:E1:D9:71:BA:9D:51:67:04:56:92:71:9B:EC:26:5F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858470FB1A11073DE4AD818C93948
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/135cca84-aa30-335c-a0df-e6ecea68c5ec.roa
Signing time:             Sat 31 Aug 2024 18:14:59 +0000
ROA not before:           Sat 31 Aug 2024 18:14:59 +0000
ROA not after:            Fri 29 Nov 2024 19:14:59 +0000
asID:                     214485
IP address blocks:        166.88.133.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0f:b1:a1:10:73:de:4a:d8:18:c9:39:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 31 18:14:59 2024 GMT
            Not After : Nov 29 19:14:59 2024 GMT
        Subject: CN=48d62517-71c1-443c-ae97-32587acf0a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2e:49:58:83:ed:97:27:3f:9e:55:a4:99:fb:
                    78:72:a6:3a:6c:22:e6:97:ed:22:79:9e:79:cf:62:
                    8c:40:33:96:67:14:33:85:c5:37:15:cc:26:90:4f:
                    ff:bf:d5:b1:35:9d:dc:a3:a0:ee:fb:f7:59:d3:34:
                    04:06:99:88:60:6c:37:e6:dc:c3:cd:a0:95:8f:0e:
                    05:c5:64:da:1c:c8:96:ae:a8:9a:86:18:d2:aa:14:
                    40:64:79:c7:5e:46:ce:1d:09:7d:70:32:25:9c:f8:
                    5c:25:9e:62:57:f4:d0:27:51:a8:ff:f4:c4:52:31:
                    0a:5e:4a:10:cc:b8:fd:bd:f9:2e:6e:3c:9a:8a:d3:
                    ec:8c:06:2e:58:51:72:88:1a:d5:e8:79:af:87:33:
                    cb:03:ef:24:ed:a9:58:2c:59:6f:d1:a7:a0:b4:8e:
                    b1:52:e7:9b:cf:74:ed:7e:e9:6f:10:de:77:d7:08:
                    e0:9b:13:52:4a:db:3d:c0:08:33:73:b2:11:9a:9c:
                    7c:d4:5a:a5:d5:d4:4a:25:ab:d0:d3:0f:12:cb:d1:
                    31:34:04:6f:9b:c6:82:05:cb:1b:08:a4:2e:ee:d7:
                    83:dc:d5:29:69:85:4b:fe:b8:ce:ae:9e:1f:cd:0b:
                    ee:4d:b4:9d:46:66:6e:bb:ce:99:e2:95:2e:35:8a:
                    f5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C2:BA:D4:84:E1:D9:71:BA:9D:51:67:04:56:92:71:9B:EC:26:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/135cca84-aa30-335c-a0df-e6ecea68c5ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:08:50:d4:23:4d:24:a3:14:af:05:01:a8:5b:e7:31:7c:2a:
         b1:a8:ee:9d:b0:94:c3:94:30:01:30:7d:f3:e3:40:83:fd:e1:
         36:13:2f:45:ab:5f:67:dd:d4:34:09:53:6e:ed:1a:1c:71:81:
         c8:76:5f:ef:19:7c:d9:eb:3c:35:2b:1a:5a:29:7d:11:dd:16:
         e1:90:5d:90:76:e9:6b:67:33:0c:43:3e:15:a2:c3:36:0c:67:
         2e:fa:32:f7:46:55:88:ab:1d:8d:53:15:ab:37:4e:fc:d9:7f:
         86:ad:10:bb:2e:d2:f0:0d:c9:17:23:da:23:06:e4:ed:18:e5:
         2e:a8:a3:78:aa:3f:bf:3f:e2:81:9d:e2:2f:8c:1d:9b:1d:70:
         8c:5f:22:ad:a8:a3:bc:48:4f:42:57:1e:87:d3:d2:a7:1c:f4:
         0f:6c:11:45:58:1b:c0:02:b6:a2:21:24:18:d4:cb:c2:b9:b3:
         b8:78:46:85:56:30:be:15:39:8b:55:b2:08:c3:ab:a4:03:2c:
         8b:ef:0b:8d:d4:f8:6a:1d:e3:73:fd:80:fa:70:9b:ce:e6:34:
         9c:71:bd:9e:9f:f4:e2:20:72:53:08:75:d6:bb:b6:d3:6e:7d:
         4d:3c:4f:4b:23:e7:00:69:5c:16:87:dd:c9:55:e5:16:74:fa:
         0d:5a:d2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:10:52 2025 by rpki-client