Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1f22e4d0-defe-3941-b59b-a206dd983275.roa
File:                     1f22e4d0-defe-3941-b59b-a206dd983275.roa (raw, json)
Hash identifier:          zkURwqDYto3a3pXY2wuiXK01uPxSV+Jig4kQiTSZJUg=
Subject key identifier:   AD:7B:ED:75:7A:0A:31:0D:C9:E4:B2:55:7B:18:1D:8A:23:0E:FA:19
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858471AA36AC281B7348B3F2CE680
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1f22e4d0-defe-3941-b59b-a206dd983275.roa
Signing time:             Wed 04 Sep 2024 16:20:14 +0000
ROA not before:           Wed 04 Sep 2024 16:20:14 +0000
ROA not after:            Tue 03 Dec 2024 17:20:14 +0000
asID:                     11798
IP address blocks:        142.111.35.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:a3:6a:c2:81:b7:34:8b:3f:2c:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  4 16:20:14 2024 GMT
            Not After : Dec  3 17:20:14 2024 GMT
        Subject: CN=c6b268b3-a730-44de-9e9e-d835e31f0cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e3:c0:09:fa:8f:b0:d1:41:ff:2b:bc:7e:55:
                    96:d8:65:6d:bf:d3:b1:3b:06:d0:46:cb:82:e1:a0:
                    ef:3b:13:4f:bc:9f:5f:18:ba:07:8c:dc:82:f9:d0:
                    36:1d:e3:93:38:3c:fa:d5:6e:f4:dd:ef:8a:60:9c:
                    2e:51:f5:3e:32:ad:98:62:46:91:14:dd:a1:41:bf:
                    0f:c2:67:4e:b5:94:3a:59:75:72:2d:ed:78:22:4a:
                    f8:53:b0:ea:66:0d:2e:b4:7d:1d:97:5b:a3:3b:b4:
                    21:30:8f:7e:ac:bc:1d:82:bc:44:d8:3f:fa:f4:57:
                    5d:23:bd:cd:48:a6:bb:04:7d:3b:fd:3c:34:f0:50:
                    03:58:57:97:cf:fa:26:b4:a2:ce:85:61:98:44:92:
                    b9:43:15:bf:2c:d4:65:cb:2a:34:3e:22:e8:83:b1:
                    1d:d4:68:98:ae:6e:32:4e:6e:ad:e9:d0:36:1a:9a:
                    43:d1:94:53:6f:7a:9e:4a:1a:3f:6a:42:46:e3:7b:
                    e6:d1:e1:1c:12:0c:9e:61:15:4a:54:24:08:6f:3f:
                    a3:4a:57:af:8c:f5:07:5d:19:f9:77:3a:ba:b7:22:
                    7d:89:31:cf:a7:80:0f:87:5d:ef:0d:fc:fd:6b:f6:
                    df:89:19:0e:d2:54:16:e4:11:07:1f:30:49:5c:f1:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7B:ED:75:7A:0A:31:0D:C9:E4:B2:55:7B:18:1D:8A:23:0E:FA:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1f22e4d0-defe-3941-b59b-a206dd983275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:53:cf:eb:00:6d:ef:23:c5:89:07:c2:71:2d:ca:0c:ca:74:
         52:9e:67:de:30:e0:7a:1b:f4:23:33:9c:c6:3b:08:4a:c9:a3:
         33:b8:db:4c:6e:14:a5:35:42:06:13:13:a2:59:d2:82:ed:70:
         b9:01:6a:da:aa:96:fe:9f:60:1f:82:77:1b:84:91:22:08:45:
         2a:1f:4b:17:f6:bb:0e:cd:5a:e0:31:ec:6a:84:92:e5:84:31:
         5f:ae:3e:de:53:cf:3e:a5:80:46:78:eb:e5:d7:b6:dc:ff:f9:
         40:ac:0d:55:7e:9f:fe:2e:96:98:0a:cf:ad:eb:c2:7b:54:60:
         3d:aa:27:a4:85:39:fb:ed:42:3c:12:ca:04:0b:3e:80:42:c3:
         12:2f:e0:50:f1:9a:fb:19:fd:e5:c9:00:55:9d:eb:8b:ae:f6:
         13:0b:af:d1:5d:de:40:8c:4e:ae:29:fa:27:09:65:49:48:98:
         57:9b:60:48:2f:0e:4f:a0:49:9f:27:28:46:ab:40:fa:bd:5a:
         b2:86:2b:3b:2a:65:f0:2b:9a:50:a5:a6:0f:b0:22:d7:2a:54:
         ad:2e:d7:03:37:87:c0:ba:6e:97:c9:ee:38:06:5c:f3:cf:d5:
         e1:72:a3:c7:be:71:b8:76:80:b1:20:59:55:e6:87:7e:ad:57:
         b2:f3:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:02 2025 by rpki-client