Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e0584fd-f680-3a88-985b-db4a66bad10e.roa
File:                     2e0584fd-f680-3a88-985b-db4a66bad10e.roa (raw, json)
Hash identifier:          ED9fElEaNfhB0MFLEvuDfi2nTc8vPHMjURYOwxHvosE=
Subject key identifier:   65:B0:0D:A1:95:73:22:F4:45:21:7D:68:AB:DE:E2:F4:6C:C1:49:E8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847827E8AD21E6EFA2B70395F80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e0584fd-f680-3a88-985b-db4a66bad10e.roa
Signing time:             Fri 11 Oct 2024 21:10:00 +0000
ROA not before:           Fri 11 Oct 2024 21:10:00 +0000
ROA not after:            Thu 09 Jan 2025 22:10:00 +0000
asID:                     7385
IP address blocks:        142.111.63.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:7e:8a:d2:1e:6e:fa:2b:70:39:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 11 21:10:00 2024 GMT
            Not After : Jan  9 22:10:00 2025 GMT
        Subject: CN=6582fddc-75f0-460d-8071-adde5e612bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:ad:da:aa:dc:6c:fe:c0:6a:b8:c6:73:60:
                    e4:3e:d8:82:30:90:65:62:5d:59:98:0d:8c:bf:05:
                    5c:c9:25:55:db:1c:05:de:1c:87:dc:51:21:8d:7e:
                    08:03:15:0d:3f:9f:04:36:ff:5d:a7:50:c8:23:f1:
                    ac:78:1b:a0:fa:41:58:c2:7c:a0:78:e4:c7:31:68:
                    a5:6d:4e:ad:d0:96:9e:8a:4b:98:b0:9b:e3:ae:1d:
                    f0:f1:65:65:3d:9b:ae:f3:ed:b8:b9:6c:60:a4:90:
                    70:d8:bd:9e:d3:db:dd:97:11:6c:39:e1:2a:71:70:
                    8d:73:15:cb:f3:2d:78:4e:31:73:15:4e:69:70:d0:
                    7b:81:21:39:da:52:10:09:c9:bf:a9:43:b5:06:65:
                    de:c0:5d:dc:57:2e:f1:4e:6a:84:37:d7:a1:d8:e0:
                    27:68:12:64:ff:9b:53:9e:04:49:d3:4e:a0:78:8e:
                    a9:9d:5a:25:3c:58:1f:e8:16:9a:bd:bf:15:05:83:
                    80:8d:b7:9f:f2:ad:76:f5:3d:6d:cc:32:2d:2e:42:
                    3d:b0:6d:6e:99:da:04:61:96:0f:7e:47:1d:2e:78:
                    cb:a7:48:fd:40:29:55:1e:9f:bf:1e:ac:75:d8:f3:
                    9f:47:c1:4c:f6:b2:14:36:6d:38:6f:0e:47:03:ef:
                    03:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B0:0D:A1:95:73:22:F4:45:21:7D:68:AB:DE:E2:F4:6C:C1:49:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e0584fd-f680-3a88-985b-db4a66bad10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:48:b2:16:14:68:25:48:24:56:31:03:1c:0f:41:d6:87:0d:
         81:6c:d8:f4:e2:7c:1a:69:36:33:8c:29:9a:96:fc:92:12:f7:
         b1:8f:5f:4a:a9:f2:9b:f4:a1:52:a5:0b:66:30:f7:10:55:3e:
         cd:49:f7:81:06:c9:9b:c1:2c:0e:12:90:bf:96:40:a1:38:4e:
         5b:61:52:ac:3b:1f:2f:07:57:1b:f0:a9:cd:15:21:fa:91:17:
         be:e7:02:a7:02:82:76:b4:f5:d7:39:cb:e4:7c:b8:88:96:35:
         97:f4:27:50:4d:8f:b3:50:7f:ee:8c:01:4a:9f:cd:9d:88:fb:
         5c:54:73:79:77:78:d4:43:33:1c:e7:f7:27:64:09:be:40:d6:
         de:f7:c7:ff:4b:98:5d:a0:f8:e3:88:a2:d1:e2:ed:da:eb:51:
         77:7c:af:77:41:7e:7b:b4:ac:a0:c3:66:59:95:54:71:47:e7:
         41:10:22:ae:67:f1:d8:bf:05:97:7d:2d:6c:9f:0c:c9:d8:24:
         b3:f0:e8:9a:2e:40:a1:20:23:7a:3c:e8:1f:3d:c8:10:18:ff:
         64:ff:54:f9:15:28:8f:cd:75:53:63:f9:d8:ae:e3:f4:cb:35:
         10:c3:f5:17:b5:54:f9:2f:49:db:56:40:1d:33:6f:93:84:09:
         76:fa:92:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:39:36 2025 by rpki-client