Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/41201618-d2fd-359f-9e89-a449fa789a07.roa
File:                     41201618-d2fd-359f-9e89-a449fa789a07.roa (raw, json)
Hash identifier:          iVBEbiooiBFAYFl7SbhZX/4SWKhl4HkqJO4f1DNBzrw=
Subject key identifier:   6A:86:36:F2:31:FF:B2:BE:75:14:94:0B:7A:BF:20:FB:F5:BA:F4:00
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847E3C51C28A4446F016DFC9C90
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/41201618-d2fd-359f-9e89-a449fa789a07.roa
Signing time:             Fri 15 Nov 2024 17:25:36 +0000
ROA not before:           Fri 15 Nov 2024 17:25:36 +0000
ROA not after:            Thu 13 Feb 2025 17:25:36 +0000
asID:                     401152
IP address blocks:        168.93.226.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:c5:1c:28:a4:44:6f:01:6d:fc:9c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 15 17:25:36 2024 GMT
            Not After : Feb 13 17:25:36 2025 GMT
        Subject: CN=afa3e476-9588-48b0-9883-c20ed25937c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:4e:3a:7c:af:d2:ed:e9:e9:b8:e6:ce:8f:
                    23:db:46:96:09:17:12:0b:02:13:f5:6b:07:64:db:
                    bb:ff:ed:82:20:a7:d3:9f:87:a8:90:a1:5a:08:4d:
                    ba:38:13:5c:c5:60:08:2d:25:eb:04:b0:2c:2a:49:
                    1d:48:13:75:ca:a7:42:cb:6d:90:51:4f:24:56:7b:
                    c2:3e:bd:e1:3b:59:b0:72:16:3f:a6:16:90:28:d1:
                    f9:60:b3:5a:99:bc:34:b7:17:97:dc:67:18:64:d6:
                    be:3c:93:b9:57:17:66:5a:a3:6c:47:dd:e2:19:cf:
                    c6:bc:7b:39:01:4f:f0:1a:aa:7b:9c:ef:49:94:4c:
                    23:72:8e:d7:9c:f0:a2:b3:78:0a:7d:07:f5:d9:1c:
                    da:5f:ba:3c:24:cf:f4:33:8f:ba:ff:84:36:a1:cb:
                    0d:24:60:64:55:4a:2e:2b:f2:d7:b6:df:20:28:55:
                    86:5c:86:7c:22:59:5b:48:ec:05:51:e8:67:ea:e9:
                    c8:e2:51:de:78:0e:51:68:8e:bb:95:4b:ce:bc:37:
                    2c:bb:02:29:71:aa:68:db:3b:0a:b0:43:bb:6a:14:
                    f4:01:78:dd:19:20:0c:d9:67:01:8a:a6:3a:69:39:
                    76:cd:1d:d9:87:62:86:71:3b:1f:17:1e:8e:1c:bb:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:86:36:F2:31:FF:B2:BE:75:14:94:0B:7A:BF:20:FB:F5:BA:F4:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/41201618-d2fd-359f-9e89-a449fa789a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:fb:fa:63:03:c2:6f:d4:c0:04:4e:44:19:8f:56:0b:cc:bb:
         74:b9:67:6a:43:9c:70:f2:04:4c:c7:c6:df:f1:5e:70:63:2f:
         fd:16:7f:45:c1:65:0e:28:77:86:d0:1f:fe:a5:2d:c5:0a:5b:
         98:a6:30:87:97:dc:0e:be:03:8a:76:58:50:6b:21:88:df:7f:
         5b:6f:f2:f0:55:45:05:bd:f3:05:fb:4b:a5:53:a0:fa:97:a6:
         b4:8c:35:c9:63:96:f9:ac:3c:18:21:99:d8:a4:cc:08:92:96:
         fa:39:d7:a3:c5:b8:53:d2:4e:cf:23:5e:ff:49:7f:61:e6:01:
         b2:74:6f:07:d1:86:cd:b6:77:e5:ea:bb:71:98:cf:fd:89:b4:
         5b:88:35:9b:0b:dd:82:28:68:6d:21:8d:8e:8c:28:e5:b9:e5:
         87:eb:01:ce:45:03:21:04:83:37:d7:6e:5f:4e:39:2b:f4:14:
         b8:db:1d:25:35:ad:77:53:0e:4f:07:94:d9:cf:2d:48:45:32:
         58:83:77:f7:8d:65:53:09:2b:65:71:bd:7f:3c:f2:e3:09:91:
         7e:c7:c5:3f:69:19:2a:74:93:36:17:d1:11:f4:3f:e5:b8:e5:
         66:91:20:75:cd:39:0b:47:2b:77:2c:e8:b3:bc:92:35:6e:da:
         b6:ab:b9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:32 2025 by rpki-client