Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4de3334a-2794-35a8-be42-db84054fad9b.roa
File:                     4de3334a-2794-35a8-be42-db84054fad9b.roa (raw, json)
Hash identifier:          svxEOAPnM/JKBbrEUJzOi8ZUSkjY8M4AS36T0l/uENU=
Subject key identifier:   87:14:BC:37:87:81:B3:63:23:A5:2E:AF:F1:3A:03:A0:2B:00:B9:DB
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846F06020F5DDDB4168563FB400
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4de3334a-2794-35a8-be42-db84054fad9b.roa
Signing time:             Tue 20 Aug 2024 13:00:39 +0000
ROA not before:           Tue 20 Aug 2024 13:00:39 +0000
ROA not after:            Mon 18 Nov 2024 14:00:39 +0000
asID:                     18779
IP address blocks:        142.111.141.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f0:60:20:f5:dd:db:41:68:56:3f:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 20 13:00:39 2024 GMT
            Not After : Nov 18 14:00:39 2024 GMT
        Subject: CN=e6d7f41e-4d20-41b6-80fa-e6829eb70397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d8:70:bf:0d:0a:e0:83:ed:59:f6:71:d1:76:
                    c9:99:9e:99:88:90:d7:a1:80:c0:c8:78:cd:5c:79:
                    30:95:7a:b2:be:a2:d4:29:7a:89:b3:45:bb:32:0f:
                    83:90:d4:ae:d8:64:00:d2:58:ce:f4:33:5a:99:4b:
                    3a:d3:2d:b9:18:6f:6e:c8:81:3b:07:f3:31:c6:f0:
                    ef:84:69:17:6f:60:7e:a6:0b:dd:c9:de:c5:ed:34:
                    e0:f3:b8:32:fb:44:e9:b9:ff:ee:85:f4:80:72:f5:
                    ba:fd:6a:44:a1:bc:26:85:05:c8:4e:e5:38:3f:1f:
                    9e:3e:73:c0:a7:e6:15:bc:1c:b2:88:5c:4e:26:01:
                    c0:52:33:b9:a3:b5:d9:f8:7d:ea:fe:a4:dd:17:db:
                    c9:db:44:d6:99:44:e2:92:9f:dc:99:87:04:b8:42:
                    30:e9:c6:b3:d2:8a:51:ce:cb:7c:dd:28:f4:45:24:
                    0b:47:98:56:bf:3f:2c:ca:88:75:97:07:4f:7f:9f:
                    16:8d:a5:45:48:fd:b6:5a:21:49:fb:1e:cd:2f:e6:
                    b1:59:42:06:66:d0:a3:0e:00:5b:eb:2a:9b:da:c7:
                    a0:2b:78:6b:bd:ce:3d:1f:c3:07:bb:85:55:ab:45:
                    3a:49:b1:8a:99:e6:64:3a:3a:06:89:1a:08:d0:8d:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:14:BC:37:87:81:B3:63:23:A5:2E:AF:F1:3A:03:A0:2B:00:B9:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4de3334a-2794-35a8-be42-db84054fad9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ec:29:ce:28:ee:9c:5c:0b:09:77:bf:4f:c7:aa:4a:c9:86:
         cf:20:9c:36:a6:6e:3f:21:df:6b:c0:a3:e8:f1:f0:db:bf:81:
         a2:97:a0:e2:a4:5e:50:89:ea:96:5a:a3:07:ae:9c:c2:27:5f:
         2e:ea:99:9f:d6:04:ab:61:1d:10:6c:64:05:4a:2b:89:be:46:
         45:f9:bd:d4:6d:7d:0f:a5:88:5e:dc:8d:ec:dd:9e:78:03:08:
         4e:d9:9f:0f:d7:48:4e:0e:e3:5b:dd:a4:3a:65:b3:5b:40:f9:
         61:63:22:db:f0:79:50:ba:65:a1:31:cf:1f:72:5c:d3:5e:90:
         75:84:a6:d5:5e:29:be:2e:9d:88:db:7e:c9:d9:9b:4d:00:f3:
         38:67:21:a2:d3:2e:44:0a:70:64:66:5d:bd:ea:51:0b:46:12:
         a7:c2:b2:4c:e4:32:9b:d3:60:b8:79:b9:9d:1a:52:db:70:71:
         50:3c:8e:d8:78:ce:1c:ad:58:49:52:65:9a:5a:47:21:6d:53:
         21:69:a5:47:89:f1:19:bf:b6:31:e2:17:a9:8b:ea:48:87:e5:
         76:08:6b:df:1b:fe:b5:da:fa:34:40:7f:34:8e:c9:14:69:1c:
         0c:c4:0e:72:39:fc:fa:48:d7:a5:0b:93:27:0e:9d:07:37:76:
         05:a1:3c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:34 2025 by rpki-client