Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/556f550e-888d-3e40-ab35-187c8537ead7.roa
File:                     556f550e-888d-3e40-ab35-187c8537ead7.roa (raw, json)
Hash identifier:          3m+trgee9ROJk/HdLsG1wuUlLdi60J11QwDsXh1dFcs=
Subject key identifier:   51:22:9B:21:6D:0F:26:1D:6E:9E:03:D9:66:1F:BD:26:75:3D:90:D0
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584850B0C741F95AEDCE40B2FBC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/556f550e-888d-3e40-ab35-187c8537ead7.roa
Signing time:             Tue 24 Dec 2024 17:47:44 +0000
ROA not before:           Tue 24 Dec 2024 17:47:44 +0000
ROA not after:            Mon 24 Mar 2025 16:47:44 +0000
asID:                     15731
IP address blocks:        136.0.248.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:50:b0:c7:41:f9:5a:ed:ce:40:b2:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Dec 24 17:47:44 2024 GMT
            Not After : Mar 24 16:47:44 2025 GMT
        Subject: CN=405a6bfc-ddac-49c2-8256-1357b07dc5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:f5:99:3f:96:d7:d0:20:48:dc:6d:10:fb:
                    be:05:ee:5e:e8:69:42:b9:43:61:d2:35:1a:48:b2:
                    25:46:23:d8:7d:b9:82:fb:15:aa:d1:2d:9b:bc:b6:
                    14:3c:5c:45:2f:13:d4:ed:f4:37:da:09:d7:73:6c:
                    2f:8a:fe:8f:33:9f:5e:52:cc:5e:75:75:fa:8c:15:
                    50:a2:ba:0a:bf:40:0c:b4:83:cb:02:5b:10:03:90:
                    2a:b5:ff:37:94:25:54:92:83:a7:d9:5e:a6:88:b3:
                    49:08:3d:77:e7:4d:2f:85:21:d1:3a:e9:22:ba:35:
                    5f:58:77:2e:8e:a2:ba:3e:2e:32:90:91:95:6f:2e:
                    19:3f:b4:30:f8:35:2b:a8:02:80:78:8b:5f:95:da:
                    9d:9c:33:86:15:c9:8a:00:6d:82:20:e6:e0:30:4b:
                    b3:2f:ba:55:4f:5b:94:54:0c:46:87:da:66:ca:94:
                    2f:8d:eb:85:d0:9a:17:4d:67:60:d6:ce:45:9e:35:
                    76:42:28:ca:9f:6e:22:b2:6c:a2:47:38:22:c4:54:
                    7e:b8:6b:3f:bb:88:3a:0e:9d:af:51:57:f5:82:d3:
                    57:42:2e:9f:05:47:be:8c:b1:30:b6:90:fd:a4:48:
                    20:d3:1c:15:5c:f2:06:da:f5:99:d3:36:7f:3b:16:
                    a4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:22:9B:21:6D:0F:26:1D:6E:9E:03:D9:66:1F:BD:26:75:3D:90:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/556f550e-888d-3e40-ab35-187c8537ead7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:15:7b:fe:2a:b9:c1:15:a7:3d:bd:38:76:05:ba:75:85:ab:
         64:bd:b5:73:73:4d:89:02:63:8f:c2:68:5a:f1:da:21:2a:07:
         ef:4c:fa:63:09:89:8a:50:12:1c:3d:98:23:a5:62:e2:f5:1f:
         42:78:f0:f2:93:f9:f8:5b:7e:be:8b:c7:55:7e:b4:92:70:3b:
         0a:ca:48:fb:55:29:77:3b:a1:e4:e6:4d:ce:c8:2b:b7:1e:1e:
         da:a1:cb:56:31:5c:7d:a1:68:97:f9:3a:63:0a:c8:dc:5d:c9:
         29:3a:47:d2:96:49:9d:8e:9b:cc:df:b1:d7:eb:b2:2e:5a:e7:
         7a:9e:ac:fd:9b:a6:0e:d7:fe:c2:43:e3:ba:84:c5:05:92:cc:
         fd:da:5b:69:99:04:fc:50:be:3d:28:2c:41:a8:07:86:40:8d:
         81:4b:df:03:8d:78:b9:af:60:e2:c4:51:07:5e:8d:7c:fc:d9:
         3a:82:37:8b:a7:be:e4:ec:03:84:a4:e6:89:4f:f4:e1:1d:00:
         8c:eb:76:c8:b8:7d:e0:27:c8:09:03:f1:fa:b2:29:b6:71:50:
         e8:6f:f7:96:be:63:a4:5b:97:f3:33:24:85:e0:06:09:0b:94:
         de:0e:65:bd:6e:35:72:fa:0c:be:1d:45:c0:79:e6:2d:5f:8c:
         be:e8:d2:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhQsMdB+VrtzkCy+8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MTIyNDE3NDc0NFoXDTI1MDMyNDE2NDc0NFowLzEtMCsGA1UEAxMk
NDA1YTZiZmMtZGRhYy00OWMyLTgyNTYtMTM1N2IwN2RjNWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweP1mT+W19AgSNxtEPu+Be5e6GlCuUNh0jUa
SLIlRiPYfbmC+xWq0S2bvLYUPFxFLxPU7fQ32gnXc2wviv6PM59eUsxedXX6jBVQ
oroKv0AMtIPLAlsQA5Aqtf83lCVUkoOn2V6miLNJCD13500vhSHROukiujVfWHcu
jqK6Pi4ykJGVby4ZP7Qw+DUrqAKAeItfldqdnDOGFcmKAG2CIObgMEuzL7pVT1uU
VAxGh9pmypQvjeuF0JoXTWdg1s5FnjV2QijKn24ismyiRzgixFR+uGs/u4g6Dp2v
UVf1gtNXQi6fBUe+jLEwtpD9pEgg0xwVXPIG2vWZ0zZ/Oxak/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFEimyFtDyYdbp4D2WYfvSZ1PZDQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTU2ZjU1MGUtODg4ZC0z
ZTQwLWFiMzUtMTg3Yzg1MzdlYWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAD4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABoVe/4qucEVpz29OHYFunWFq2S9tXNzTYkCY4/CaFrx2iEqB+9M+mMJ
iYpQEhw9mCOlYuL1H0J48PKT+fhbfr6Lx1V+tJJwOwrKSPtVKXc7oeTmTc7IK7ce
Htqhy1YxXH2haJf5OmMKyNxdySk6R9KWSZ2Om8zfsdfrsi5a53qerP2bpg7X/sJD
47qExQWSzP3aW2mZBPxQvj0oLEGoB4ZAjYFL3wONeLmvYOLEUQdejXz82TqCN4un
vuTsA4Sk5olP9OEdAIzrdsi4feAnyAkD8fqyKbZxUOhv95a+Y6Rbl/MzJIXgBgkL
lN4OZb1uNXL6DL4dRcB55i1fjL7o0pY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:41 2025 by rpki-client