Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/55ec1b8e-b6f3-3e21-894e-71e8cf948f6d.roa
File:                     55ec1b8e-b6f3-3e21-894e-71e8cf948f6d.roa (raw, json)
Hash identifier:          4FtQVYC8eNpljvk3nNnkFrew068PCr+KKXZ6N/NfL30=
Subject key identifier:   7E:DE:89:D6:3E:23:90:B8:B0:DD:00:20:07:89:6F:34:FC:38:D0:5C
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584766329D91BEA669EBC99C7B00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/55ec1b8e-b6f3-3e21-894e-71e8cf948f6d.roa
Signing time:             Tue 01 Oct 2024 17:54:23 +0000
ROA not before:           Tue 01 Oct 2024 17:54:23 +0000
ROA not after:            Mon 30 Dec 2024 18:54:23 +0000
asID:                     11798
IP address blocks:        142.111.141.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:32:9d:91:be:a6:69:eb:c9:9c:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  1 17:54:23 2024 GMT
            Not After : Dec 30 18:54:23 2024 GMT
        Subject: CN=fbc215ed-36d0-49c1-977b-174b4c2c0a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:a4:c4:1e:b4:da:5f:89:50:b2:39:d0:4c:
                    63:a5:01:6a:ed:53:79:63:06:ae:36:f2:c9:aa:5a:
                    e1:7c:ef:f9:eb:98:f4:04:44:2a:8f:51:8a:c4:a8:
                    e1:7a:c0:42:34:b6:41:2d:bf:56:4d:c1:0a:b7:ee:
                    49:6f:a5:37:a0:cf:c8:3e:78:bc:97:dd:e3:bb:73:
                    c0:63:93:07:5c:3a:71:a1:d7:fa:8b:4f:e9:2a:0c:
                    c7:51:66:60:5d:f5:84:cc:a5:13:11:4d:7a:13:84:
                    39:d3:ac:a8:09:60:18:45:35:30:f8:b6:e1:8e:86:
                    52:52:67:f1:52:8e:49:a9:31:4d:db:2b:0c:f5:aa:
                    fd:4b:fa:22:0c:ef:16:b1:6d:6d:25:1b:81:ba:a7:
                    06:85:06:f8:77:4f:49:95:72:80:45:81:d0:e7:3f:
                    25:c4:2e:a4:05:e9:3a:62:66:15:b0:82:a5:89:f8:
                    59:a5:b6:f5:4e:bf:8f:8a:75:37:77:ab:d5:ee:ea:
                    d3:b4:57:6b:40:d4:71:28:c9:a4:74:53:4b:f6:00:
                    41:c9:38:8b:68:56:d4:be:fb:79:be:74:b7:0a:86:
                    e3:95:85:e1:68:81:b0:24:fa:32:6e:e6:0b:b3:ea:
                    67:de:a6:1c:0d:91:f1:20:ab:0b:af:ec:ed:e1:32:
                    d8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DE:89:D6:3E:23:90:B8:B0:DD:00:20:07:89:6F:34:FC:38:D0:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/55ec1b8e-b6f3-3e21-894e-71e8cf948f6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:17:ee:f0:e3:c7:ac:29:9a:30:dd:b4:bf:67:54:47:2f:85:
         ee:8e:68:51:6d:e4:9c:07:af:da:53:03:a2:5c:38:25:97:24:
         77:52:cb:f0:e2:6d:a9:0c:96:48:ac:ef:c5:79:86:52:4e:40:
         34:5d:b2:25:5d:0c:93:4f:92:0e:86:2d:14:d0:f2:48:0f:d5:
         49:88:15:52:12:b4:eb:6b:14:f2:9c:70:1c:4b:fa:2b:f4:4b:
         ef:ab:f0:c6:01:5b:86:5e:7a:72:4b:96:83:b9:e4:81:80:a0:
         76:eb:fb:0b:0c:3c:0d:88:3b:fc:ff:4b:a7:73:da:df:d4:70:
         70:a9:66:fd:87:9e:ab:d6:6e:cf:40:20:c1:c6:17:45:8d:a5:
         18:80:98:42:93:f6:ae:06:4e:46:48:71:13:70:33:d3:49:cd:
         ca:91:b1:3a:34:ff:17:f7:b6:49:ce:fe:26:f0:5d:6d:6f:b1:
         75:2b:bd:d5:cf:dd:6b:2b:81:03:6e:df:ec:29:7e:ff:ee:f2:
         d3:6e:e3:51:db:de:e5:78:e9:19:8b:7c:ac:5d:34:7d:77:c2:
         09:35:fa:e5:66:bb:4b:6a:a5:cd:7b:c5:ec:e9:14:89:33:a5:
         84:d8:52:51:54:0b:7a:fe:27:90:86:9b:0a:82:0b:68:37:66:
         c8:67:75:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:04:09 2025 by rpki-client