Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59c0d1b2-1f53-392c-9459-839af307b498.roa
File:                     59c0d1b2-1f53-392c-9459-839af307b498.roa (raw, json)
Hash identifier:          C84oY9mne72d6p1IoQvgDarqwRQy9yj2ID5DgyMnJbM=
Subject key identifier:   E7:64:F2:6A:E0:93:51:82:0F:9D:CC:04:3C:C2:78:23:05:75:B1:5D
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847107AEF4C6F8240F93EDA4B80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59c0d1b2-1f53-392c-9459-839af307b498.roa
Signing time:             Sun 01 Sep 2024 01:00:31 +0000
ROA not before:           Sun 01 Sep 2024 01:00:31 +0000
ROA not after:            Sat 30 Nov 2024 02:00:31 +0000
asID:                     11351
IP address blocks:        136.0.68.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:10:7a:ef:4c:6f:82:40:f9:3e:da:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  1 01:00:31 2024 GMT
            Not After : Nov 30 02:00:31 2024 GMT
        Subject: CN=59a22fa6-69cc-4fee-a21c-25e90e4c3008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:a8:b4:d5:a2:5a:e7:a2:af:9d:d6:e4:bd:
                    23:7c:5a:ea:f7:63:1c:ec:14:26:70:1a:b8:78:2f:
                    23:d4:5a:0b:43:84:18:63:61:3d:ae:8b:29:3a:80:
                    4c:4b:85:51:c2:bc:c8:6e:c4:91:3b:b6:8c:48:f1:
                    38:ca:12:01:7d:b0:86:41:0b:62:f3:51:ab:35:1a:
                    eb:69:f6:af:08:d2:4a:ee:95:3c:06:3d:df:bd:fb:
                    8c:b4:05:34:b5:d2:eb:81:f8:c5:93:62:cd:c5:b2:
                    22:52:95:08:52:5d:c3:3c:f7:52:52:d1:ee:26:35:
                    27:86:17:83:2f:63:aa:f1:41:90:52:e7:aa:89:35:
                    8d:33:d3:31:2c:08:2a:ae:60:1b:ba:d1:15:64:05:
                    10:62:19:a5:df:d2:08:c0:66:ac:33:69:90:12:42:
                    01:0c:d9:20:9e:e3:cb:08:2d:08:9d:49:80:cd:f0:
                    d7:02:66:00:40:3c:3f:41:bc:0f:bf:77:4c:3f:c9:
                    eb:04:05:ae:9d:5c:52:8e:7c:af:8b:21:d3:cd:44:
                    6b:76:51:55:ba:a8:db:dc:23:99:64:a9:f2:25:96:
                    54:73:6f:cb:ef:8b:b2:21:0d:1f:5b:e6:70:3f:b1:
                    31:be:fd:f4:55:27:95:40:e1:51:9d:9c:c7:40:23:
                    3f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:64:F2:6A:E0:93:51:82:0F:9D:CC:04:3C:C2:78:23:05:75:B1:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59c0d1b2-1f53-392c-9459-839af307b498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:28:1d:f5:08:bf:15:fa:2d:b8:cb:6b:46:46:21:ae:75:1e:
         23:1b:96:b3:2b:e3:d3:2a:50:24:ed:10:05:d7:fe:2b:ca:76:
         20:38:50:54:10:1b:1a:c0:4e:20:30:d4:3e:3c:c9:94:83:fa:
         6a:47:dd:8f:4e:1a:ee:44:f3:bd:ef:7d:de:1c:ed:6c:4e:75:
         35:a0:a4:01:f8:bf:eb:e9:d5:b3:73:6b:e9:2a:5f:12:36:69:
         cd:b4:0e:a8:d7:e6:db:25:79:6a:d6:8d:c1:50:5a:2b:6b:53:
         6a:f3:62:bc:42:5d:19:9b:1a:cb:a1:54:b1:25:9d:c8:46:0b:
         45:1a:52:68:fc:ae:45:b0:88:d7:8a:5a:ea:50:d3:4d:26:d6:
         44:1e:40:56:14:e4:41:a3:60:67:2d:97:33:32:16:73:2e:17:
         12:5d:3d:2e:6a:fd:c2:54:08:d8:c1:79:33:ad:e3:34:47:86:
         b6:1a:2e:56:6a:bf:a9:2f:1d:a7:53:f2:0d:dd:26:42:cd:bc:
         93:e2:f8:55:4d:b1:7f:bc:72:8c:05:f2:0c:4a:2c:04:93:e7:
         98:f2:79:d0:7f:77:e3:11:9f:e8:98:4a:f4:38:00:5c:4e:00:
         c9:72:65:71:f1:62:d3:fa:3b:85:5c:a5:9d:54:cd:f7:3c:7b:
         49:70:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:04 2025 by rpki-client