Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/62d7f178-bf09-35e6-984d-40706cd8562a.roa
File:                     62d7f178-bf09-35e6-984d-40706cd8562a.roa (raw, json)
Hash identifier:          yIfbnsA+Nu8wrVtLtlhgb/0RYMskbIHmRT7TqVAuE4c=
Subject key identifier:   56:32:93:78:4B:D2:6E:01:33:D8:30:9C:B6:B4:E5:04:EE:0A:4A:94
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846F11C11169073DB1D1542FD80
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/62d7f178-bf09-35e6-984d-40706cd8562a.roa
Signing time:             Tue 20 Aug 2024 19:19:23 +0000
ROA not before:           Tue 20 Aug 2024 19:19:23 +0000
ROA not after:            Mon 18 Nov 2024 20:19:23 +0000
asID:                     3356
IP address blocks:        136.0.132.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f1:1c:11:16:90:73:db:1d:15:42:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 20 19:19:23 2024 GMT
            Not After : Nov 18 20:19:23 2024 GMT
        Subject: CN=f29d6cc9-14b9-4eb2-b2b6-d70a7e278c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:38:96:31:8e:f8:0a:5b:3e:00:c5:7a:3e:3f:
                    70:ba:9d:55:76:88:fd:fe:4e:d9:3b:1c:dd:25:c8:
                    01:20:9a:42:b1:62:a9:69:4b:52:53:83:c5:43:22:
                    74:d8:0e:63:d3:2d:45:82:f8:8e:eb:df:24:73:0b:
                    ae:30:63:9a:5d:ca:03:0f:3e:03:f2:a9:7d:ac:90:
                    aa:8c:7b:bb:2e:8a:ed:bb:97:41:aa:11:24:64:23:
                    5b:ad:53:7f:51:22:05:5a:59:b3:82:06:e4:f3:f5:
                    14:d4:c6:0c:c5:ee:3a:61:85:36:e4:3c:59:e0:c5:
                    dd:ee:a4:9b:35:e7:fe:dd:d6:08:69:97:60:34:fc:
                    67:43:9d:93:af:c7:87:54:53:fa:53:9c:1e:8a:e1:
                    d5:6c:23:6a:f5:c3:6e:c0:9c:34:9a:3d:89:5a:da:
                    3b:ef:61:ab:d2:b7:13:fb:67:b9:6a:6f:82:ef:14:
                    47:e0:00:a2:a3:76:e9:a7:60:2c:21:3a:f9:90:ee:
                    2e:12:bb:72:54:6e:ac:b4:88:be:d5:32:93:8c:2b:
                    d5:92:46:4c:4e:3c:e8:c9:3c:0f:33:69:28:cb:1d:
                    58:26:c9:49:09:18:be:fb:f8:12:ed:25:a2:65:a0:
                    1b:85:91:35:97:9f:b6:b0:0c:11:19:eb:9a:68:8e:
                    a1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:32:93:78:4B:D2:6E:01:33:D8:30:9C:B6:B4:E5:04:EE:0A:4A:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/62d7f178-bf09-35e6-984d-40706cd8562a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:4c:13:d6:6c:c3:b7:42:80:41:78:98:e0:16:d1:da:d6:90:
         e5:ab:76:fb:b9:de:b0:79:77:7c:1b:1b:0f:13:d5:d2:8d:e6:
         e5:a1:ed:07:29:e8:ef:af:cb:a2:c2:17:3d:aa:14:56:9e:87:
         08:db:19:d0:26:43:6b:51:2c:83:cd:c8:d0:b3:f8:fb:6b:c1:
         98:6a:f0:ca:b7:4f:bc:12:27:7d:e8:48:fb:86:71:cd:8d:c8:
         84:42:99:d0:e8:4b:68:8f:6e:f3:81:a9:3b:f3:b2:54:56:4c:
         0e:4e:be:0f:70:b0:db:fc:b7:2a:96:b4:40:00:97:c5:f7:13:
         a0:f0:d7:06:59:00:ff:45:8f:a2:9d:c3:1e:c5:c2:83:24:3e:
         2c:ba:75:12:11:4a:9f:1c:7f:73:7a:35:68:2a:5a:50:be:5f:
         a5:fc:af:a8:44:43:2e:3f:29:c1:98:5d:2b:9c:19:21:5d:8f:
         55:14:24:35:3b:d7:10:4d:a7:b9:84:3e:18:90:91:9a:59:24:
         55:ac:2e:d7:ae:52:69:cd:c8:64:56:ee:82:10:e9:2f:ee:3d:
         a2:b9:e1:69:ef:83:7a:82:44:a7:ef:ab:07:71:39:c5:d1:4c:
         d0:6f:87:4f:2b:76:16:43:32:9b:e7:e8:0d:f0:9c:65:1b:cc:
         b0:aa:30:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbxHBEWkHPbHRVC/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MDgyMDE5MTkyM1oXDTI0MTExODIwMTkyM1owLzEtMCsGA1UEAxMk
ZjI5ZDZjYzktMTRiOS00ZWIyLWIyYjYtZDcwYTdlMjc4YzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDiWMY74Cls+AMV6Pj9wup1Vdoj9/k7ZOxzd
JcgBIJpCsWKpaUtSU4PFQyJ02A5j0y1FgviO698kcwuuMGOaXcoDDz4D8ql9rJCq
jHu7Lortu5dBqhEkZCNbrVN/USIFWlmzggbk8/UU1MYMxe46YYU25DxZ4MXd7qSb
Nef+3dYIaZdgNPxnQ52Tr8eHVFP6U5weiuHVbCNq9cNuwJw0mj2JWto772Gr0rcT
+2e5am+C7xRH4ACio3bpp2AsITr5kO4uErtyVG6stIi+1TKTjCvVkkZMTjzoyTwP
M2koyx1YJslJCRi++/gS7SWiZaAbhZE1l5+2sAwRGeuaaI6hPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYyk3hL0m4BM9gwnLa05QTuCkqUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjJkN2YxNzgtYmYwOS0z
NWU2LTk4NGQtNDA3MDZjZDg1NjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJNME9Zsw7dCgEF4mOAW0drWkOWrdvu53rB5d3wbGw8T1dKN5uWh7Qcp
6O+vy6LCFz2qFFaehwjbGdAmQ2tRLIPNyNCz+PtrwZhq8Mq3T7wSJ33oSPuGcc2N
yIRCmdDoS2iPbvOBqTvzslRWTA5Ovg9wsNv8tyqWtEAAl8X3E6Dw1wZZAP9Fj6Kd
wx7FwoMkPiy6dRIRSp8cf3N6NWgqWlC+X6X8r6hEQy4/KcGYXSucGSFdj1UUJDU7
1xBNp7mEPhiQkZpZJFWsLteuUmnNyGRW7oIQ6S/uPaK54Wnvg3qCRKfvqwdxOcXR
TNBvh08rdhZDMpvn6A3wnGUbzLCqMI4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:03:50 2025 by rpki-client