Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f9a28e-ec5d-3118-ae42-714573952f7f.roa
File:                     86f9a28e-ec5d-3118-ae42-714573952f7f.roa (raw, json)
Hash identifier:          eY2qizK8qdfbFbKAM1rchMvCwWQFkW/wqbN8M0UN3jM=
Subject key identifier:   D3:DB:83:CF:11:55:26:7D:B5:47:60:77:6F:F7:2B:07:92:98:48:EE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847107AF200A8D7232723AF4100
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f9a28e-ec5d-3118-ae42-714573952f7f.roa
Signing time:             Sun 01 Sep 2024 01:00:31 +0000
ROA not before:           Sun 01 Sep 2024 01:00:31 +0000
ROA not after:            Sat 30 Nov 2024 02:00:31 +0000
asID:                     44477
IP address blocks:        136.0.139.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:10:7a:f2:00:a8:d7:23:27:23:af:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  1 01:00:31 2024 GMT
            Not After : Nov 30 02:00:31 2024 GMT
        Subject: CN=a91e5fa4-df0a-421e-90dc-0f95f8b540ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:01:c5:59:08:6d:35:2b:98:45:3c:fb:5e:
                    98:2f:d9:ab:8a:89:27:48:40:d3:a8:e7:0d:71:02:
                    84:92:4f:c7:53:f4:f6:d3:d7:15:38:2d:70:73:ef:
                    cc:7e:1b:25:89:f6:a7:1b:b9:43:ac:34:cc:dc:95:
                    1b:d5:d4:b0:b1:fb:0f:d9:04:25:3e:30:15:c1:fd:
                    ad:8a:90:c3:c3:32:62:13:3b:8a:6c:a4:d0:ba:1f:
                    6e:01:9c:81:e4:24:a5:0e:4f:db:84:0c:83:7b:32:
                    c9:90:ea:81:7e:3e:41:29:0a:9d:09:66:4e:d6:ff:
                    59:6f:1c:b4:94:cc:cc:93:9a:e1:e5:9c:e4:05:a0:
                    3a:74:e1:41:6e:32:de:cf:9d:f5:57:2a:7e:71:46:
                    1d:c8:90:8d:b7:d7:ef:c4:87:c2:6f:ca:d9:a1:12:
                    d7:a0:68:06:23:40:87:c5:6b:ea:3d:01:53:fa:91:
                    db:92:68:73:9b:7f:aa:ef:9d:1e:36:ef:cf:f4:07:
                    ba:d4:16:bc:e5:0c:6f:bc:87:b0:8d:e4:c0:34:3a:
                    cf:43:6f:ef:a0:34:b8:78:af:e4:9a:81:ee:f0:be:
                    1b:51:f6:51:8b:03:dd:64:75:26:c1:e6:c8:f4:83:
                    da:56:e8:39:be:4c:20:60:6f:ea:ab:b7:ba:f4:08:
                    c6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DB:83:CF:11:55:26:7D:B5:47:60:77:6F:F7:2B:07:92:98:48:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/86f9a28e-ec5d-3118-ae42-714573952f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:8f:d8:ec:12:31:c4:0b:f2:fc:5e:c6:7c:b2:d6:f6:4d:c7:
         0c:e6:85:7a:8a:5c:df:eb:84:5b:c5:27:1a:dc:54:86:8f:05:
         96:c6:f9:6d:9b:83:db:b7:fd:37:3f:ec:46:e6:23:b5:dd:09:
         04:91:92:b9:7b:4f:11:ac:32:f6:fe:79:73:d4:28:ff:08:62:
         22:7f:7c:d9:3e:c8:37:db:1b:7d:df:a0:68:37:10:32:06:4e:
         04:60:8e:dc:92:9b:c0:93:7d:9e:9c:43:9a:79:e3:ae:b8:b3:
         10:e8:53:af:ff:eb:32:67:e0:37:3e:08:11:bb:67:36:78:d8:
         74:93:87:2b:05:62:6f:7e:d5:1a:b9:fe:1c:83:89:28:76:c3:
         af:2c:3a:a5:cd:1e:be:f6:b7:fd:b5:9b:64:03:4c:59:b0:ab:
         9e:53:66:18:c8:22:b2:98:ee:0b:4b:d7:dd:15:24:ff:f9:2b:
         80:fb:df:18:f6:fe:32:76:57:6a:70:f4:0d:27:fb:3a:39:8a:
         e7:71:23:91:8e:99:92:0d:c2:c4:98:26:87:c6:97:7b:d5:99:
         28:c8:b7:f1:83:dc:48:a3:cf:7b:d5:23:85:ef:d5:0c:5a:71:
         23:e0:13:16:31:38:41:dc:2a:21:13:eb:01:49:6f:34:61:25:
         e7:94:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:51 2025 by rpki-client