Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/92088f81-522d-396d-b7b1-3079ca51d550.roa
File:                     92088f81-522d-396d-b7b1-3079ca51d550.roa (raw, json)
Hash identifier:          4M/lbxt7ETXJB/QH5uwKKRCrkRzsZxKeLN5n+7k2sF8=
Subject key identifier:   49:C0:D3:90:5D:6B:F5:ED:03:52:28:D5:19:FE:D6:B3:9E:26:03:27
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847D834B4D645F3A509A4905000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/92088f81-522d-396d-b7b1-3079ca51d550.roa
Signing time:             Mon 11 Nov 2024 14:00:39 +0000
ROA not before:           Mon 11 Nov 2024 14:00:39 +0000
ROA not after:            Sun 09 Feb 2025 14:00:39 +0000
asID:                     6939
IP address blocks:        136.0.77.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d8:34:b4:d6:45:f3:a5:09:a4:90:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Nov 11 14:00:39 2024 GMT
            Not After : Feb  9 14:00:39 2025 GMT
        Subject: CN=5c63ace3-e91d-4361-8cd9-c584c354699a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:56:1d:0b:eb:39:2d:c7:8b:a2:e1:8c:a0:e3:
                    2a:9b:d3:21:89:c0:61:9f:69:65:dc:21:81:82:8a:
                    ed:69:14:29:89:99:10:4c:05:09:1f:e3:f1:17:06:
                    ce:84:17:b6:04:47:e3:72:73:d3:47:45:73:d9:44:
                    17:f6:1b:d5:4f:e4:84:bf:87:91:c9:e2:fb:93:b9:
                    40:5b:9f:9f:22:d3:0f:14:fd:56:7c:9e:0d:94:49:
                    8c:46:04:34:b0:fc:8e:7d:33:d7:dc:e6:85:43:b8:
                    d4:ac:25:f0:50:00:33:a9:e3:56:6d:6c:32:87:3c:
                    cb:f2:df:59:07:02:fe:62:e1:25:88:53:20:74:31:
                    ba:9f:cd:64:05:e3:64:f8:fc:b7:1b:44:9a:fe:e6:
                    17:2d:c5:3e:32:5c:b1:82:c9:72:96:8b:51:a9:40:
                    79:c7:d7:c9:6d:5c:5d:21:fa:dc:e0:ee:7e:8a:c9:
                    ad:c7:61:ed:b2:69:a1:e2:de:4c:97:66:3d:c9:8f:
                    fd:a3:54:7a:7b:f5:56:34:7f:4d:9f:e1:13:24:2c:
                    1f:e6:13:af:fd:70:73:51:ce:a1:64:30:bc:72:dd:
                    2f:ec:55:ff:0c:95:69:41:7f:55:e4:0d:1e:28:17:
                    43:c9:17:4b:ed:4d:3a:46:5d:a1:65:56:47:a4:30:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C0:D3:90:5D:6B:F5:ED:03:52:28:D5:19:FE:D6:B3:9E:26:03:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/92088f81-522d-396d-b7b1-3079ca51d550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a4:5d:56:9d:9a:07:85:7e:60:3a:3c:32:7b:22:32:c2:ab:
         e3:88:5e:06:55:6d:59:47:f9:24:03:43:0b:18:6e:d2:95:60:
         4a:3a:ae:f0:5f:57:39:59:cf:ac:f6:90:ba:0b:ce:ad:06:ce:
         2e:d1:11:69:e4:c7:03:5c:ee:70:56:2d:00:60:2e:8a:7f:9b:
         0f:e2:fe:d8:c8:2b:37:05:4a:b5:b2:d2:f9:79:f1:9e:ca:f1:
         95:78:69:37:45:3a:64:dc:45:e6:00:be:b8:12:e3:1d:a6:a1:
         de:a6:87:67:94:fb:66:38:3c:f0:f6:57:c8:c8:11:15:87:34:
         c5:7c:5f:ba:39:fd:50:5a:7c:f1:16:60:db:d0:a9:97:bd:d5:
         51:0b:94:c6:61:a6:7c:04:74:5f:de:a2:64:96:24:a5:a8:93:
         b6:2d:14:a5:69:84:b1:9d:bb:6b:63:ce:9f:7c:b0:55:16:ff:
         70:d2:b2:7d:54:85:88:27:39:b9:8e:7a:04:94:91:b7:7c:64:
         25:5d:22:b6:50:cc:dc:5e:e0:ce:46:77:3b:e6:5f:d0:12:7a:
         3a:4d:a9:8f:d5:9c:59:c5:4a:26:b1:09:3c:50:b7:16:63:e7:
         f8:b7:a1:4f:1c:d3:78:5a:2b:11:65:65:aa:ce:5c:b3:5d:45:
         d1:44:c3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:59 2025 by rpki-client