Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/925a3fd8-4454-33c2-a9ba-5fffc02144b7.roa
File:                     925a3fd8-4454-33c2-a9ba-5fffc02144b7.roa (raw, json)
Hash identifier:          PUh5YQWLkpNirlbuUwUi9YqN0yHCdN/wIABBmy594Qg=
Subject key identifier:   17:A1:49:B8:A7:49:E9:6C:E1:32:AB:CD:54:5A:59:CC:A8:35:33:DD
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847827E895FDFA67213560D4700
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/925a3fd8-4454-33c2-a9ba-5fffc02144b7.roa
Signing time:             Fri 11 Oct 2024 21:09:59 +0000
ROA not before:           Fri 11 Oct 2024 21:09:59 +0000
ROA not after:            Thu 09 Jan 2025 22:09:59 +0000
asID:                     7385
IP address blocks:        136.0.156.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:7e:89:5f:df:a6:72:13:56:0d:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 11 21:09:59 2024 GMT
            Not After : Jan  9 22:09:59 2025 GMT
        Subject: CN=059a4613-efca-4d81-87ef-45c2f1365887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:89:db:1b:f6:8c:ee:e8:06:5b:f0:30:24:31:
                    47:88:a8:aa:cd:ee:cd:81:15:92:3b:fd:31:e8:37:
                    ff:67:fb:dc:67:75:a9:2b:44:bb:36:8a:5a:38:2f:
                    4f:68:41:d1:90:95:3a:4a:4e:9e:a9:c8:bd:3f:02:
                    0f:17:80:30:12:85:4e:ac:d8:d7:67:fb:f7:a9:9e:
                    24:d7:e5:da:bb:8e:14:79:24:bb:f3:0b:df:db:af:
                    6c:9e:05:f3:e1:f1:ec:c9:da:6a:aa:be:32:b4:f2:
                    e4:a7:43:36:ea:cf:2e:65:2a:ae:43:c4:99:fb:6b:
                    19:d2:31:58:c5:8d:5b:66:a2:6e:00:e9:ef:93:a3:
                    b6:c8:cd:f8:db:42:6d:60:6f:65:76:48:f6:23:ef:
                    fd:7b:a4:ad:2a:0d:ea:7d:26:c1:39:40:1e:5a:15:
                    5b:05:44:6f:da:0d:a4:2f:23:b4:fd:1f:5e:78:a5:
                    f9:23:9f:81:78:d2:69:cb:86:41:72:f6:62:04:9d:
                    5f:af:81:b6:0a:cd:5d:1d:1f:34:30:6e:50:39:d9:
                    57:13:e6:18:66:4a:f1:07:ab:8a:bf:11:6a:72:c8:
                    60:d0:e8:53:dd:45:f6:14:a2:01:ad:fc:d3:58:ad:
                    87:aa:a6:bc:f8:d2:fc:00:77:9f:40:eb:23:f9:67:
                    1e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A1:49:B8:A7:49:E9:6C:E1:32:AB:CD:54:5A:59:CC:A8:35:33:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/925a3fd8-4454-33c2-a9ba-5fffc02144b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:94:dc:0f:a0:ef:b2:53:54:f0:c1:69:3e:d3:a7:78:53:22:
         dd:c8:6b:37:81:61:b7:e6:6e:6f:f0:06:1c:d2:17:b7:e7:21:
         43:37:9c:36:ef:ab:a0:85:82:8b:e1:18:05:e0:5c:35:d1:ed:
         d5:e1:e0:68:9a:cb:86:63:71:8d:97:89:5a:4a:9a:ba:c6:f3:
         6c:e4:64:0f:ff:61:04:a5:bb:67:8c:85:15:69:1e:8c:2d:70:
         0e:5d:13:00:f6:15:cd:3b:b5:02:4c:3c:55:06:49:a1:d9:f9:
         09:39:e1:6e:50:d1:6b:61:2a:c9:82:5d:20:06:04:01:a6:8f:
         0e:3e:96:da:bc:5d:ca:9a:21:40:43:21:69:39:63:58:2e:c8:
         81:a5:f1:0c:c7:80:e0:99:12:e9:61:ae:53:7a:38:cd:c3:46:
         4f:1b:7d:a6:40:cf:0f:1d:75:eb:2b:37:c4:90:a5:85:f6:08:
         8e:62:44:00:d6:41:04:bf:43:9a:68:a0:9c:b2:ec:e4:47:24:
         fe:40:ff:f3:aa:b7:cf:b7:93:d2:13:ac:9f:0f:06:73:cc:74:
         de:fb:6b:67:76:a3:e1:23:07:da:f2:f0:6f:42:9c:75:1f:65:
         8b:89:42:8b:e2:38:50:32:38:75:6a:e4:9a:dd:a0:82:93:94:
         dd:8d:d1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:50 2025 by rpki-client