Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/925d11af-eb0c-37a6-92f5-077c65ba5c99.roa
File:                     925d11af-eb0c-37a6-92f5-077c65ba5c99.roa (raw, json)
Hash identifier:          yW2POLZgFnUEjzRbFqt2LzIVtJU0VZG4TtlRQ4QjqlE=
Subject key identifier:   2A:F1:CF:65:E1:DC:7D:24:9E:DC:12:6C:52:42:1E:E4:5F:C7:58:37
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858476BBC1DA2921F48617BA26800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/925d11af-eb0c-37a6-92f5-077c65ba5c99.roa
Signing time:             Thu 03 Oct 2024 17:30:28 +0000
ROA not before:           Thu 03 Oct 2024 17:30:28 +0000
ROA not after:            Wed 01 Jan 2025 18:30:28 +0000
asID:                     11798
IP address blocks:        143.109.48.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6b:bc:1d:a2:92:1f:48:61:7b:a2:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  3 17:30:28 2024 GMT
            Not After : Jan  1 18:30:28 2025 GMT
        Subject: CN=85f37ddd-a7a6-47f6-955e-403701a15158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7d:45:5b:a9:e2:60:97:64:ce:89:9a:7a:96:
                    eb:e3:fd:05:72:c6:5f:92:7a:c3:70:c3:dc:6d:3f:
                    5c:8f:ca:ee:a4:8a:b2:97:61:db:c5:c1:49:d7:25:
                    14:2b:a9:68:65:c6:30:17:d5:d7:b8:bd:f5:aa:a7:
                    5b:f0:73:d1:ef:6d:a9:ea:df:aa:69:af:6c:6d:75:
                    ef:60:89:6f:31:a2:51:93:b9:e5:53:d4:7b:4a:93:
                    a0:e1:0a:69:84:93:b8:c3:f7:94:62:17:ff:88:f2:
                    35:1d:24:de:c5:0e:8a:57:dc:b8:95:b7:18:6b:ee:
                    bf:f9:5d:e0:2e:a4:d9:5e:70:5a:69:99:88:4f:94:
                    a3:47:11:78:87:45:0b:a1:02:cf:74:7c:33:17:e2:
                    33:4e:fd:da:f2:7d:38:b2:5c:34:37:78:a3:8e:12:
                    db:95:3e:78:b4:f4:9b:37:b8:0f:f8:33:fb:9b:fe:
                    d7:60:89:2c:8a:c3:74:7d:be:d6:a3:d8:14:0b:13:
                    fa:09:c7:fe:78:50:31:1c:78:4c:40:10:9f:7f:bd:
                    43:42:7f:a2:a8:11:bb:16:7c:3a:ab:1b:4d:a1:0a:
                    f9:22:e6:0a:47:53:5a:d1:c4:99:7c:58:1f:b2:bc:
                    e7:8b:7f:4d:42:9a:c5:92:e1:23:37:e9:13:64:84:
                    2b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F1:CF:65:E1:DC:7D:24:9E:DC:12:6C:52:42:1E:E4:5F:C7:58:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/925d11af-eb0c-37a6-92f5-077c65ba5c99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.109.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:28:c1:94:63:84:0e:47:7f:79:3d:15:6f:f8:4d:00:ba:2c:
         1c:fc:33:91:a0:9c:ff:b9:10:a3:9d:b1:00:0c:62:23:60:66:
         fa:e0:0f:8b:90:91:21:39:3c:26:49:df:41:ae:6c:0d:d0:90:
         63:eb:34:c4:6f:cd:a1:54:8f:33:e8:80:18:9a:a7:fc:5a:0a:
         57:85:3c:f3:9d:d0:de:d1:35:76:bf:f7:f3:be:af:9c:b8:83:
         65:41:c6:92:9c:47:61:58:5e:ad:87:ef:80:7f:a3:9f:26:a8:
         a8:3c:11:f5:a3:96:1c:f4:2e:a6:35:56:d8:11:84:dc:ad:93:
         32:4a:fb:d7:3e:4a:32:4e:b3:73:36:50:1c:e1:47:12:88:99:
         1a:1c:f6:cb:43:8d:1a:31:d9:68:f7:1b:25:9f:d8:bf:f7:e8:
         c1:c1:a5:04:5b:35:6a:3f:fb:b4:b8:7f:cc:36:63:13:5d:11:
         8b:6a:4a:f8:76:3e:6d:c9:cd:cb:56:ee:d9:73:cd:f9:04:6c:
         f4:e4:e4:b1:fb:c5:71:16:ce:7c:c5:b6:c7:de:89:5e:38:3f:
         77:c2:59:e2:7b:7e:23:28:6a:d2:de:bc:62:c6:5e:af:64:54:
         43:05:7b:07:10:0c:aa:29:c2:d6:76:cf:01:f4:da:6e:11:00:
         14:56:e1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:45 2025 by rpki-client