Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a261bf7-0a66-390d-9cfb-909086967c98.roa
File:                     9a261bf7-0a66-390d-9cfb-909086967c98.roa (raw, json)
Hash identifier:          P+iIP3ty+vdchbjgoJi4tLemhLMIMZdvvmZAoTfHBaI=
Subject key identifier:   69:83:B8:35:0F:55:FF:4E:33:B2:BE:38:AF:D0:A7:91:EF:ED:54:57
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846F06020B89365CAE39EAD7760
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a261bf7-0a66-390d-9cfb-909086967c98.roa
Signing time:             Tue 20 Aug 2024 13:00:39 +0000
ROA not before:           Tue 20 Aug 2024 13:00:39 +0000
ROA not after:            Mon 18 Nov 2024 14:00:39 +0000
asID:                     18779
IP address blocks:        142.111.137.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f0:60:20:b8:93:65:ca:e3:9e:ad:77:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 20 13:00:39 2024 GMT
            Not After : Nov 18 14:00:39 2024 GMT
        Subject: CN=a0cdf563-597d-4e4f-84dc-3ad9750b02f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:09:76:ee:08:29:df:3a:d3:77:94:9f:9b:
                    d2:73:ac:99:11:b6:20:7b:07:ac:79:45:cd:56:f8:
                    f0:11:8f:b8:20:25:4d:6f:07:b4:24:54:7e:aa:08:
                    01:f1:c5:4a:fb:a8:19:0c:7c:f4:42:5c:14:4c:c0:
                    3c:c8:df:48:2c:ee:90:66:8f:6b:67:55:fe:70:88:
                    33:76:d8:78:d2:59:50:26:c1:86:0d:dc:96:fa:4b:
                    f5:4f:ab:5e:d0:7a:ff:84:f2:1a:39:42:5d:20:c9:
                    bb:dd:e7:ba:37:b7:ab:16:5b:03:1b:5d:5b:f5:9c:
                    29:20:ee:42:29:44:d3:92:43:14:9b:f5:0a:9b:8c:
                    78:79:ae:2a:49:3e:45:5e:b8:fb:42:5e:83:4a:76:
                    50:e2:dc:3c:5c:44:d0:88:7d:27:20:7d:c2:4d:b0:
                    f2:74:da:89:f7:84:1f:4d:85:c4:a0:11:32:aa:71:
                    a8:67:59:81:1e:5e:45:ac:8f:ce:88:9c:a9:13:5a:
                    f2:19:30:9d:e7:c4:26:58:ca:03:58:b4:e3:b0:eb:
                    0a:cc:06:7c:7f:dd:9e:09:a0:20:22:9a:17:f4:c7:
                    46:11:c0:22:a5:0b:17:d3:e7:5a:03:01:07:d0:3c:
                    38:3e:10:4c:00:69:07:b5:bc:08:cb:e9:fa:f4:33:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:83:B8:35:0F:55:FF:4E:33:B2:BE:38:AF:D0:A7:91:EF:ED:54:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9a261bf7-0a66-390d-9cfb-909086967c98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:3d:7b:dd:ce:a8:a8:ea:d6:8a:fa:35:39:63:2e:af:a0:ad:
         77:55:ca:fe:70:53:5d:34:e8:ff:0a:76:cd:04:34:f2:6e:46:
         03:0e:4a:b3:1d:4a:e9:e9:e0:7d:a5:eb:22:b5:a2:4b:3f:5d:
         d3:f8:6c:db:12:f8:e1:ad:e6:aa:40:c5:58:09:65:6a:be:65:
         e0:42:01:78:12:0e:cc:ab:ba:ca:89:c5:a1:2f:3f:4e:7f:0f:
         fd:46:02:3e:b4:b9:f6:9f:77:8a:9a:2d:b9:23:b4:67:40:48:
         69:99:cf:a3:94:25:cd:03:01:25:25:d9:ec:78:6e:44:4b:8f:
         e6:22:50:6e:aa:a5:cf:57:31:7b:bb:95:54:0c:05:56:6c:44:
         b0:47:56:f6:25:c3:0e:48:71:2f:78:dd:75:18:78:86:2c:4c:
         01:54:dd:30:46:30:ec:64:33:fe:3e:59:c7:6b:04:97:25:18:
         87:17:88:98:d9:52:0d:7b:e4:15:eb:49:2a:a9:f8:1c:b6:5b:
         13:32:fc:c5:af:fa:61:cd:b6:e0:fc:39:83:d1:76:66:46:11:
         0a:aa:14:48:1c:0c:f9:54:55:7e:fa:d8:65:39:4c:c2:22:61:
         13:36:22:1a:66:4f:5e:e5:ca:0f:03:e7:f5:1a:17:ea:4e:62:
         02:f1:91:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:05:15 2025 by rpki-client