Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ae8487a8-ece0-3bfd-bec5-b5676d29d8b3.roa
File:                     ae8487a8-ece0-3bfd-bec5-b5676d29d8b3.roa (raw, json)
Hash identifier:          VL6fac6U7jkduwDoPcKa1e2juXtD48+ZXAxSh18p+O0=
Subject key identifier:   36:81:D3:ED:DA:DE:61:78:F3:DB:47:F2:C0:39:0A:F2:55:6A:63:A8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846D5DA88AF4D34243D9B923BA0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ae8487a8-ece0-3bfd-bec5-b5676d29d8b3.roa
Signing time:             Sun 11 Aug 2024 01:00:28 +0000
ROA not before:           Sun 11 Aug 2024 01:00:28 +0000
ROA not after:            Sat 09 Nov 2024 02:00:28 +0000
asID:                     5650
IP address blocks:        168.93.241.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d5:da:88:af:4d:34:24:3d:9b:92:3b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 11 01:00:28 2024 GMT
            Not After : Nov  9 02:00:28 2024 GMT
        Subject: CN=0432ad8e-cd5a-49df-ba0e-529fb7e3a559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:58:60:c1:b3:18:01:56:f7:3b:20:cb:3b:
                    ff:de:49:c2:07:ef:c8:09:b0:e7:d5:65:58:93:14:
                    39:3c:9c:45:8a:06:7e:63:bd:f7:92:a2:44:e1:0a:
                    86:97:cc:e5:de:a6:ba:90:e4:ed:b5:01:51:27:1a:
                    18:39:6a:ce:cf:9a:e1:dd:bf:a2:b9:b5:d9:cc:0d:
                    cb:06:7b:a8:97:37:d8:7e:c6:93:54:44:94:04:b9:
                    a7:16:e4:87:3b:45:b9:c8:2b:aa:a8:ad:28:f9:47:
                    8a:15:f5:a5:00:8e:48:84:8e:58:8e:3a:73:fb:4e:
                    ff:61:9e:43:57:c5:2c:25:45:52:57:bf:ae:22:84:
                    6c:ae:e2:5f:a3:e0:55:b4:f3:e9:5b:ac:d5:e0:c1:
                    43:ec:21:b5:44:23:ce:81:35:b5:1e:8c:82:29:a8:
                    7e:12:7f:83:cf:e2:31:83:d3:96:f9:b8:6a:31:9f:
                    d5:79:b2:4e:bf:41:43:5a:55:39:6c:56:69:df:8c:
                    37:84:8a:ab:50:c9:a0:09:32:5f:1d:dc:41:23:01:
                    09:66:89:92:ca:7d:b1:74:20:49:56:a8:82:eb:bf:
                    7b:2d:78:68:9d:e9:4a:0d:c3:86:c6:a4:61:29:e7:
                    1b:82:8c:cd:aa:d0:99:32:86:29:27:1b:bf:1c:bd:
                    6e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:81:D3:ED:DA:DE:61:78:F3:DB:47:F2:C0:39:0A:F2:55:6A:63:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ae8487a8-ece0-3bfd-bec5-b5676d29d8b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:a7:3b:56:16:c7:aa:1f:84:79:16:4a:5f:4d:56:7b:60:1a:
         e0:27:a6:c7:5a:24:11:fa:38:bb:4b:23:1e:f9:85:79:be:6b:
         4a:e0:23:0d:23:65:d6:bd:e8:e7:30:26:db:a9:84:69:1b:4c:
         02:1e:e1:f6:34:7b:cc:73:4c:ac:e8:c9:a6:ee:d1:b0:8a:3e:
         1e:31:6c:2f:ed:ea:7c:31:c5:68:44:c3:d4:40:54:e9:4b:a3:
         df:78:3f:36:a3:e7:34:89:1c:78:ed:ff:05:b9:bc:85:08:71:
         21:e5:f4:d0:aa:9c:df:ee:3a:7b:70:06:25:ba:90:a4:86:80:
         e7:f4:f5:b2:9f:df:1b:74:88:50:b5:8c:6a:10:fd:d9:14:07:
         b7:53:8d:88:03:64:29:9e:b4:f6:db:46:aa:54:ce:4c:af:e8:
         25:5f:9f:f4:72:ab:2e:76:54:86:42:8b:62:aa:36:7f:12:79:
         29:e6:ea:d4:2b:4b:c6:71:e1:b9:7b:5e:74:e9:5e:30:65:c9:
         37:02:69:78:9e:7f:e2:17:8f:4a:fb:c9:07:65:6d:79:d6:74:
         1b:08:68:91:9e:ac:df:b1:a7:d3:e2:c9:16:63:f0:f4:f9:f2:
         3d:cd:e5:c4:b5:09:f7:af:e6:82:61:f4:f5:03:b6:6a:a7:a0:
         b8:df:0b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:13:56 2025 by rpki-client