Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d86e75f9-10e6-3654-a1d2-2b01d135792a.roa
File:                     d86e75f9-10e6-3654-a1d2-2b01d135792a.roa (raw, json)
Hash identifier:          C7A8Vcr+ZfH//iHA+DZiWuVaRmE0mlTk4KH5YQSp34o=
Subject key identifier:   65:04:D3:65:93:60:A1:B7:37:31:62:48:A1:C8:9E:D4:CB:72:6E:26
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584766329E1A5810C895FF53C500
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d86e75f9-10e6-3654-a1d2-2b01d135792a.roa
Signing time:             Tue 01 Oct 2024 17:54:23 +0000
ROA not before:           Tue 01 Oct 2024 17:54:23 +0000
ROA not after:            Mon 30 Dec 2024 18:54:23 +0000
asID:                     11798
IP address blocks:        142.111.239.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:32:9e:1a:58:10:c8:95:ff:53:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  1 17:54:23 2024 GMT
            Not After : Dec 30 18:54:23 2024 GMT
        Subject: CN=ef0c7e78-d348-46b7-b178-a06d281444db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:d7:dd:cf:e2:50:a1:f7:e2:cc:dc:c3:c4:
                    26:ac:a1:6e:17:e3:4e:39:ac:c6:f4:1c:85:93:75:
                    a0:9c:94:f9:d0:a6:1c:77:c1:14:c6:ca:a9:b0:e6:
                    a9:d2:33:70:69:b9:81:14:f7:18:74:33:87:1f:96:
                    36:8a:ee:0e:17:82:44:dc:74:6a:9e:ac:19:55:ef:
                    86:e1:ab:f8:7b:6a:a5:e3:63:fa:c0:e7:a9:2b:c0:
                    6b:a1:fd:60:0b:c4:5e:6b:80:60:b5:5f:86:3f:a2:
                    d8:f8:4f:4f:1a:97:ce:08:d0:84:7c:c1:c8:83:eb:
                    d4:fd:77:11:82:39:48:d3:04:71:06:2c:75:c3:c0:
                    3f:02:28:94:d3:8b:c0:43:ee:be:ad:8d:30:dd:fb:
                    d4:b9:7b:cb:a4:df:15:a6:a0:37:15:dd:5f:21:1e:
                    e9:a5:d3:53:b5:b8:55:95:f8:6b:a0:28:26:97:50:
                    57:fe:e0:08:74:d8:24:57:dd:9b:82:c6:28:d4:80:
                    e4:e7:11:ea:de:58:a2:ef:b4:95:d2:1c:8d:f4:da:
                    02:31:1e:16:28:1f:1a:cc:92:0f:a7:4b:07:b1:5b:
                    69:62:03:8a:67:16:e1:48:c2:d5:e1:6f:c1:71:04:
                    e6:db:9b:1a:b7:2b:bb:bd:c8:3c:8c:a5:0f:1f:08:
                    38:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:04:D3:65:93:60:A1:B7:37:31:62:48:A1:C8:9E:D4:CB:72:6E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d86e75f9-10e6-3654-a1d2-2b01d135792a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f9:13:7b:c3:4f:26:32:79:77:5d:16:2b:8c:31:0f:2f:d4:
         23:2e:3b:a1:75:14:64:19:2d:46:e5:78:d5:a3:67:81:c3:8d:
         d8:cd:3b:46:cd:e2:0d:bb:16:82:39:9a:05:e1:e6:85:b6:62:
         c1:04:22:05:9c:85:1f:59:0b:21:83:90:cc:84:45:68:13:5c:
         6e:79:81:1d:0d:1c:66:49:55:a7:53:44:5d:26:a0:b5:8a:b9:
         a8:62:b6:8a:72:96:18:2b:90:b0:74:3b:2b:ec:3b:7d:9c:ae:
         ea:5e:3f:3f:fa:5a:07:5e:4b:26:1a:36:a9:06:93:09:bc:ed:
         e3:f4:ec:8e:8c:7d:72:ac:ca:da:fa:99:b1:58:9f:a2:3c:72:
         72:ee:4e:0d:e5:c2:58:5f:2a:2a:c5:40:01:f5:06:ef:15:e7:
         ca:34:ac:1e:eb:df:6c:1e:1e:46:c1:a9:4b:35:a8:3f:81:a7:
         ad:3d:16:3d:c1:1c:27:36:59:e8:a3:46:37:22:61:65:ba:8f:
         29:ca:6c:fe:cc:d0:2b:29:5d:55:41:b3:8a:95:4d:b5:76:9f:
         f8:52:aa:b1:5c:e1:d6:e1:3b:a2:59:f0:3d:61:37:77:41:a8:
         d6:d4:3e:71:b6:b9:15:f5:b8:0a:fe:a5:3c:44:bf:71:8a:46:
         0b:f5:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:31 2025 by rpki-client