Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7b6cd25-7f14-35cf-98ab-e72acf6e3da0.roa
File:                     f7b6cd25-7f14-35cf-98ab-e72acf6e3da0.roa (raw, json)
Hash identifier:          EcU7CJU8yxiB5vX2hi/LCBWS5CkucSaKPE+hpM5I+u4=
Subject key identifier:   74:9D:60:8D:AF:7D:A2:A7:C5:D6:52:BB:D7:09:A7:6C:1D:13:AA:1E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285847827E8891D88BFFEBB8C3C540
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7b6cd25-7f14-35cf-98ab-e72acf6e3da0.roa
Signing time:             Fri 11 Oct 2024 21:09:59 +0000
ROA not before:           Fri 11 Oct 2024 21:09:59 +0000
ROA not after:            Thu 09 Jan 2025 22:09:59 +0000
asID:                     7385
IP address blocks:        136.0.55.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:82:7e:88:91:d8:8b:ff:eb:b8:c3:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct 11 21:09:59 2024 GMT
            Not After : Jan  9 22:09:59 2025 GMT
        Subject: CN=23fccbdf-ebd5-49be-b0d6-e66291891a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:5c:13:d8:25:ce:ba:1e:ec:98:79:92:1c:
                    73:64:00:27:f8:fb:2e:f3:00:b7:ae:e1:b7:2b:6d:
                    cb:24:27:8f:05:b5:69:45:06:ec:93:4d:e4:13:3d:
                    39:4e:cf:b3:0d:ff:95:05:31:c8:dd:f2:da:7c:f7:
                    24:07:3d:9f:51:79:1b:78:2a:00:4d:c4:2c:9b:96:
                    28:36:5c:4a:4f:8a:a7:7c:22:b2:83:bf:04:f7:e9:
                    88:45:97:da:9e:32:99:46:e5:a9:15:3d:80:91:c4:
                    33:2e:b4:c8:ad:a9:0f:50:86:87:94:62:64:d0:e2:
                    3b:f4:01:09:78:7c:9b:2d:45:a9:7c:6c:39:74:26:
                    2e:27:02:f1:92:a5:0b:b7:37:53:ca:ad:23:6e:4d:
                    c8:8b:88:7d:2f:19:88:ff:91:a9:2b:b9:24:e0:b8:
                    1c:f8:55:01:4a:69:61:fa:45:51:80:37:52:e1:ff:
                    64:23:ba:b7:6a:8d:ee:a1:53:f3:86:7f:3c:55:da:
                    8c:ef:6a:63:5f:cc:96:cd:ec:42:1a:b6:c5:67:0f:
                    e8:06:13:11:ed:be:d5:37:f0:ef:05:ce:d4:0e:27:
                    62:32:03:db:62:f0:6e:8d:4d:89:f7:5a:60:e5:91:
                    8a:c0:09:9e:ad:ab:55:ee:cc:c9:c6:ba:a9:ee:2e:
                    87:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:9D:60:8D:AF:7D:A2:A7:C5:D6:52:BB:D7:09:A7:6C:1D:13:AA:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f7b6cd25-7f14-35cf-98ab-e72acf6e3da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a3:8f:7c:d0:3d:f8:98:85:7a:f8:29:69:73:c6:03:0c:4e:
         fc:c0:99:6f:49:a8:e8:46:49:7d:d0:6f:93:e4:a0:cf:77:d0:
         ac:58:df:85:66:3f:e5:4d:a8:1c:31:e4:c8:3c:ef:49:62:c2:
         e4:e4:5c:8b:23:64:b9:32:53:03:08:c8:c3:58:8c:75:cd:2f:
         a6:f2:61:c5:ca:97:df:ea:fe:13:84:6f:e6:5b:e1:ac:64:5a:
         be:1c:c4:67:37:e6:20:1f:10:47:d9:e7:d7:aa:e2:4b:4a:81:
         84:87:42:93:cc:15:76:09:63:ac:32:7a:30:a0:e7:2e:92:1e:
         0b:80:a9:57:37:39:e9:68:5d:93:6b:3b:19:cd:01:ca:b5:59:
         1a:ad:8a:9d:19:3c:d7:fc:4e:a1:e4:5f:36:d4:87:23:87:3a:
         cb:ab:1c:eb:2a:05:30:95:9f:31:a0:15:cf:c5:20:ce:f9:61:
         52:db:4d:44:01:55:0f:70:ff:f8:d5:12:b4:41:97:81:37:03:
         1e:4a:9f:5c:81:85:5b:17:32:28:1c:a6:1d:de:d5:2c:c7:bb:
         a7:9e:29:2a:27:24:82:0c:52:fc:d4:58:81:c9:15:0e:0d:82:
         5b:01:40:75:6e:b3:6e:a6:f1:ed:b5:d7:99:02:97:09:4d:b6:
         6c:a8:a0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:36:24 2025 by rpki-client