Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/140eb8dd-ac0c-3ac1-b9f2-2fe958991007.roa
File:                     140eb8dd-ac0c-3ac1-b9f2-2fe958991007.roa (raw, json)
Hash identifier:          cjyJ+Xan3MjSvbee7JSsjsYwRgn//5dbrBBZ+95svEo=
Subject key identifier:   BF:EF:21:69:B9:11:4F:9E:19:6B:27:4C:14:39:FF:06:C0:38:A9:AA
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F432858466099DEF006A88805C8025960
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/140eb8dd-ac0c-3ac1-b9f2-2fe958991007.roa
Signing time:             Sun 30 Jun 2024 01:00:24 +0000
ROA not before:           Sun 30 Jun 2024 01:00:24 +0000
ROA not after:            Sat 28 Sep 2024 01:00:24 +0000
asID:                     5488
IP address blocks:        161.195.143.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:60:99:de:f0:06:a8:88:05:c8:02:59:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Jun 30 01:00:24 2024 GMT
            Not After : Sep 28 01:00:24 2024 GMT
        Subject: CN=7cf00227-7c5d-4825-8df3-016226b5f63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b8:6b:4b:f3:7b:09:f8:8c:d8:ff:27:dd:c3:
                    28:19:6b:3a:bb:9d:73:53:b4:89:19:eb:79:4f:12:
                    5a:11:d3:b6:29:7f:64:54:ae:22:46:c2:c6:90:ee:
                    f0:01:a0:3a:24:36:75:96:5c:eb:5e:06:cc:3f:f9:
                    31:35:25:1f:02:f3:24:98:bc:a8:29:e8:7c:63:41:
                    8b:20:ae:0e:97:b6:38:58:d0:3d:18:4f:72:e7:16:
                    8e:1e:7d:b1:e4:65:d3:f2:b0:ac:c6:96:6b:73:65:
                    c0:f8:f3:82:33:78:3c:b6:0e:a3:57:32:ab:55:27:
                    2c:1a:11:88:86:37:dd:fe:9b:70:3b:a4:38:ae:73:
                    39:12:9d:72:23:46:ad:99:19:86:c1:1a:e9:f0:3d:
                    25:03:b5:05:d9:f1:6f:f9:7e:8a:f4:15:17:f8:df:
                    e7:20:f5:73:22:fe:3b:2c:78:64:c1:46:ee:e2:49:
                    86:42:ab:35:54:97:15:45:88:5a:08:26:4c:27:94:
                    1d:44:95:6b:00:7f:9a:51:75:d1:c1:c1:cd:a3:3f:
                    0e:ec:09:80:f3:36:cd:53:fa:ff:4f:87:c5:de:db:
                    e8:b7:38:1e:04:a2:98:81:0d:d2:bc:c4:e3:6f:1a:
                    d6:4e:df:6c:0e:b4:21:3a:d6:8b:99:6f:a3:6c:1d:
                    a8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EF:21:69:B9:11:4F:9E:19:6B:27:4C:14:39:FF:06:C0:38:A9:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/140eb8dd-ac0c-3ac1-b9f2-2fe958991007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:91:85:f0:fb:82:44:ca:ca:76:75:91:11:26:c6:f5:70:9c:
         97:e3:a2:1d:0e:66:e8:9f:3c:84:01:54:f4:3e:13:6f:1b:24:
         97:21:0e:e6:d7:3c:5f:9d:e0:b1:a3:27:f0:6c:30:2c:96:1a:
         bf:ee:96:c6:9e:a3:2a:1b:9c:ae:1b:a2:bb:c5:3c:ab:47:1c:
         65:91:22:3a:5a:96:83:43:1f:d4:13:b7:d5:a4:a4:38:b9:f4:
         7f:51:fc:e2:e0:a3:35:c5:7b:43:cd:52:52:85:8c:ae:71:b6:
         10:50:04:ed:05:47:51:f1:61:f2:1c:06:b1:51:4a:dd:71:35:
         79:63:fa:ed:70:b1:26:01:96:66:68:c7:8e:b2:fa:23:78:c4:
         bc:23:a0:6d:88:68:64:a7:3b:d1:e7:a9:90:0a:2c:f9:15:8f:
         00:0d:1a:4c:28:ae:67:7f:66:7a:4e:35:92:a4:36:99:f1:02:
         d4:52:ab:8d:50:0d:84:cf:8a:11:75:89:1a:61:a5:dd:a8:4a:
         6d:d1:44:43:29:1d:0a:33:60:d1:00:a9:44:97:ad:f0:de:51:
         66:ed:c0:16:1e:fa:78:c4:55:62:74:b2:45:aa:ca:cb:1e:07:
         ae:2d:e2:13:77:89:54:80:6b:67:64:7f:b5:52:61:0e:63:ff:
         38:32:41:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:55 2025 by rpki-client