Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/cc1f1317-70e9-3380-aae6-c20498ac77aa.roa
File:                     cc1f1317-70e9-3380-aae6-c20498ac77aa.roa (raw, json)
Hash identifier:          +u/Vws24ZEQ/kI9Wxy4ytZkCfsMy/1wGWPmgkThrAV8=
Subject key identifier:   D1:42:B6:E1:F3:C4:42:4F:32:E8:80:F4:FC:D7:D4:8B:CB:03:61:DE
Certificate issuer:       /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial:       010D0C9F43285847DE3CCB339CDCCD2EEA56E9C0
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/cc1f1317-70e9-3380-aae6-c20498ac77aa.roa
Signing time:             Wed 13 Nov 2024 17:51:54 +0000
ROA not before:           Wed 13 Nov 2024 17:51:54 +0000
ROA not after:            Tue 11 Feb 2025 17:51:54 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:de:3c:cb:33:9c:dc:cd:2e:ea:56:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
        Validity
            Not Before: Nov 13 17:51:54 2024 GMT
            Not After : Feb 11 17:51:54 2025 GMT
        Subject: CN=ec78a4e0-aec7-424f-9ab8-62487772a62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:eb:5f:1c:6e:34:cb:b9:48:4f:8a:50:d1:93:
                    3c:d1:71:f9:2f:7b:a2:81:e0:59:8a:24:ed:a0:05:
                    d8:5c:01:2f:ae:ef:92:74:b4:6c:2d:b3:31:f1:34:
                    c6:61:07:31:e4:20:9f:80:6c:9c:bf:a7:68:a7:1a:
                    5c:17:e7:10:6d:6b:aa:83:83:fc:0f:25:c3:5a:95:
                    af:7f:9d:bc:a4:41:10:5a:9a:18:80:ac:df:b2:82:
                    5c:ee:7f:84:3d:1b:8b:ce:d4:35:27:d2:fc:ab:3b:
                    10:11:52:f0:c6:dc:17:fb:55:89:c8:88:9c:1d:44:
                    f7:a3:74:9c:2b:14:64:8c:67:4f:5e:06:ec:1e:ad:
                    8b:1c:8f:b1:e2:8a:82:f4:ee:87:06:2a:b8:78:cb:
                    fa:6e:59:00:49:9c:78:4e:00:3d:5c:43:19:e3:7c:
                    be:5b:5b:49:c7:77:6c:0f:2f:b9:bc:39:65:72:aa:
                    1a:c9:e7:1f:22:91:3b:57:6c:64:4a:16:48:c3:73:
                    00:cf:39:fe:c5:37:dc:36:ae:b3:7c:8d:8c:e2:d8:
                    02:c3:c3:c0:77:b5:d2:61:4d:d1:e7:96:2e:28:3e:
                    a3:50:71:e4:99:bc:0c:8c:34:54:0d:9c:72:ef:af:
                    90:1d:02:a2:cd:53:27:6f:64:36:97:e2:ff:a1:44:
                    51:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:42:B6:E1:F3:C4:42:4F:32:E8:80:F4:FC:D7:D4:8B:CB:03:61:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/cc1f1317-70e9-3380-aae6-c20498ac77aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl

            X509v3 Authority Key Identifier:
                keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9b:61:30:c7:5d:82:15:5e:1e:9a:a4:37:79:83:63:84:c6:
         79:b9:f7:cd:34:00:69:ab:69:3a:f5:03:7e:bd:f6:17:9b:c1:
         a3:f8:a3:94:f9:58:33:fc:d7:3d:81:6f:b6:64:c9:ba:29:32:
         14:0a:01:53:a3:0d:df:72:a8:86:c8:35:6e:39:64:fd:90:71:
         73:c1:68:82:ad:46:c3:73:13:e8:26:f8:b4:32:28:b6:c7:d1:
         7c:7e:aa:3a:08:ff:01:98:6c:21:65:f0:64:10:21:d6:1d:35:
         70:0b:5a:49:d1:25:73:a9:be:0c:07:b9:18:7a:18:8b:5e:54:
         ae:d9:ae:58:05:37:ef:48:d4:53:bd:2d:bd:17:b4:57:34:f6:
         4f:ce:0d:2b:05:3f:32:9c:e6:0c:a1:b3:2d:36:4f:38:fb:29:
         05:94:98:41:49:64:2c:29:09:d5:be:6d:1c:d9:9b:da:07:42:
         9d:d5:d2:05:45:09:5d:61:64:ca:95:3a:b9:df:2d:9d:8a:ec:
         6c:8b:76:4b:06:7d:4e:f3:1e:09:a2:88:8d:ef:10:7e:50:ad:
         9d:15:e7:fc:ca:38:a8:0e:3e:57:2b:41:9d:ab:aa:e9:5c:46:
         66:5f:0b:6a:97:e0:0c:44:f7:f4:8c:aa:36:a2:3b:82:cb:18:
         31:9b:44:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:56:55 2025 by rpki-client