Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/19a2abde-dac0-3ded-af44-6b1fc54f5dcb.roa
File:                     19a2abde-dac0-3ded-af44-6b1fc54f5dcb.roa (raw, json)
Hash identifier:          wDvui8FAEns09D7ID7blfBiPBE65IeZp/9vaTo3wdFM=
Subject key identifier:   3E:6E:F1:52:14:79:80:D8:16:7B:B7:91:B5:4F:EF:B7:04:4C:58:0C
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F432858464349E6410421A7768C217B40
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/19a2abde-dac0-3ded-af44-6b1fc54f5dcb.roa
Signing time:             Wed 19 Jun 2024 13:00:34 +0000
ROA not before:           Wed 19 Jun 2024 13:00:34 +0000
ROA not after:            Tue 17 Sep 2024 13:00:34 +0000
asID:                     12271
IP address blocks:        24.136.112.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:43:49:e6:41:04:21:a7:76:8c:21:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jun 19 13:00:34 2024 GMT
            Not After : Sep 17 13:00:34 2024 GMT
        Subject: CN=5ed02191-fe23-4a53-862c-b3214aaed21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:50:32:a9:10:84:38:76:28:ae:10:c8:00:
                    99:8b:1a:3b:a6:c0:be:64:22:e7:0b:d7:46:1b:9d:
                    b2:5d:d4:25:fc:02:02:c7:5d:9d:b2:c6:55:d8:eb:
                    5b:30:42:78:a7:b5:a3:f9:92:2d:49:4a:f0:f8:89:
                    2c:6e:b9:21:0c:95:49:ea:1b:1a:55:fc:ff:41:41:
                    38:05:5f:a9:02:18:7e:f9:7d:22:fd:7e:48:3f:ce:
                    66:29:0a:b7:a1:2b:be:a1:69:e8:20:38:c6:dc:bc:
                    90:da:b9:15:97:25:af:71:dd:32:a2:70:d5:f2:7f:
                    fb:50:a7:63:d4:aa:14:a8:83:f2:ff:9b:27:c3:de:
                    22:d7:da:de:ce:f7:63:73:86:0f:70:bc:e5:67:5a:
                    10:e9:07:ca:19:18:8e:3a:00:a2:50:37:19:3a:d0:
                    c3:1d:71:23:4f:17:72:3e:2b:ec:43:f1:c3:e2:f0:
                    f1:6b:71:97:79:fb:f5:51:14:44:27:8b:93:41:67:
                    d4:7f:e4:3e:c0:01:6f:d2:80:75:64:ac:f9:59:e4:
                    6d:93:13:14:b1:7e:0b:24:66:3d:d8:c7:c7:1a:9a:
                    09:3d:e5:b4:eb:38:43:a0:7b:4a:45:c5:6b:ba:2a:
                    15:ab:09:df:96:9f:09:c7:04:20:b2:ce:ce:0a:f3:
                    1a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6E:F1:52:14:79:80:D8:16:7B:B7:91:B5:4F:EF:B7:04:4C:58:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/19a2abde-dac0-3ded-af44-6b1fc54f5dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.136.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:12:a6:f5:5e:3a:a5:a1:93:3b:e1:cf:77:00:96:79:f4:9d:
         e4:31:50:67:8b:fd:84:c1:af:28:a0:45:8a:c7:d5:0e:29:ba:
         71:8a:d4:ac:7e:e4:19:56:c5:d6:e8:2e:6d:87:87:ab:81:d8:
         cd:83:6e:95:86:e1:58:66:68:1c:78:b6:3d:64:84:25:d0:19:
         57:ed:f9:d8:f1:93:b0:55:cf:55:70:6a:ef:10:cf:7f:81:d2:
         ee:72:90:bd:65:7c:40:d7:fe:60:5b:78:b7:39:35:a1:bb:b7:
         43:99:33:26:15:3a:8b:22:f6:f9:a5:64:5f:9e:db:50:71:f0:
         73:ff:47:4c:66:13:76:ab:1c:aa:eb:5a:7d:4a:2f:3f:c3:21:
         4f:eb:c7:5f:54:0d:dc:e0:88:f0:d9:92:bb:10:1a:8f:5a:c4:
         81:4d:0f:1b:3e:e5:8f:42:e2:81:20:38:6b:81:1a:2a:fa:5b:
         ec:1a:27:8d:c1:75:7e:5b:9d:46:8f:c6:74:b3:d3:98:2a:36:
         3c:64:da:c6:54:c2:f4:90:73:39:16:8a:c6:66:f1:66:03:d6:
         97:cb:6e:75:fe:9a:07:88:c1:53:8b:b3:63:70:d7:73:4e:ed:
         80:bb:85:ec:5c:28:2e:b2:85:26:9a:2b:05:79:2e:0b:c9:5a:
         e2:f1:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:50:55 2025 by rpki-client