Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b60840cf-67b3-3958-bbff-a45012d48d38.roa
File:                     b60840cf-67b3-3958-bbff-a45012d48d38.roa (raw, json)
Hash identifier:          Y59KOTKHu6pdjNF1rwUSbN6DvX7evItm+2+HqqeuNvU=
Subject key identifier:   B0:2C:38:BD:AD:CE:62:8A:ED:2B:A3:15:8A:BA:FE:5B:B6:2C:F3:97
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584851A57B4B6A6E49EFBD901C40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b60840cf-67b3-3958-bbff-a45012d48d38.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     149440
IP address blocks:        172.252.136.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:7b:4b:6a:6e:49:ef:bd:90:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=88121aae-18c8-4dc7-ae75-5c5b388e1dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ff:39:cd:05:0e:dd:f0:b2:0c:de:9e:a9:c4:
                    d8:55:ce:3e:0a:cf:12:51:72:44:33:c5:ae:e0:a6:
                    7c:b2:a9:f1:89:a1:50:7b:36:73:08:c2:17:bd:0c:
                    88:88:70:ee:a7:44:64:dc:23:9b:d5:df:fd:cb:ef:
                    b5:85:79:1f:e7:90:fd:4b:6f:e1:3b:7e:f9:c6:1c:
                    ca:d1:57:5d:12:fb:1d:3e:b3:92:c2:d8:a5:8c:26:
                    c6:94:09:5b:9e:c9:1e:ea:a8:8f:a6:b1:51:a6:58:
                    d6:fe:a1:f7:cf:b9:0f:16:19:d2:71:e1:d2:62:99:
                    6c:03:29:68:c5:95:f2:f9:ed:96:a9:1b:e2:b2:c5:
                    61:a1:f5:3b:f6:84:7d:97:50:04:ff:33:7e:f0:e8:
                    89:21:03:88:3e:8b:5e:39:00:3a:60:75:54:8a:6b:
                    06:4c:33:c2:bf:04:9a:b2:2e:10:1a:e6:7c:d6:46:
                    1c:b1:4a:27:00:f3:3c:18:e3:54:2c:9d:07:c4:bf:
                    9c:26:84:4d:c4:87:bf:a2:2b:f1:05:6e:38:40:28:
                    cd:d8:e5:97:c9:fb:79:2b:36:7f:57:59:60:d2:fb:
                    33:d8:81:74:47:2b:dc:d0:f6:38:11:e7:de:9e:8b:
                    62:6e:53:61:ab:5c:56:86:f5:67:7a:f9:25:d6:25:
                    5e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2C:38:BD:AD:CE:62:8A:ED:2B:A3:15:8A:BA:FE:5B:B6:2C:F3:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b60840cf-67b3-3958-bbff-a45012d48d38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:b7:0c:cd:a5:7a:5c:07:12:56:2c:fc:27:d3:13:86:53:ea:
         c7:0d:71:3c:44:a6:1b:f9:bf:bf:d3:49:c6:bd:51:67:b7:bc:
         e8:fd:35:cd:d2:59:7c:28:71:0c:0d:d8:b8:91:e5:9d:92:75:
         55:70:56:ce:4e:71:31:80:7f:a1:01:3b:d4:4f:2e:40:80:57:
         58:b8:33:44:92:38:a6:c3:49:58:d4:16:69:24:4e:c4:59:04:
         ad:0c:dd:4b:31:95:50:37:97:1a:37:d0:a4:50:6c:15:66:15:
         cb:52:7f:0e:ea:f5:5a:f8:65:1e:8a:a7:c1:05:1b:78:75:db:
         4b:f4:bc:c6:c7:27:d5:37:4e:90:b5:2f:c9:ac:0e:0c:88:f2:
         2d:ee:d9:dc:cf:a9:d7:58:83:86:f2:ba:e9:1b:27:86:bf:88:
         d4:1e:6f:d2:99:0d:f8:62:37:c1:05:52:94:7b:94:6b:70:de:
         47:9d:72:7a:cd:fb:fc:fa:02:d5:af:31:72:02:90:9b:01:8a:
         81:b9:91:70:f2:4a:0c:5f:9d:3e:6a:17:16:86:f7:3e:9f:b1:
         6e:9f:4d:70:cc:26:42:ca:78:e6:26:2f:b9:17:95:fd:2c:4e:
         05:d9:81:af:90:d4:91:5e:ab:fd:dd:51:85:98:9b:0e:eb:61:
         a5:8e:ef:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:03 2025 by rpki-client