Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/99b37237-0de6-3074-9ec6-220e77073068.roa
File:                     99b37237-0de6-3074-9ec6-220e77073068.roa (raw, json)
Hash identifier:          jKBk3/n8rpVs6aZy1pzMcLRMsT7tn/F1ly36U4lkUQA=
Subject key identifier:   E1:35:31:96:0E:64:07:77:F4:45:EC:87:2D:90:38:8E:72:76:D1:A7
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F432858465409DCE5407EF38F4150BE80
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/99b37237-0de6-3074-9ec6-220e77073068.roa
Signing time:             Tue 25 Jun 2024 13:00:33 +0000
ROA not before:           Tue 25 Jun 2024 13:00:33 +0000
ROA not after:            Mon 23 Sep 2024 13:00:33 +0000
asID:                     834
IP address blocks:        194.156.175.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:54:09:dc:e5:40:7e:f3:8f:41:50:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Jun 25 13:00:33 2024 GMT
            Not After : Sep 23 13:00:33 2024 GMT
        Subject: CN=258bbebe-56ca-42b6-a95f-915725cfba94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2a:8a:f9:71:be:a2:50:8c:d2:4e:e0:6f:75:
                    eb:20:4c:af:ac:e2:61:e0:47:67:30:c2:41:3f:e1:
                    bf:00:2f:45:06:b5:02:94:c2:11:ba:0f:d3:7a:7e:
                    e4:4b:7b:15:d1:a1:14:6f:5b:12:4c:88:af:bc:17:
                    9d:e2:46:7a:7d:ad:e3:a0:c7:0a:08:61:a2:c9:7f:
                    b8:24:04:9f:b4:de:e0:6c:9e:20:8e:cb:e3:ae:54:
                    b9:0d:26:44:6d:fc:4b:b7:b1:13:ab:80:aa:11:29:
                    ac:e9:0c:38:b9:a6:bf:0b:6c:bd:fc:bd:dc:cd:8d:
                    4a:9c:3e:1f:00:21:7e:9e:53:43:9d:41:3b:e3:ac:
                    4d:5f:a2:12:9a:77:4b:ea:27:3d:d7:2f:2e:ed:33:
                    f9:60:eb:32:9c:0b:cb:11:cf:b2:ba:1d:b2:2b:21:
                    13:ea:cd:c1:35:b0:c9:90:61:9a:db:a0:9b:39:ba:
                    2e:7f:08:c3:08:42:04:0d:b7:4d:8c:3e:86:b8:6a:
                    b1:4d:eb:27:29:30:8f:eb:7e:b0:6b:b9:b0:5f:08:
                    8e:ce:d9:1e:d2:47:1a:b2:fc:e5:a3:77:45:ee:c4:
                    0c:fb:4e:03:e9:3f:69:d6:79:16:fe:e1:1c:8e:0e:
                    8b:5c:6b:c6:83:7b:af:fa:49:d2:9e:0c:10:cb:b6:
                    aa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:35:31:96:0E:64:07:77:F4:45:EC:87:2D:90:38:8E:72:76:D1:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/99b37237-0de6-3074-9ec6-220e77073068.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.156.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:47:e1:7f:25:a9:74:6b:1d:09:25:ab:94:e1:82:a3:86:db:
         7e:3f:fd:a9:4e:68:80:df:bb:d3:49:75:37:5e:10:e1:66:ee:
         83:d9:16:7f:14:ff:dc:49:8c:64:88:61:dc:67:2c:e5:8c:52:
         a4:8e:d5:3a:ea:52:ef:f3:7c:c1:84:8e:5b:a7:c2:2f:af:de:
         ce:83:fd:7f:1b:d7:84:03:97:c5:6f:5f:51:43:8a:34:3b:00:
         e1:74:2b:f0:73:86:6f:a2:55:2f:61:84:0e:0b:80:b2:b8:4a:
         c2:7f:ea:27:e4:5b:fd:69:fe:71:34:7e:12:7c:a6:17:fa:c5:
         82:12:13:40:38:ac:ad:cb:ab:99:6a:76:29:be:96:14:6f:9e:
         e9:dd:81:00:61:05:ce:5e:32:80:e7:f0:d9:67:fc:10:22:d6:
         db:d0:4a:bf:c8:47:74:f3:7f:ae:45:81:71:55:55:3f:96:59:
         76:29:ac:bb:3f:fd:36:81:3b:60:57:43:c0:fb:ae:cf:82:9b:
         b3:b7:ce:1e:10:0b:05:23:78:41:c4:38:a8:fa:9f:8a:68:10:
         aa:2b:16:92:ce:e5:fc:89:a1:ce:ea:8a:3a:08:d6:fe:50:d8:
         61:ef:00:d7:20:89:aa:e9:76:90:43:a1:ff:eb:62:fd:df:f1:
         d0:8d:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:57 2025 by rpki-client