Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4962fc08-53f1-3f35-94ad-f04055c6dc68.roa
File:                     4962fc08-53f1-3f35-94ad-f04055c6dc68.roa (raw, json)
Hash identifier:          UbbCRYWTj1oHENYh5NKhegGmbgsNqCPhbTQwEAR08fE=
Subject key identifier:   97:B2:1D:80:C3:DF:EE:60:54:1F:5F:B2:F9:7F:BC:93:8B:34:FB:EC
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584847E023E134FD90C6DC89F240
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4962fc08-53f1-3f35-94ad-f04055c6dc68.roa
Signing time:             Sat 21 Dec 2024 14:00:52 +0000
ROA not before:           Sat 21 Dec 2024 14:00:52 +0000
ROA not after:            Fri 21 Mar 2025 13:00:52 +0000
asID:                     11344
IP address blocks:        136.124.1.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:47:e0:23:e1:34:fd:90:c6:dc:89:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Dec 21 14:00:52 2024 GMT
            Not After : Mar 21 13:00:52 2025 GMT
        Subject: CN=d7feb35e-17dc-4849-8b0c-c5344e84e6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:51:ab:47:5f:a6:72:0b:7f:a2:1a:93:a3:95:
                    7e:c4:4a:92:17:c9:26:4d:b4:a3:44:1b:e3:10:44:
                    7d:68:21:04:d3:3e:fe:5c:ad:01:49:ef:96:55:e4:
                    6d:80:c1:c0:04:37:bc:66:e1:21:60:1f:a6:76:51:
                    70:70:cf:d1:1d:19:01:af:51:58:37:96:39:7e:d7:
                    46:cd:fa:be:42:ca:d2:9b:9a:d9:42:81:ab:f2:8b:
                    49:12:98:ad:d3:23:31:28:9f:22:eb:eb:99:a8:ae:
                    45:ae:4e:de:49:6b:fc:27:62:37:70:9b:74:9b:09:
                    10:0e:3c:b8:30:f5:25:bb:98:13:ce:31:5a:14:5f:
                    b8:8f:c8:88:a2:91:5e:40:88:a5:6e:5f:43:1a:b7:
                    2b:56:ef:1c:6c:87:a7:14:b0:7a:0f:48:76:23:9c:
                    f9:46:9f:80:3b:ea:dd:2c:d4:d1:b2:1d:66:23:09:
                    db:c2:fa:ab:ae:9a:8c:3c:4b:a2:17:cf:b9:2a:9a:
                    3b:17:4d:ab:f1:05:c0:5f:8f:4b:46:d0:da:cb:ec:
                    c9:0a:5a:3d:bb:0e:92:56:b0:85:db:e2:08:ab:8f:
                    49:0a:6d:8f:99:e2:13:3b:c7:f8:de:0e:a4:a8:31:
                    fb:39:e0:d8:3a:f0:8e:04:38:80:77:e0:80:a5:94:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B2:1D:80:C3:DF:EE:60:54:1F:5F:B2:F9:7F:BC:93:8B:34:FB:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4962fc08-53f1-3f35-94ad-f04055c6dc68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.124.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:9a:80:f3:ce:da:29:c1:33:08:6d:67:f9:99:12:33:20:68:
         e6:6f:5a:bf:3a:a5:e9:16:bc:b8:42:01:d1:97:18:72:06:1e:
         8c:71:d5:df:23:d3:00:d3:da:0f:e5:64:bc:73:0f:69:3b:38:
         48:de:37:2c:6b:ed:e1:91:86:3e:44:d1:02:81:41:66:98:c8:
         18:90:55:7e:c8:73:2c:fb:87:90:21:16:ac:72:20:aa:64:a0:
         d9:8b:a4:4b:09:62:83:e7:83:e4:9f:b6:8e:d1:0f:48:10:70:
         b6:e6:8d:3a:77:d8:59:51:1d:d6:e5:3c:ba:b6:59:13:ac:43:
         d8:e8:0f:64:56:93:47:f3:38:3c:5f:be:c7:fc:dd:c6:90:ba:
         25:28:37:e3:04:ab:a1:e7:75:e1:06:79:46:3e:a5:3f:01:af:
         de:50:22:68:02:fe:26:64:1b:1d:40:37:6a:08:7c:c0:c5:93:
         c1:be:de:3f:4e:36:f5:d7:19:c8:96:2d:ae:d3:b0:85:dd:46:
         1d:9e:d6:dd:40:b4:ee:b2:dc:b3:a5:37:a2:fc:1b:87:04:df:
         9d:41:ed:b5:f5:ee:1c:18:6b:db:b8:96:82:a3:e1:d7:e4:ba:
         48:10:3e:69:b8:93:f8:9a:b5:b8:cc:8c:50:1b:d1:ad:93:74:
         19:87:30:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:54:30 2025 by rpki-client