Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb07ef0a-d962-3faa-bcb9-fa01c36ccbd7.roa
File:                     fb07ef0a-d962-3faa-bcb9-fa01c36ccbd7.roa (raw, json)
Hash identifier:          TQZZfgt2Ekjub6dswhtt8l8W8gL8LgDenoQHxdYyT6c=
Subject key identifier:   6B:A9:24:B7:2C:92:66:91:7C:09:4B:73:D0:BA:39:AB:A7:DE:D7:C6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285842B3D829F9FC7E23A12591A940
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb07ef0a-d962-3faa-bcb9-fa01c36ccbd7.roa
Signing time:             Thu 27 Jul 2023 12:00:00 +0000
ROA not before:           Thu 27 Jul 2023 12:00:00 +0000
ROA not after:            Sun 28 Jan 2024 05:00:00 +0000
asID:                     16637
IP address blocks:        2001:470:170::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b3:d8:29:f9:fc:7e:23:a1:25:91:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 27 12:00:00 2023 GMT
            Not After : Jan 28 05:00:00 2024 GMT
        Subject: CN=34f96fb8-da3e-4501-a39d-cdecb752e231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4e:45:e4:83:73:43:ae:cb:0a:28:97:bd:9b:
                    c8:b0:99:f4:4b:e6:e4:c6:4d:a1:ac:f2:cc:8f:8a:
                    ca:25:99:11:33:16:dc:c9:d6:2e:06:ba:74:09:5d:
                    d5:e7:c4:04:0e:c6:f2:4a:50:18:b7:72:80:a3:c9:
                    de:66:5d:7b:f9:4e:d3:fb:50:44:8f:28:42:d6:a8:
                    6a:a5:9a:5a:61:db:34:a6:15:f6:55:a0:1b:98:4d:
                    cf:ba:c8:8d:2b:e6:de:da:3e:17:b2:de:e0:4c:a6:
                    83:3a:9b:02:9c:ae:07:7b:be:3f:e4:a3:8c:05:8a:
                    d8:f2:1c:ba:d8:76:86:2c:65:08:d8:a8:26:bf:9b:
                    13:06:45:4f:e3:51:45:50:d3:a7:0b:6f:81:39:cb:
                    81:62:ea:83:68:90:ba:19:07:6a:97:e6:f8:9a:69:
                    ae:f0:ac:3a:80:b9:b3:56:c1:e2:0d:9c:48:4b:53:
                    97:78:91:dd:07:ab:18:04:ff:25:d6:4f:c9:73:d3:
                    9d:7a:ed:9a:44:32:77:43:b2:37:80:6f:3f:2f:5e:
                    56:66:07:89:16:dc:78:2d:76:a7:68:03:9b:08:49:
                    22:2a:b6:4c:42:38:49:39:50:6a:e6:a3:76:72:e6:
                    af:6f:d8:34:8f:27:0c:89:ae:cc:06:33:ac:68:a6:
                    d7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A9:24:B7:2C:92:66:91:7C:09:4B:73:D0:BA:39:AB:A7:DE:D7:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fb07ef0a-d962-3faa-bcb9-fa01c36ccbd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:170::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:70:ca:94:76:73:88:55:42:74:0d:01:55:85:9c:90:6e:c7:
         4e:6a:ec:31:8c:10:cd:28:b5:36:2c:ee:00:55:5c:9d:0a:76:
         9b:cc:53:23:8c:09:6a:18:7c:6f:9b:37:8c:f8:df:fc:fa:c1:
         fb:38:72:30:2b:07:95:3e:e5:d0:d9:6b:fb:7d:8d:17:67:ee:
         8e:13:5e:6a:27:78:16:3a:2e:7d:d8:10:74:a4:23:65:60:b9:
         6a:8a:aa:84:0b:af:70:12:6d:88:6b:a7:84:e3:52:f7:9a:79:
         11:7a:bd:44:5b:d8:80:6c:b5:7f:1b:40:7c:40:c5:aa:55:90:
         f6:6b:75:88:13:6e:1e:f7:ae:6a:fe:34:06:9b:3a:b2:2e:c0:
         21:79:8f:af:cb:47:09:0f:e6:17:22:19:0b:0e:59:dc:de:87:
         93:d3:dc:3f:4d:ed:33:48:37:cb:2b:a7:0e:37:4b:ec:ab:fa:
         61:f6:71:9c:ec:27:91:a9:76:8c:f5:04:b6:c6:99:2a:4c:85:
         9d:2e:32:51:b5:38:3b:93:4e:20:a5:96:b7:37:60:0d:78:1a:
         dc:ab:c5:8b:4d:37:4e:94:31:2c:a5:51:29:cd:b6:77:82:9d:
         e0:50:fd:b8:e4:53:e8:40:15:91:c9:2d:b4:5c:01:84:74:92:
         65:95:12:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 28 05:19:32 2024 by rpki-client on console-fra.rpki-client.org