Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/34d538a5-ffc0-3eef-83a4-210e500ec9c0.roa
File:                     34d538a5-ffc0-3eef-83a4-210e500ec9c0.roa (raw, json)
Hash identifier:          NCbuM1aaynEUgSqQaD0wtC5N3/j5TCOlrBw3TCAubTY=
Subject key identifier:   96:F8:FF:9F:E5:1E:88:36:B8:A6:74:0E:C4:3C:A6:BE:94:B5:67:93
Certificate issuer:       /CN=d41ab67f-35a7-4489-ad3d-ff5b73ab0447
Certificate serial:       010D0C9F43285846B974453DE09B0934A49F8780
Authority key identifier: BD:FA:2A:56:43:4A:7C:92:11:8A:D4:8E:A2:97:D5:C2:BF:94:35:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/34d538a5-ffc0-3eef-83a4-210e500ec9c0.roa
Signing time:             Wed 31 Jul 2024 20:51:50 +0000
ROA not before:           Wed 31 Jul 2024 20:51:50 +0000
ROA not after:            Tue 29 Oct 2024 20:51:50 +0000
asID:                     7118
IP address blocks:        2607:f2d0::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b9:74:45:3d:e0:9b:09:34:a4:9f:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41ab67f-35a7-4489-ad3d-ff5b73ab0447
        Validity
            Not Before: Jul 31 20:51:50 2024 GMT
            Not After : Oct 29 20:51:50 2024 GMT
        Subject: CN=79e0fce6-afa5-468e-922c-234e72fb21f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:26:c4:92:09:4a:f0:d1:db:3e:34:1b:d6:
                    18:c5:cb:d6:86:73:6f:07:12:3a:77:03:c5:48:06:
                    9b:3a:e1:f5:62:b8:40:0f:e6:b4:8a:2b:94:cc:ca:
                    c7:14:a3:14:18:4b:03:c1:2c:f9:75:e1:87:17:f5:
                    d6:8b:35:a4:05:98:ae:91:e6:c1:1d:37:87:3b:09:
                    32:31:42:62:3c:d4:22:de:a8:0a:c9:8c:e5:b9:95:
                    e6:7f:c7:ab:34:28:db:09:2d:00:3a:6d:ec:14:4a:
                    9c:46:5d:c6:ab:45:e4:14:62:75:c1:8f:67:3f:20:
                    0b:d4:5a:e2:91:f6:a9:cf:30:1e:d0:cc:e2:25:22:
                    d6:f3:66:f3:c2:39:1e:aa:60:33:06:84:37:f0:f8:
                    36:77:07:97:43:62:9a:03:0f:83:ed:9c:fb:3c:4a:
                    56:da:d1:9f:3c:0f:94:82:be:85:b6:19:36:2f:df:
                    d2:a8:c8:63:28:6e:12:b3:11:08:d6:ac:4a:b1:61:
                    39:8b:07:44:e2:11:6f:c8:e8:59:e1:72:95:fa:cc:
                    6d:9e:f1:93:41:29:2f:92:fa:52:08:e0:af:13:29:
                    14:e8:f0:51:69:1b:74:8a:64:d7:17:02:d8:59:7d:
                    f0:11:fe:f7:c8:09:fe:ac:18:42:1b:9b:14:b2:40:
                    ec:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F8:FF:9F:E5:1E:88:36:B8:A6:74:0E:C4:3C:A6:BE:94:B5:67:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/34d538a5-ffc0-3eef-83a4-210e500ec9c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.crl

            X509v3 Authority Key Identifier:
                keyid:BD:FA:2A:56:43:4A:7C:92:11:8A:D4:8E:A2:97:D5:C2:BF:94:35:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f2d0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:01:62:4a:6d:69:cd:d8:e8:7b:51:90:0f:34:3a:b8:30:5e:
         37:02:11:db:f1:76:be:e9:36:69:4d:ec:70:1f:ee:77:66:01:
         7f:95:97:16:90:0c:42:c1:6d:c6:ad:43:05:9c:0d:02:df:2a:
         47:88:46:45:7d:ad:11:14:72:20:db:3e:f8:be:bd:94:6b:07:
         78:05:0b:45:35:68:75:6f:10:43:51:74:19:7b:ab:c8:b9:11:
         81:89:4d:87:10:e2:b0:5e:5b:03:ba:b9:2f:2e:c5:a1:b3:c8:
         f5:4f:76:3b:48:8c:7a:e8:fd:f8:a3:ad:e1:8e:29:ce:d5:ef:
         d6:e8:cf:75:eb:d1:ba:09:75:d3:5f:5e:63:33:12:2d:14:5a:
         48:f1:88:9c:23:ba:84:7c:65:bd:60:d7:06:4e:5f:7c:9a:5a:
         d4:d2:b9:fc:67:6b:44:1d:99:ff:b8:81:38:6b:13:90:11:7c:
         fa:be:16:92:fb:15:c0:06:fe:d5:f4:83:7a:2f:18:ef:0c:20:
         d7:b7:c1:9f:ed:42:6f:de:45:5c:ae:e3:29:23:5e:58:bb:d9:
         42:3e:f7:97:24:b2:4f:ce:1a:36:05:84:e9:21:d7:f6:96:76:
         fa:73:db:34:f8:71:91:b2:ec:45:ef:5a:a5:7f:00:73:eb:1a:
         3d:ae:7d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:45 2025 by rpki-client