Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31/ff0ed590-08cb-3572-9eb7-ffceb20a6ea5.roa
File:                     ff0ed590-08cb-3572-9eb7-ffceb20a6ea5.roa (raw, json)
Hash identifier:          4xlJvoA5y3Kv8jkzwINwJHeeLtSAO7hBujXhZe/tlhM=
Subject key identifier:   2D:0D:09:47:64:32:8F:D7:68:C6:2A:8D:4D:8E:F3:DB:8F:F1:D2:5F
Certificate issuer:       /CN=f87263de-03f3-4ca8-b91e-c66fd2256e31
Certificate serial:       010D0C9F43285846325EFCCD0D4CA2F8CE1D9300
Authority key identifier: 87:51:79:C3:0A:FE:8E:F0:D2:87:15:56:A0:53:3B:7E:0E:35:4C:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31/ff0ed590-08cb-3572-9eb7-ffceb20a6ea5.roa
Signing time:             Thu 13 Jun 2024 11:34:49 +0000
ROA not before:           Thu 13 Jun 2024 11:34:49 +0000
ROA not after:            Wed 11 Sep 2024 11:34:49 +0000
asID:                     34465
IP address blocks:        2602:29f:100::/44 maxlen: 44
                          2602:29f:270::/44 maxlen: 44
                          2602:29f:310::/44 maxlen: 44
                          2602:29f:440::/44 maxlen: 44
                          2602:29f:490::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:32:5e:fc:cd:0d:4c:a2:f8:ce:1d:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f87263de-03f3-4ca8-b91e-c66fd2256e31
        Validity
            Not Before: Jun 13 11:34:49 2024 GMT
            Not After : Sep 11 11:34:49 2024 GMT
        Subject: CN=839f9df8-1e58-40df-b1d1-80aca87eaac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0b:93:80:81:c6:06:5b:cb:11:c2:70:25:ef:
                    e8:c4:2e:e2:15:b9:c4:c1:41:db:5e:16:75:32:78:
                    85:11:9a:ef:c5:8e:33:7e:12:8f:50:74:07:78:48:
                    2b:b6:eb:33:88:80:6f:ee:5d:1b:24:c5:f6:00:0d:
                    c1:57:3e:fd:a0:80:0e:91:0f:5f:c0:8f:ef:03:02:
                    37:79:f6:d5:09:81:28:25:67:53:f9:1c:b2:2b:09:
                    97:77:fe:c2:33:39:29:08:f8:4e:b8:ea:0a:c9:22:
                    31:b0:05:ab:25:cb:04:be:de:9b:12:4c:57:50:a3:
                    4b:f4:8d:4d:61:61:0f:57:40:42:75:38:6d:0f:b3:
                    cb:24:04:58:2c:70:f0:0a:90:69:8b:9f:66:67:0a:
                    35:30:bb:86:ad:54:64:92:24:f5:e1:c3:64:84:cd:
                    f4:0c:8f:c3:7d:96:3a:70:47:e2:13:05:f2:7b:a2:
                    ee:83:c0:b9:4f:00:36:0d:47:f6:27:d1:6b:98:3c:
                    58:db:91:ff:88:7f:07:68:ae:8b:50:8c:c3:21:dc:
                    d8:f6:7d:ec:e2:82:b3:8f:8d:83:17:68:53:a7:ed:
                    05:02:83:15:c2:a3:a3:0c:61:1e:ee:3d:e7:97:06:
                    fd:99:41:83:fc:9a:d6:99:39:e3:76:54:80:a7:68:
                    92:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0D:09:47:64:32:8F:D7:68:C6:2A:8D:4D:8E:F3:DB:8F:F1:D2:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31/ff0ed590-08cb-3572-9eb7-ffceb20a6ea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31/f87263de-03f3-4ca8-b91e-c66fd2256e31.crl

            X509v3 Authority Key Identifier:
                keyid:87:51:79:C3:0A:FE:8E:F0:D2:87:15:56:A0:53:3B:7E:0E:35:4C:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f87263de-03f3-4ca8-b91e-c66fd2256e31.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:29f:100::/44
                  2602:29f:270::/44
                  2602:29f:310::/44
                  2602:29f:440::/44
                  2602:29f:490::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:49:1a:8a:d1:b2:1d:25:32:06:a4:07:cc:12:54:6a:0b:66:
         4d:cd:f7:0e:22:5b:f9:14:55:f2:7d:70:35:15:c0:4b:36:87:
         a8:00:bb:80:fa:28:99:37:15:cb:f0:3c:75:b0:aa:d2:f9:15:
         91:34:b0:76:f0:90:3e:b7:ee:d7:a4:89:49:9c:47:24:9f:59:
         19:45:78:4f:71:cb:c8:5b:ec:58:00:6d:47:41:05:ed:a2:ea:
         9b:fb:c2:db:80:ca:72:ac:0c:d6:97:c5:b7:a8:2c:59:55:8e:
         f0:8a:93:12:39:07:1f:20:1d:bb:85:b7:04:c6:e8:23:e4:92:
         9b:99:95:73:dc:c8:d6:17:a0:40:4e:cd:c5:6d:c1:60:41:91:
         b4:d9:e0:b3:41:e7:32:7c:a2:5a:b4:d2:e7:b4:c6:a2:a9:0d:
         9c:78:0f:00:ca:f8:b8:96:d3:a1:82:0a:bc:87:a7:d9:b2:5a:
         e8:04:05:3c:f2:f1:77:a1:14:cf:c4:2a:c3:0c:93:ab:d2:ac:
         89:f3:33:e4:50:1f:76:04:bf:5d:58:47:ac:fe:a7:05:ac:c9:
         28:5a:64:67:18:ef:c1:fa:48:8a:ce:2d:94:9f:33:be:25:ac:
         a5:de:6d:bd:b7:58:00:53:62:e7:a2:ef:04:31:6a:22:74:e8:
         21:6c:52:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:04:19 2025 by rpki-client