Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/9320c910-6ae1-372f-a3c4-c0fe8ad5fb9e.roa
File:                     9320c910-6ae1-372f-a3c4-c0fe8ad5fb9e.roa (raw, json)
Hash identifier:          toFUtJcihYvIbF0/mD5p/Brs5KBtJQl2nA+npXCo0H8=
Subject key identifier:   99:EF:9A:6E:0A:11:DE:05:8A:34:47:90:CB:2D:06:3C:D0:11:D4:E6
Certificate issuer:       /CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
Certificate serial:       010D0C9F4328584838E8F2581D3E1A716A9F5E00
Authority key identifier: B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/9320c910-6ae1-372f-a3c4-c0fe8ad5fb9e.roa
Signing time:             Mon 16 Dec 2024 05:21:31 +0000
ROA not before:           Mon 16 Dec 2024 05:21:31 +0000
ROA not after:            Sun 16 Mar 2025 04:21:31 +0000
asID:                     63806
IP address blocks:        2602:f919:200::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:38:e8:f2:58:1d:3e:1a:71:6a:9f:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4848cc9b-e46f-485e-b3f2-4f393b5d92d6
        Validity
            Not Before: Dec 16 05:21:31 2024 GMT
            Not After : Mar 16 04:21:31 2025 GMT
        Subject: CN=e82e9362-e526-459d-8f48-d55a9c68860a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:6e:ca:51:c1:48:f1:8e:11:62:d1:9b:a4:
                    0d:79:63:fe:de:29:3b:31:e5:c3:ac:b2:1c:e7:2c:
                    c2:df:ac:b0:69:6b:f1:06:22:69:d8:dd:c3:8b:0b:
                    01:72:f4:f3:b4:0c:bf:d6:4a:c3:5a:2b:60:2f:ac:
                    a8:85:7d:7b:c0:ca:a0:71:45:46:9b:08:67:87:22:
                    aa:1a:c0:3f:7f:b3:a8:21:e3:2f:55:45:25:b5:8f:
                    b6:77:b7:b7:c5:52:f7:a0:59:41:16:f6:6a:5d:74:
                    96:74:f2:19:3a:96:6b:58:37:86:92:b4:cd:5c:7d:
                    8c:cf:6e:30:de:89:7d:86:bd:66:1e:cd:6c:bf:c9:
                    69:92:88:4d:89:d1:a0:d5:5c:96:88:ce:b1:37:54:
                    93:39:ff:38:84:6f:d6:55:38:f5:ab:31:2c:b9:56:
                    62:86:1f:09:13:7a:02:a5:52:04:c6:da:46:6d:a4:
                    eb:f8:d5:6e:a7:53:ea:0e:f4:c7:72:f1:ac:82:17:
                    39:9b:ba:2e:4c:1a:7d:15:47:71:8b:f7:5c:bf:25:
                    2d:76:0c:1e:90:4d:c4:12:c5:aa:a4:fe:3b:bd:2d:
                    0c:cd:7e:a9:4d:4c:e7:a7:25:7b:e0:1c:9e:c1:08:
                    77:d9:76:4e:7b:91:4e:cb:c3:da:9b:cf:46:9d:8e:
                    8e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EF:9A:6E:0A:11:DE:05:8A:34:47:90:CB:2D:06:3C:D0:11:D4:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/9320c910-6ae1-372f-a3c4-c0fe8ad5fb9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.crl

            X509v3 Authority Key Identifier:
                keyid:B6:2A:40:95:87:55:AF:8F:01:A4:40:13:3D:22:F2:15:2B:B6:8D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4848cc9b-e46f-485e-b3f2-4f393b5d92d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f919:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:25:a1:29:c7:b1:7c:2e:38:58:ad:60:c1:55:bd:f2:a9:b3:
         73:f6:1d:ca:ec:a1:3b:ae:d4:84:b9:7a:fe:46:af:8f:cf:e8:
         a6:a5:e9:cd:0d:fb:f0:28:40:9d:9b:91:02:ae:42:59:ed:83:
         3e:ba:88:41:32:70:40:f1:13:d3:a7:bd:d2:1e:6c:2e:b7:97:
         6e:f7:01:fc:2d:90:ca:90:d9:5a:a4:00:2a:a4:6c:e5:40:18:
         53:49:00:06:40:55:14:7d:59:5f:89:b8:06:c6:69:13:d2:2b:
         7b:47:54:1c:87:a0:50:ae:8f:7e:b3:03:c9:0b:dc:a7:87:63:
         13:36:84:ba:22:e2:30:21:4e:e9:f5:08:0f:d1:ef:10:7b:a6:
         ce:e6:7f:14:06:d1:1d:92:a1:8e:11:44:18:7d:35:82:59:e5:
         e3:0e:ec:5f:f6:5f:7e:80:6e:9b:8a:fd:38:be:ef:4e:75:4c:
         b9:63:dc:a1:59:16:c7:17:da:46:d1:de:90:1a:87:9f:ab:73:
         df:51:d6:eb:d4:a6:7b:15:6d:1b:0b:4b:20:8e:9b:76:3d:dd:
         c2:d0:1f:be:04:d1:a3:2a:df:70:14:81:af:ff:60:d3:c4:34:
         97:3f:2c:f7:03:8b:d3:6b:06:5e:2a:9c:41:b7:42:c2:68:69:
         48:bd:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:03:09 2025 by rpki-client