Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/80eab390-c4a8-3462-9d9c-6e18c3e2baff.roa
File:                     80eab390-c4a8-3462-9d9c-6e18c3e2baff.roa (raw, json)
Hash identifier:          OrBKt+1cUJLkSJfqJByM7gWrpvrnLM5DvU0/sJgaBuw=
Subject key identifier:   8F:A3:CA:80:54:6C:34:C4:3D:73:72:B2:E6:0D:42:3C:5D:90:43:68
Certificate issuer:       /CN=b3f5323f-8bea-48c6-aa03-949255dd1997
Certificate serial:       010D0C9F43285846DFC982266AE6E8772D0B5090
Authority key identifier: 53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/80eab390-c4a8-3462-9d9c-6e18c3e2baff.roa
Signing time:             Wed 14 Aug 2024 14:24:17 +0000
ROA not before:           Wed 14 Aug 2024 14:24:17 +0000
ROA not after:            Tue 12 Nov 2024 15:24:17 +0000
asID:                     46474
IP address blocks:        2602:819:e004::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:df:c9:82:26:6a:e6:e8:77:2d:0b:50:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f5323f-8bea-48c6-aa03-949255dd1997
        Validity
            Not Before: Aug 14 14:24:17 2024 GMT
            Not After : Nov 12 15:24:17 2024 GMT
        Subject: CN=bcc0398a-2078-47d7-a1ed-3b50bf53cccd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dc:e1:99:19:03:1b:b3:d5:47:06:dd:88:2f:
                    39:aa:e9:99:33:e4:cd:93:82:d9:bc:fb:84:db:87:
                    fb:e4:0f:81:5c:2f:b5:1f:20:b5:0d:aa:a7:51:a6:
                    cb:bb:8f:95:13:40:b1:12:28:f7:81:17:76:cf:b0:
                    a8:7e:0c:83:67:d7:cb:90:2f:27:f8:78:56:2b:86:
                    cd:73:fc:4e:4b:c5:43:5d:3e:24:e7:97:77:92:0a:
                    68:0a:f1:6a:62:07:ff:b6:04:fd:e4:a2:01:10:58:
                    18:5d:66:a2:aa:e7:fa:65:43:64:97:8e:7a:23:72:
                    48:c8:de:47:a9:37:82:9b:bd:e0:aa:78:ef:48:7d:
                    b1:d6:90:34:ab:5a:5f:e8:cb:da:7e:1c:31:69:23:
                    34:c1:4a:6a:be:a9:ec:d3:92:55:24:d8:55:d8:2f:
                    9e:85:23:cb:54:04:bb:f3:aa:8c:26:16:38:54:23:
                    20:4f:db:f9:e2:54:54:ed:da:d4:98:ab:31:04:b7:
                    eb:02:3c:f5:91:c4:18:cf:7d:18:39:8e:a0:fa:df:
                    e2:73:08:c7:07:4a:33:3e:de:c4:0b:3f:89:a6:6b:
                    ec:2e:5d:fc:84:dc:be:db:08:ac:42:c2:23:87:84:
                    bd:0d:09:2c:9e:34:5f:59:00:59:c1:55:6e:5b:72:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A3:CA:80:54:6C:34:C4:3D:73:72:B2:E6:0D:42:3C:5D:90:43:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/80eab390-c4a8-3462-9d9c-6e18c3e2baff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997/b3f5323f-8bea-48c6-aa03-949255dd1997.crl

            X509v3 Authority Key Identifier:
                keyid:53:81:0B:8B:1F:54:1E:2F:82:1C:4A:DD:C0:3E:70:B0:62:95:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b3f5323f-8bea-48c6-aa03-949255dd1997.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:819:e004::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f6:87:ae:85:aa:24:7b:49:b2:bd:24:43:f0:eb:69:53:4f:
         4f:8a:49:a8:61:7b:65:1c:5a:ef:6a:7b:ac:76:49:30:f2:40:
         a6:13:cd:d7:eb:c3:40:f5:41:3b:67:d8:14:40:b3:67:12:90:
         b1:26:8e:5d:ad:d7:e0:b8:f3:2c:97:9e:37:b4:36:13:98:3d:
         c3:18:9b:4d:8a:d3:cc:29:61:04:60:1d:4c:df:77:83:52:97:
         34:9a:3a:29:e9:7d:14:e7:04:5b:ef:71:8b:80:dd:31:42:55:
         39:d0:93:28:aa:bd:a3:ae:88:68:54:af:80:c2:4c:bf:1d:cc:
         1b:10:47:52:b4:df:5f:08:1d:1c:9e:7f:31:fa:c6:31:19:ba:
         d9:c3:78:7c:32:91:3c:fa:f4:9a:73:60:00:25:54:4f:1c:bb:
         d2:fb:8c:fa:88:35:80:cb:65:fe:a0:23:03:ab:b3:fb:7a:b9:
         60:9e:00:b9:aa:06:56:98:01:19:01:e7:15:23:6b:81:0a:b2:
         ec:08:9f:ba:38:22:60:d7:76:1a:42:30:f3:a1:50:3b:4a:c0:
         ed:06:45:74:96:8e:f9:c7:02:c4:ad:3f:67:dc:03:13:4a:63:
         ab:74:56:80:bf:9b:c8:1b:96:79:f5:55:3e:18:35:ef:28:29:
         45:b8:53:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:00:29 2025 by rpki-client