Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/c64a3441-f996-338b-9904-5dae3ba8805b.roa
File:                     c64a3441-f996-338b-9904-5dae3ba8805b.roa (raw, json)
Hash identifier:          RmEgmqGWkfA8+bbYbRFx02C5kRBii+/aRCxRSI9d78o=
Subject key identifier:   BF:BD:5A:EF:88:85:87:8F:47:C5:EA:D2:D9:F5:5B:0C:4F:3D:40:C8
Certificate issuer:       /CN=56c0805c-5631-4805-a7f4-dcc62b92b16f
Certificate serial:       010D0C9F43285846B45A562C03BC95AC4C06CD80
Authority key identifier: C8:3E:94:9F:AF:94:43:DB:C0:D6:17:62:14:4F:4A:58:02:68:35:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/c64a3441-f996-338b-9904-5dae3ba8805b.roa
Signing time:             Tue 30 Jul 2024 01:00:28 +0000
ROA not before:           Tue 30 Jul 2024 01:00:28 +0000
ROA not after:            Mon 28 Oct 2024 01:00:28 +0000
asID:                     55
IP address blocks:        2607:f470::/32 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b4:5a:56:2c:03:bc:95:ac:4c:06:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c0805c-5631-4805-a7f4-dcc62b92b16f
        Validity
            Not Before: Jul 30 01:00:28 2024 GMT
            Not After : Oct 28 01:00:28 2024 GMT
        Subject: CN=cc7b6684-0b9f-416d-a731-3385f9e8b5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:77:93:94:c2:65:4b:1d:81:3b:df:36:a0:85:
                    8c:c9:db:3d:3f:c8:88:da:b8:37:18:63:bd:94:7e:
                    9a:a7:82:91:1e:de:c1:08:71:33:fc:5d:45:21:f2:
                    5c:98:b3:16:0c:30:a0:cc:03:51:a2:10:93:09:43:
                    f4:4e:08:b7:ad:47:43:4c:03:53:65:45:d7:0e:5c:
                    ad:d6:ef:87:60:3d:40:13:8a:bb:00:bf:81:de:55:
                    02:05:1e:79:68:1d:a0:2e:dc:4c:ce:da:84:ee:28:
                    83:20:61:eb:21:f5:b4:c3:4f:ea:85:3e:13:dc:b8:
                    e5:34:e7:91:50:53:e1:37:aa:91:f6:e3:63:00:b0:
                    63:af:88:ad:46:6a:9c:03:3d:97:01:01:87:f0:fa:
                    54:13:a6:c6:98:87:d3:f3:07:1e:7a:bb:8a:aa:8d:
                    6a:e5:ce:ad:b2:84:92:f7:e7:e2:27:49:9c:c1:08:
                    01:89:91:ec:f8:c7:5c:db:ca:d7:7f:c2:c5:7f:bb:
                    23:bf:56:d6:e7:15:53:91:01:8b:22:ce:7f:31:42:
                    9d:84:0f:18:65:61:cc:31:32:8d:cc:d7:f8:7e:38:
                    ee:72:ad:b7:61:bd:fc:87:b9:28:90:fc:1a:41:67:
                    59:94:ed:82:d4:9b:45:8b:82:7d:04:99:94:f1:c7:
                    5d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BD:5A:EF:88:85:87:8F:47:C5:EA:D2:D9:F5:5B:0C:4F:3D:40:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/c64a3441-f996-338b-9904-5dae3ba8805b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f/56c0805c-5631-4805-a7f4-dcc62b92b16f.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3E:94:9F:AF:94:43:DB:C0:D6:17:62:14:4F:4A:58:02:68:35:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/56c0805c-5631-4805-a7f4-dcc62b92b16f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f470::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:0b:f5:74:b2:e9:21:84:b8:ee:68:e0:7c:ff:5e:66:47:44:
         de:f3:5c:bd:44:a3:03:9f:b4:9b:11:bc:40:7c:4f:9a:a6:77:
         fa:11:52:99:d2:1c:79:71:14:69:5c:de:db:dc:27:cd:87:cb:
         56:74:64:37:bc:1b:ba:90:11:39:9f:ae:25:77:82:31:5e:6f:
         30:57:fe:87:4e:73:1f:0c:0b:3a:17:21:96:c2:9e:7b:a9:6f:
         e9:9d:bc:1a:f1:da:41:0c:f5:ea:64:91:2a:c0:7a:9e:dd:39:
         e4:0c:ee:44:59:f2:65:db:6d:fd:15:08:bb:86:df:51:12:c5:
         39:f0:ec:cc:10:f6:6b:72:e4:ae:16:d1:97:a1:02:b4:0d:c7:
         95:28:1e:93:1e:0b:88:5f:a5:f1:b6:e2:fc:8b:2d:23:6d:22:
         eb:15:9f:3c:18:35:1a:76:ea:b1:24:e7:ac:12:f7:7c:f4:c3:
         54:dd:ee:1b:dd:bd:47:86:90:7d:39:d3:42:63:c8:4b:94:f2:
         c3:53:30:49:85:ff:1b:94:a5:c5:93:a1:bd:87:a3:ec:f7:af:
         5e:22:e7:35:2b:67:51:96:cf:37:47:5f:b0:db:cf:7e:64:c6:
         b3:35:1d:45:93:9a:86:89:d9:56:76:7e:e1:4b:28:1f:6d:77:
         c2:44:dc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:43 2025 by rpki-client