Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e61b3393-c8d0-3170-a915-e740315703c1.roa
File:                     e61b3393-c8d0-3170-a915-e740315703c1.roa (raw, json)
Hash identifier:          1+KxagpE/PbAXGBlkBVD8FWcgOvS3jZyYoryetFjzog=
Subject key identifier:   B0:6F:D9:EF:DF:33:2D:62:1E:6F:DB:12:7F:04:1E:1F:73:CC:49:D6
Certificate issuer:       /CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
Certificate serial:       010D0C9F43285843625CA8C3ED076AF86D53BB80
Authority key identifier: CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e61b3393-c8d0-3170-a915-e740315703c1.roa
Signing time:             Fri 29 Sep 2023 13:48:07 +0000
ROA not before:           Fri 29 Sep 2023 13:48:07 +0000
ROA not after:            Thu 28 Dec 2023 14:48:07 +0000
asID:                     393792
IP address blocks:        2602:fcee:400::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:62:5c:a8:c3:ed:07:6a:f8:6d:53:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1816ae6-5186-44f7-ae5b-ec1338b7a77a
        Validity
            Not Before: Sep 29 13:48:07 2023 GMT
            Not After : Dec 28 14:48:07 2023 GMT
        Subject: CN=b7219245-29bb-4a84-9c90-222f1acfe065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cb:fc:7c:07:0b:4d:68:1b:3f:76:0a:cf:5b:
                    23:05:36:bf:d2:f4:41:b7:67:61:3c:23:60:d7:59:
                    74:52:36:b4:6e:e8:2b:d6:a2:6f:49:6f:17:9c:c2:
                    40:2b:af:fc:df:62:dc:be:04:91:bd:c0:87:b7:44:
                    7b:ef:9e:62:28:a6:e3:b5:85:c4:4e:3b:3e:e4:85:
                    45:c7:7d:32:a1:d8:46:57:a2:e2:b6:1d:fd:d9:f2:
                    f8:93:58:bc:d9:b6:1b:83:cd:9a:c3:f0:90:9e:86:
                    0c:4f:f7:24:9d:f3:57:27:37:a7:f8:ae:74:58:c0:
                    53:61:60:41:fb:aa:c8:23:b8:4f:25:74:8c:f3:8d:
                    9e:4a:e5:4c:72:d8:9b:69:db:34:02:4f:e1:96:88:
                    26:6f:0c:6b:88:7c:35:91:3f:73:35:45:56:d9:69:
                    f8:5c:26:8a:a5:0c:6b:ab:b6:e9:77:ed:2c:37:84:
                    c6:27:a9:ac:c9:3f:93:2b:d9:65:37:30:5c:15:cb:
                    e2:86:ad:fb:4f:18:30:b1:23:f0:4a:ac:3a:af:8d:
                    d0:e2:13:2a:b5:90:43:7e:fc:8f:1c:c8:19:ee:58:
                    3f:60:cf:bf:a2:51:23:f5:b3:d2:f0:be:ab:06:11:
                    e7:be:4e:03:12:c4:64:66:f3:71:fd:b8:45:30:66:
                    17:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6F:D9:EF:DF:33:2D:62:1E:6F:DB:12:7F:04:1E:1F:73:CC:49:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e61b3393-c8d0-3170-a915-e740315703c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:CE:00:83:A8:55:53:25:64:A0:C2:FB:A3:1C:CD:8A:BA:E6:9C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e1816ae6-5186-44f7-ae5b-ec1338b7a77a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcee:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:56:7b:b6:be:8d:d1:30:ae:3a:72:36:ca:22:6e:18:fd:85:
         82:be:86:b8:11:e5:5c:89:f4:8e:0f:6d:0e:8e:b6:11:1a:50:
         a6:2f:46:26:82:fa:ba:c7:c4:2a:1a:56:76:83:e0:5e:d9:a8:
         2c:89:97:d8:eb:ca:da:5a:27:5c:99:20:11:8e:75:d2:b9:f8:
         33:f8:67:95:2c:93:f6:0b:5c:1a:22:39:a4:37:48:83:70:ad:
         35:4e:cb:b9:da:74:81:e5:5c:7b:e2:a3:38:fa:fd:5f:98:d3:
         ed:3e:c8:69:4f:3d:23:2b:25:23:84:08:be:fb:77:f7:80:64:
         61:7a:5b:df:99:87:2d:49:ad:23:37:c6:03:65:b9:ac:7d:b3:
         a0:b6:04:fd:80:65:84:12:75:94:7b:0f:04:b7:3b:f7:53:96:
         84:3e:ed:7b:47:7d:84:35:d9:f7:08:36:bb:84:be:4e:00:2e:
         67:84:95:5e:67:e8:43:cf:9e:2c:cd:98:d9:ee:a8:cf:ca:99:
         86:b9:76:ca:66:b7:17:ac:d0:8f:e3:a3:32:d6:70:e5:ce:91:
         cf:03:ad:12:3c:47:d7:f4:18:b7:f8:22:35:d7:12:fe:0e:e0:
         ee:fa:de:0d:80:25:5d:46:34:8e:40:06:66:30:d7:f5:3e:1b:
         6c:03:45:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:40 2025 by rpki-client