Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/73dc584e-65c2-3cb6-99e8-7be120547962.roa
File:                     73dc584e-65c2-3cb6-99e8-7be120547962.roa (raw, json)
Hash identifier:          oZYCDG6VYKxWRKtWaE3nJNvdK5hynzFoBmkoyGaQ3sA=
Subject key identifier:   DD:0D:DA:28:F0:26:FE:E9:F6:B3:7D:86:D5:E8:EE:DD:F2:6B:AD:92
Certificate issuer:       /CN=f0dba087-0567-4455-9983-ac2ca8102281
Certificate serial:       010D0C9F4328584804DFBD29F06C34ACF5980800
Authority key identifier: 72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/73dc584e-65c2-3cb6-99e8-7be120547962.roa
Signing time:             Wed 27 Nov 2024 14:00:52 +0000
ROA not before:           Wed 27 Nov 2024 14:00:52 +0000
ROA not after:            Tue 25 Feb 2025 14:00:52 +0000
asID:                     210715
IP address blocks:        2602:fa87:3::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:04:df:bd:29:f0:6c:34:ac:f5:98:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dba087-0567-4455-9983-ac2ca8102281
        Validity
            Not Before: Nov 27 14:00:52 2024 GMT
            Not After : Feb 25 14:00:52 2025 GMT
        Subject: CN=de9cb81e-750d-4e5a-af37-38ba01b9cd54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:95:8f:89:32:c8:51:c8:95:25:9c:d2:a6:bf:
                    58:dd:fd:65:8a:82:32:8a:c4:c5:05:c7:88:aa:ae:
                    3b:77:ab:22:21:42:4d:d9:2b:32:4b:0a:5c:88:9a:
                    a8:20:10:76:40:44:9e:2e:c6:6b:d1:bc:f5:8e:a3:
                    a1:29:ed:18:e8:0c:00:20:38:6d:a2:71:81:4d:17:
                    d1:56:99:f9:f6:5e:79:f5:02:de:8f:88:1e:4d:aa:
                    52:ff:42:09:c4:d0:5b:68:b7:95:79:f5:9c:e1:09:
                    a3:b2:8b:b7:13:cd:9e:43:27:6f:bb:4a:ab:94:c9:
                    0d:df:46:f3:e1:a5:a4:98:30:6d:9f:11:1d:19:3c:
                    a4:23:87:12:87:45:8e:69:08:91:ee:5c:ed:d9:6b:
                    54:55:42:58:8d:b1:69:96:f3:ea:11:da:6d:a9:97:
                    2b:2b:b8:9c:0a:56:2b:12:66:c6:b3:27:8e:a8:6e:
                    44:c8:81:6b:4d:77:1e:8e:1c:4f:af:00:db:23:15:
                    0a:1a:c2:48:69:93:e8:46:d9:5d:00:21:5e:ef:9f:
                    8b:1d:10:ee:5f:3e:bf:2b:b8:a9:71:84:b6:e7:92:
                    ce:46:27:ed:99:b2:bf:7a:62:b4:a2:c0:d6:99:2e:
                    1e:85:6a:8d:42:2a:bc:7b:a8:4a:2b:82:3f:8f:44:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0D:DA:28:F0:26:FE:E9:F6:B3:7D:86:D5:E8:EE:DD:F2:6B:AD:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/73dc584e-65c2-3cb6-99e8-7be120547962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281/f0dba087-0567-4455-9983-ac2ca8102281.crl

            X509v3 Authority Key Identifier:
                keyid:72:DC:68:AE:CA:BE:D0:04:AF:54:CF:CC:3E:73:0D:49:FB:BD:61:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0dba087-0567-4455-9983-ac2ca8102281.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa87:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a0:4d:80:a8:8f:31:bb:95:30:38:74:1e:fc:9f:f0:8e:d4:
         ab:5d:39:52:fa:c6:dd:fb:a1:0b:fc:57:ba:e8:b6:28:81:ee:
         a1:ae:ec:19:c9:cb:9b:7d:dd:ff:76:de:13:40:7b:0d:4b:53:
         43:90:8f:c3:88:03:1e:1a:7b:fc:d3:19:36:76:ad:3d:92:8d:
         b7:ea:b0:bd:31:92:6d:08:02:8a:c3:8c:0b:7a:94:f5:eb:eb:
         aa:9f:98:6a:0f:d5:24:e8:7b:ce:ff:f0:4d:30:97:59:e2:03:
         43:34:98:35:0a:af:0b:81:81:b3:9d:cb:48:e7:80:02:a1:69:
         92:ed:0e:6d:2d:b2:f6:61:d0:c2:85:cb:70:b5:e9:65:ab:f2:
         11:e0:ad:0e:55:25:88:cc:55:00:7a:fb:d6:0a:70:49:59:0a:
         4a:7d:1c:d4:c7:43:a1:d8:27:18:e0:4a:99:4e:95:55:25:67:
         f4:65:c4:d3:14:00:ae:83:4e:09:2b:5a:a8:b4:8a:a8:23:40:
         31:58:c3:53:70:a2:5d:7e:46:62:86:02:f3:7d:a0:6f:ca:59:
         d6:cb:a8:64:18:49:8f:5a:a6:33:9a:83:06:60:33:d9:42:c6:
         9c:9c:c1:43:ea:a0:b9:e7:07:1d:0e:0a:7e:a9:7c:fe:c6:66:
         21:91:09:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:25 2025 by rpki-client