Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/c07df6a6-7cc7-3c45-8197-000337ddbf9b.roa
File:                     c07df6a6-7cc7-3c45-8197-000337ddbf9b.roa (raw, json)
Hash identifier:          U+RXSMpw7swhZdZ14D8uYOq8IF5oy5RdVu4qmXJbD2E=
Subject key identifier:   C5:0C:89:61:1C:3F:67:E7:77:02:9F:ED:06:2C:7E:35:AD:01:31:AD
Certificate issuer:       /CN=9305060e-d479-4a8f-8eba-23b31106c750
Certificate serial:       010D0C9F4328584818FA57423399D9F2EAA867B0
Authority key identifier: CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/c07df6a6-7cc7-3c45-8197-000337ddbf9b.roa
Signing time:             Wed 04 Dec 2024 18:50:42 +0000
ROA not before:           Wed 04 Dec 2024 18:50:42 +0000
ROA not after:            Tue 04 Mar 2025 18:50:42 +0000
asID:                     14618
IP address blocks:        2601:1904:1000::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:fa:57:42:33:99:d9:f2:ea:a8:67:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9305060e-d479-4a8f-8eba-23b31106c750
        Validity
            Not Before: Dec  4 18:50:42 2024 GMT
            Not After : Mar  4 18:50:42 2025 GMT
        Subject: CN=3e1ab534-fe4d-4a8b-a97a-99d919c977e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b5:a9:3d:30:e3:6e:78:fa:a2:36:01:5f:1e:
                    2e:be:eb:64:e4:b0:07:f6:81:ab:ff:67:c7:cb:c9:
                    b6:9d:2c:b3:41:59:6d:69:d0:7c:e9:af:68:2b:c3:
                    c0:e0:86:a8:2c:7e:1e:1d:86:5c:0e:79:28:25:fb:
                    24:81:aa:a2:af:73:93:1c:01:6c:63:51:d7:f6:4f:
                    d0:66:f9:24:54:ba:f2:20:a0:88:4c:f3:70:77:11:
                    56:a7:e6:11:c5:6c:65:5f:8e:45:f0:2d:da:af:e7:
                    5a:42:e7:6f:55:5a:a2:98:0b:45:b1:87:17:3f:38:
                    a2:28:f8:a1:a2:06:40:bf:e0:40:6d:85:04:d6:00:
                    c2:1f:23:f0:5d:16:00:35:73:30:e8:c3:39:20:f2:
                    3c:f3:93:12:45:a7:5c:a5:f5:49:86:eb:a5:83:94:
                    5f:29:b2:45:26:79:fd:4c:0e:91:7e:8c:38:ab:b8:
                    69:8b:26:39:32:ec:c6:4d:eb:15:80:b5:76:0c:8b:
                    93:38:68:ef:66:12:fe:ed:85:f8:70:7f:5c:75:c0:
                    16:fe:6d:93:9c:25:b4:7d:a1:37:c1:b1:b9:7d:78:
                    19:a1:bf:00:31:23:b6:1a:14:61:9a:13:0e:97:ac:
                    b4:70:f8:c1:d2:d1:dd:5d:8d:12:44:de:78:90:9f:
                    41:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0C:89:61:1C:3F:67:E7:77:02:9F:ED:06:2C:7E:35:AD:01:31:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/c07df6a6-7cc7-3c45-8197-000337ddbf9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl

            X509v3 Authority Key Identifier:
                keyid:CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1904:1000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9f:bd:ea:1b:25:38:79:8c:4e:89:ee:b5:ef:17:e7:0e:65:
         f0:48:41:a6:15:0f:ce:c1:75:73:2d:10:c1:88:84:8e:e6:2e:
         0b:2b:29:83:d1:ad:7b:50:ec:e9:78:ca:8e:ac:a8:1d:f8:cf:
         93:77:a2:5b:ee:86:70:1c:15:c7:49:4d:29:3d:ad:23:86:86:
         83:7a:09:53:01:08:76:ed:9e:bf:cd:41:72:8c:a0:bc:0c:c4:
         04:51:5d:71:c7:8d:53:53:db:53:9f:44:93:ba:ed:cd:b4:78:
         62:bb:51:66:40:08:8e:16:72:ad:b4:cb:ac:db:64:c2:a0:f4:
         f9:e3:0c:2d:a8:a5:15:28:6e:a5:85:f7:86:58:04:67:25:fa:
         fb:8e:57:68:8d:00:ff:8c:4d:25:92:a9:81:02:03:33:55:6d:
         d5:e0:2e:cd:bc:cb:b5:78:34:a2:bf:ab:7e:aa:f3:1e:c6:23:
         60:1f:f3:9a:9f:22:9a:9c:1d:50:55:40:28:1c:0d:30:1d:50:
         ef:7f:5b:4b:4d:b8:21:48:b4:7b:43:f8:ac:c5:4a:6a:c3:84:
         a4:23:bc:03:7f:8d:a4:24:67:ed:2f:a3:dd:86:ba:89:d5:2d:
         ef:62:72:de:46:27:11:12:a5:10:aa:ef:d1:7f:70:55:e1:66:
         6a:c7:bf:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgY+ldCM5nZ8uqoZ7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTMwNTA2MGUtZDQ3OS00YThmLThlYmEtMjNiMzExMDZj
NzUwMB4XDTI0MTIwNDE4NTA0MloXDTI1MDMwNDE4NTA0MlowLzEtMCsGA1UEAxMk
M2UxYWI1MzQtZmU0ZC00YThiLWE5N2EtOTlkOTE5Yzk3N2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7WpPTDjbnj6ojYBXx4uvutk5LAH9oGr/2fH
y8m2nSyzQVltadB86a9oK8PA4IaoLH4eHYZcDnkoJfskgaqir3OTHAFsY1HX9k/Q
ZvkkVLryIKCITPNwdxFWp+YRxWxlX45F8C3ar+daQudvVVqimAtFsYcXPziiKPih
ogZAv+BAbYUE1gDCHyPwXRYANXMw6MM5IPI885MSRadcpfVJhuulg5RfKbJFJnn9
TA6Rfow4q7hpiyY5MuzGTesVgLV2DIuTOGjvZhL+7YX4cH9cdcAW/m2TnCW0faE3
wbG5fXgZob8AMSO2GhRhmhMOl6y0cPjB0tHdXY0SRN54kJ9BsQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMUMiWEcP2fndwKf7QYsfjWtATGtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85MzA1
MDYwZS1kNDc5LTRhOGYtOGViYS0yM2IzMTEwNmM3NTAvYzA3ZGY2YTYtN2NjNy0z
YzQ1LTgxOTctMDAwMzM3ZGRiZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTMwNTA2MGUtZDQ3OS00YThmLThl
YmEtMjNiMzExMDZjNzUwLzkzMDUwNjBlLWQ0NzktNGE4Zi04ZWJhLTIzYjMxMTA2
Yzc1MC5jcmwwHwYDVR0jBBgwFoAUzRCWmVrmSJONILPVSAqCYXP15AEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85MzA1MDYwZS1kNDc5LTRhOGYtOGViYS0yM2Iz
MTEwNmM3NTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgEZBBAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACefveobJTh5jE6J7rXvF+cOZfBIQaYVD87BdXMtEMGIhI7mLgsr
KYPRrXtQ7Ol4yo6sqB34z5N3olvuhnAcFcdJTSk9rSOGhoN6CVMBCHbtnr/NQXKM
oLwMxARRXXHHjVNT21OfRJO67c20eGK7UWZACI4Wcq20y6zbZMKg9PnjDC2opRUo
bqWF94ZYBGcl+vuOV2iNAP+MTSWSqYECAzNVbdXgLs28y7V4NKK/q36q8x7GI2Af
85qfIpqcHVBVQCgcDTAdUO9/W0tNuCFItHtD+KzFSmrDhKQjvAN/jaQkZ+0vo92G
uonVLe9ict5GJxESpRCq79F/cFXhZmrHvxM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:57 2025 by rpki-client