Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/367d68ef-b0bd-3ca4-adde-d6003f79bbec.roa
File:                     367d68ef-b0bd-3ca4-adde-d6003f79bbec.roa (raw, json)
Hash identifier:          Lp5pvUqTE19q6L5wDucMmlrTD+P8UJ683xVtUOjDlr8=
Subject key identifier:   75:5D:1A:72:95:BA:31:37:2C:CA:8E:48:6A:5A:1F:EB:E8:D4:16:B3
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858487CEB7CFB833A733D014D7F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/367d68ef-b0bd-3ca4-adde-d6003f79bbec.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:1000:be0c::/47 maxlen: 47
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:7c:fb:83:3a:73:3d:01:4d:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=b2268157-ec5a-4883-87f5-71d4e2d0154d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:38:c8:93:97:6a:96:67:5e:b6:dc:35:de:31:
                    8e:3c:32:22:7a:68:a2:d8:06:6d:cc:bc:c6:91:2c:
                    ef:e3:69:39:5f:a4:8a:23:d4:37:85:91:d4:43:94:
                    f9:3d:c6:33:65:d5:be:bf:c1:17:50:de:54:18:c1:
                    0f:17:95:66:1c:10:0a:8b:25:f3:59:c3:6f:f4:54:
                    ba:f6:30:f2:b5:68:ba:53:aa:d0:a3:f4:d0:11:90:
                    d3:49:0e:be:89:ea:51:30:0e:98:08:8a:12:ac:ec:
                    13:b4:21:e1:4e:b6:68:19:c8:35:c3:eb:c3:93:1a:
                    bc:a4:93:49:e4:8a:0e:01:bb:07:cb:86:4b:d3:0a:
                    2c:7a:f5:45:ba:81:b2:8c:50:f0:c1:5f:c0:86:50:
                    24:37:46:04:b1:b9:de:63:20:31:71:d1:ed:0b:86:
                    ce:e9:4b:20:f5:b9:76:8e:d7:31:0c:79:df:ea:c7:
                    07:ef:ac:e4:12:d6:88:77:f0:a8:d2:1f:19:bb:b1:
                    11:ca:72:62:83:22:fb:9a:50:67:f1:89:23:75:ce:
                    48:31:68:3e:10:79:d9:15:36:2d:3d:95:2b:d3:8d:
                    60:7f:65:c5:01:38:7a:28:6b:aa:ef:13:1c:f9:dc:
                    03:9a:9e:11:fa:58:75:06:c2:60:7c:4b:c9:c1:20:
                    c6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5D:1A:72:95:BA:31:37:2C:CA:8E:48:6A:5A:1F:EB:E8:D4:16:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/367d68ef-b0bd-3ca4-adde-d6003f79bbec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1000:be0c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:09:31:f2:78:19:40:b5:d1:c3:cd:45:a0:76:13:fd:2f:b1:
         1f:01:cb:a0:10:77:dc:57:32:d9:ac:e5:22:00:ca:4e:52:dd:
         a4:73:7d:9b:f1:6d:92:25:b3:1d:40:f9:4d:2e:01:36:91:8c:
         c3:cb:01:e9:ef:11:f2:37:5a:02:b4:52:4d:07:69:4f:f1:59:
         c0:6c:d2:15:1e:b4:b9:28:ec:13:07:4c:2b:78:0f:b3:8f:90:
         bd:e2:5a:59:28:9a:ea:51:89:01:dc:c3:37:7f:3e:e3:1e:8c:
         96:3f:3b:d1:ae:ed:31:dd:89:94:6a:f7:8b:21:19:78:a9:97:
         77:c2:10:ff:e7:65:15:f2:e8:cb:ee:61:8f:a6:ac:3d:68:3f:
         61:45:ca:e7:58:49:6c:6e:4c:ee:5a:aa:6a:ec:ba:1b:0e:3b:
         ea:ac:39:55:ce:18:2c:f4:e9:48:b9:7b:9d:4b:9a:47:18:19:
         84:b2:5d:d5:91:b1:4c:c8:88:d8:b7:a8:d9:e6:e6:25:46:0b:
         31:26:72:54:14:e8:69:4b:a9:da:ab:ab:a4:8b:4f:88:46:54:
         07:88:13:a7:ef:25:10:68:bd:23:49:9c:9b:94:4b:66:00:c8:
         1a:7b:7e:28:f3:fb:85:27:17:03:1c:35:00:47:8c:62:13:68:
         e4:86:52:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEh863z7gzpzPQFNfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
YjIyNjgxNTctZWM1YS00ODgzLTg3ZjUtNzFkNGUyZDAxNTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjjIk5dqlmdettw13jGOPDIiemii2AZtzLzG
kSzv42k5X6SKI9Q3hZHUQ5T5PcYzZdW+v8EXUN5UGMEPF5VmHBAKiyXzWcNv9FS6
9jDytWi6U6rQo/TQEZDTSQ6+iepRMA6YCIoSrOwTtCHhTrZoGcg1w+vDkxq8pJNJ
5IoOAbsHy4ZL0wosevVFuoGyjFDwwV/AhlAkN0YEsbneYyAxcdHtC4bO6Usg9bl2
jtcxDHnf6scH76zkEtaId/Co0h8Zu7ERynJigyL7mlBn8Ykjdc5IMWg+EHnZFTYt
PZUr041gf2XFATh6KGuq7xMc+dwDmp4R+lh1BsJgfEvJwSDGYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHVdGnKVujE3LMqOSGpaH+vo1BazMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzY3ZDY4ZWYtYjBiZC0z
Y2E0LWFkZGUtZDYwMDNmNzliYmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgAQAL4M
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAC0JMfJ4GUC10cPNRaB2E/0vsR8By6AQd9xXMtms5SIAyk5S3aRz
fZvxbZIlsx1A+U0uATaRjMPLAenvEfI3WgK0Uk0HaU/xWcBs0hUetLko7BMHTCt4
D7OPkL3iWlkomupRiQHcwzd/PuMejJY/O9Gu7THdiZRq94shGXipl3fCEP/nZRXy
6MvuYY+mrD1oP2FFyudYSWxuTO5aqmrsuhsOO+qsOVXOGCz06Ui5e51LmkcYGYSy
XdWRsUzIiNi3qNnm5iVGCzEmclQU6GlLqdqrq6SLT4hGVAeIE6fvJRBovSNJnJuU
S2YAyBp7fijz+4UnFwMcNQBHjGITaOSGUrI=
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:48:53 2025 by rpki-client