Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea9a5809-d9b2-38c2-9986-e82c95be9ddd.roa
File:                     ea9a5809-d9b2-38c2-9986-e82c95be9ddd.roa (raw, json)
Hash identifier:          L4dSF6rXXcrdp1PnouatVdw9ac+45CgFtbobTPsNytU=
Subject key identifier:   53:E7:C5:AF:EE:55:7C:BB:80:6B:94:FD:E2:A5:72:4F:81:2E:59:EA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285848696076A17EF262ADA5CACE00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea9a5809-d9b2-38c2-9986-e82c95be9ddd.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        2600:1010:be04::/47 maxlen: 47
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:76:a1:7e:f2:62:ad:a5:ca:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=61b730ff-1e68-42dc-880f-7fd072b8683f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6d:cb:d1:23:70:33:3e:66:98:1e:f5:69:b2:
                    df:0f:b1:56:9b:84:6c:b3:58:e3:ad:1d:fc:94:cd:
                    c4:dc:ce:6d:91:c9:76:b9:65:00:25:3a:92:28:a4:
                    6c:05:29:7e:45:19:2a:24:c2:63:51:7b:fd:a7:cf:
                    42:a9:f8:11:46:89:77:4c:b8:4a:03:e9:cd:dc:38:
                    28:ce:57:62:94:83:a8:a9:07:06:a4:8e:19:48:3a:
                    64:a4:b5:49:a9:68:8e:ab:bc:0d:f7:50:61:8c:22:
                    f2:e0:a5:86:48:ab:d4:35:f5:4f:ee:c5:63:8e:ba:
                    c5:8d:e9:6b:c2:4d:8b:c4:e8:8c:77:01:09:ce:81:
                    e6:c2:b3:04:42:1e:96:c3:1d:9a:8f:9b:8a:08:e8:
                    17:c3:98:84:0b:dc:c7:7b:c4:97:02:7d:91:29:85:
                    33:e5:98:8a:90:28:9e:cb:ab:c8:15:5b:7d:60:bf:
                    c1:53:ed:93:b0:16:bd:72:63:35:fc:2c:71:0a:b4:
                    48:cf:29:c3:cb:6c:e1:4a:17:03:2b:dc:ff:b9:83:
                    8a:77:95:df:c5:35:97:00:a0:0d:c7:bd:54:a0:48:
                    a3:7c:b0:24:8c:5e:4e:44:18:9c:e9:1a:91:ab:32:
                    0a:6b:73:a0:f2:91:3d:fd:62:57:35:36:d4:42:05:
                    b3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E7:C5:AF:EE:55:7C:BB:80:6B:94:FD:E2:A5:72:4F:81:2E:59:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ea9a5809-d9b2-38c2-9986-e82c95be9ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1010:be04::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b4:47:0b:19:d5:b1:2c:c5:e3:e6:06:08:86:71:42:72:58:
         13:3b:30:89:57:eb:e1:59:c4:0f:e4:99:c9:a1:6e:f9:86:08:
         12:9e:13:ed:6c:4e:03:38:13:52:c8:57:65:2d:ba:5d:75:71:
         4b:74:74:ca:db:1d:58:1e:5f:7f:b9:aa:67:0d:fb:21:19:ad:
         02:66:8c:87:1f:95:0d:ba:de:55:75:f2:79:bf:2a:3e:7a:63:
         1a:2e:2a:b6:dc:31:5a:f9:78:44:8f:5e:3b:f0:64:7f:48:f9:
         cf:0f:02:98:01:36:e8:14:0f:b1:d5:49:e0:c2:78:c7:f7:4e:
         da:c9:c6:5c:23:c1:ef:8b:3e:19:c9:f5:82:df:26:ec:62:d7:
         84:08:8d:0f:16:60:3d:d7:35:c7:9f:43:7b:42:f5:1f:29:5d:
         18:f9:c2:be:2b:76:7b:60:fd:8a:9c:c8:d4:d1:a8:0b:66:e4:
         4b:0e:de:14:de:9f:e2:6e:7f:7a:82:6a:01:b1:5f:7d:ae:56:
         69:14:3c:fb:75:78:b7:34:cc:0e:52:27:e5:42:ad:cd:d0:64:
         05:07:c7:10:e7:67:85:01:b3:ba:7d:6e:6b:4f:91:d8:fa:aa:
         cb:e7:de:2f:e9:1d:04:a2:18:96:83:0a:3f:1e:de:6b:fa:42:
         2d:57:eb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:56:21 2025 by rpki-client