Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/6cf7a3b2-baa3-33c7-9188-12a77b433e70.roa
File:                     6cf7a3b2-baa3-33c7-9188-12a77b433e70.roa (raw, json)
Hash identifier:          w9+XTQxbd/99+25Y0D/hPmVQxGBKYVZRu+aVMkFOscY=
Subject key identifier:   A7:66:61:80:8B:7F:78:D5:F7:6C:EF:A9:9E:0D:61:3F:D5:A9:67:F0
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F4328584812D52E201D9CDB43BBF995A0
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/6cf7a3b2-baa3-33c7-9188-12a77b433e70.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     399533
IP address blocks:        2602:fd91::/36 maxlen: 36
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:2e:20:1d:9c:db:43:bb:f9:95:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=8d01af3d-8882-4fe4-af2e-a4bb27b6383a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:01:a1:6b:11:8b:75:28:6f:07:02:3b:7b:c6:
                    8a:5d:4a:04:8d:47:5e:a5:cf:2f:4e:2f:7e:0e:e3:
                    5b:88:96:30:cd:7c:aa:3f:c9:5e:3a:d3:27:39:e1:
                    56:db:11:8b:9c:96:b2:74:4a:83:3d:94:7b:14:70:
                    db:bb:b5:11:75:eb:e8:4d:24:d8:94:8a:be:30:b1:
                    03:c7:86:c4:45:98:b3:05:01:f6:68:73:c8:46:a9:
                    e6:98:95:d2:cf:c8:1d:e6:5f:70:ed:25:c9:ae:8b:
                    9c:09:cc:4c:9b:72:c5:7f:1b:74:6f:cf:dc:49:f3:
                    ed:bc:b8:79:2a:6c:87:87:0d:49:09:bf:7c:3e:ca:
                    cb:19:85:ac:9c:e3:18:e9:e5:27:4b:ee:ab:b7:c4:
                    b0:21:12:96:d0:f5:d2:be:28:b8:88:90:31:e5:9d:
                    20:86:66:ca:4d:3c:21:92:58:6f:9f:ed:67:c5:7c:
                    6d:e5:a8:de:dd:77:e4:eb:03:2d:ab:e1:17:db:83:
                    ad:f7:d9:e7:cd:6e:fd:30:8c:fa:42:ad:be:d1:08:
                    dd:90:2b:0c:ed:3a:49:94:96:19:31:c5:24:86:6d:
                    4b:ae:26:1b:c4:d9:9f:88:0f:9d:25:f3:00:ea:44:
                    2e:84:1b:a4:60:02:db:13:f3:b9:fb:09:25:3a:e3:
                    a2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:66:61:80:8B:7F:78:D5:F7:6C:EF:A9:9E:0D:61:3F:D5:A9:67:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/6cf7a3b2-baa3-33c7-9188-12a77b433e70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd91::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:60:e5:cd:07:b9:5b:01:b4:7c:ed:0b:cb:6d:c3:17:b2:c4:
         23:88:bd:66:42:68:84:07:af:b5:d2:94:88:02:0f:9c:c2:5d:
         69:c4:f4:01:06:f6:ba:a3:cf:77:0f:a8:e9:50:59:74:2f:74:
         27:61:f5:cb:08:fd:0b:9b:21:83:ce:2b:7c:47:0e:f7:7a:6b:
         cc:72:3b:9d:3e:cc:23:63:b7:dc:25:28:8f:b2:ee:c4:17:23:
         4a:af:92:03:5b:f7:14:5c:bc:5c:19:22:b1:98:11:5c:8a:5a:
         b3:69:4d:41:bd:b0:d6:be:e6:49:2f:dc:a5:af:e8:fc:76:3b:
         45:7a:71:c8:ed:67:fc:25:bd:cd:50:3e:59:f8:99:98:3d:82:
         63:84:d1:74:9d:ca:f1:ca:46:24:35:68:8e:f0:ae:55:be:43:
         07:67:7b:66:2d:97:01:e3:d6:6e:b8:3c:fd:b2:9c:dd:51:7a:
         72:38:f4:7f:2e:4b:53:64:3b:8c:b0:9c:f1:be:b5:d3:6a:86:
         03:03:4c:44:21:bb:f0:a5:e4:1c:79:f1:1c:dc:a0:29:b7:3f:
         4d:e9:cb:a5:11:18:e2:e1:e1:b5:ff:d2:cb:c6:29:cc:01:be:
         62:6a:be:fc:44:0d:99:79:91:ca:15:62:b4:58:fe:2f:cb:0c:
         7f:be:d2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:15:49 2025 by rpki-client