Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12e0f458-ea70-3e0f-86c7-84040f6d43f8.roa
File:                     12e0f458-ea70-3e0f-86c7-84040f6d43f8.roa (raw, json)
Hash identifier:          bvKN79/s6d6Eya+V42LsLekCD5cEqbAoLnMaLGzMOFQ=
Subject key identifier:   A9:B0:94:B4:DC:DF:CA:40:4A:B7:72:B7:B6:E2:CD:A9:54:5B:4B:3F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858463563559024E4DF5C2B84EB80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12e0f458-ea70-3e0f-86c7-84040f6d43f8.roa
Signing time:             Fri 14 Jun 2024 13:31:00 +0000
ROA not before:           Fri 14 Jun 2024 13:31:00 +0000
ROA not after:            Thu 12 Sep 2024 13:31:00 +0000
asID:                     60602
IP address blocks:        2001:470:31a::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:35:63:55:90:24:e4:df:5c:2b:84:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 14 13:31:00 2024 GMT
            Not After : Sep 12 13:31:00 2024 GMT
        Subject: CN=c02a9c78-96ee-41c4-b50d-4286183f10a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4c:16:b5:b5:22:04:e3:0e:86:a7:da:29:99:
                    d6:be:bc:bb:21:ea:a1:5a:f8:42:a4:db:29:2f:20:
                    2c:6d:05:df:5f:22:59:b8:61:16:00:9e:51:ff:00:
                    a6:53:73:91:bc:86:79:fa:ae:79:6e:d0:aa:48:69:
                    1a:d2:15:20:f1:d1:e8:44:ca:76:a0:fb:f3:4c:10:
                    e6:8f:be:d4:2c:b4:d8:c4:ec:4b:3d:2e:ae:2f:4e:
                    78:0c:f0:6b:d0:a7:38:25:89:48:d8:b6:8f:bb:5e:
                    40:e6:09:8f:1e:34:22:ca:cf:e7:f8:c2:dd:1c:93:
                    9d:e5:15:5e:fa:72:7d:f0:65:a9:2b:24:7a:ae:20:
                    37:f1:c8:09:6c:1b:15:a9:58:d5:30:a7:ff:db:cd:
                    79:ea:a2:ca:50:28:1d:bf:72:3f:34:91:02:04:39:
                    cd:14:93:e4:ca:29:ff:00:05:59:13:70:c1:cb:8e:
                    ca:ad:52:3e:28:f5:5e:cf:ed:82:d6:80:f3:6d:3e:
                    51:1a:83:d7:62:3e:17:1f:5c:12:88:42:ba:62:5f:
                    cc:9c:b2:ec:67:34:2b:2b:6b:92:e3:63:91:b3:38:
                    ec:c4:84:6a:1e:8e:01:aa:d3:11:9f:3b:1c:72:c9:
                    89:85:e8:ce:73:59:6a:f2:6f:80:ee:51:28:d8:6f:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B0:94:B4:DC:DF:CA:40:4A:B7:72:B7:B6:E2:CD:A9:54:5B:4B:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/12e0f458-ea70-3e0f-86c7-84040f6d43f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:82:c1:32:ad:1d:af:40:30:37:1c:72:c8:32:de:17:b4:91:
         7b:07:96:83:f6:18:bf:5b:71:a5:6e:ad:95:bf:45:ef:7a:d4:
         a9:40:2a:16:fc:e8:fc:fa:8c:fd:84:fb:8f:d3:bb:29:b4:6c:
         e1:a1:7f:42:b2:73:e1:0d:68:4c:a4:25:1b:ff:d5:64:14:32:
         db:42:73:1a:a6:38:0e:80:1d:b1:ad:a9:ab:ce:88:60:7d:a2:
         c9:57:a0:b6:28:6b:ab:ea:d8:41:19:fc:de:1b:c1:9e:3b:0d:
         01:0e:91:cd:f2:44:31:61:15:aa:25:85:7d:02:ae:92:a0:46:
         7e:11:e9:e7:8b:17:ad:f7:91:7f:3a:1e:c0:48:cc:e6:7d:37:
         1c:89:68:d2:ad:d9:f7:62:24:ee:ba:7a:14:c3:36:6c:51:6c:
         d3:f4:b5:b1:9e:22:e5:a7:8f:10:45:01:5d:5e:cc:b5:fe:68:
         62:30:a4:54:4d:81:93:46:01:c1:4f:6e:e1:f9:39:82:cd:2a:
         dd:80:fb:a3:61:43:a3:61:26:28:77:d5:ac:23:7c:ce:e1:40:
         7e:f0:82:8b:3b:43:4d:fa:a5:30:eb:c8:e5:15:3b:e5:79:16:
         d0:e0:ee:3d:19:34:76:63:86:d5:b0:e0:df:ff:58:81:31:14:
         31:94:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:24:42 2025 by rpki-client