Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23bf1113-1422-3559-8569-febeabd0265c.roa
File:                     23bf1113-1422-3559-8569-febeabd0265c.roa (raw, json)
Hash identifier:          WlCd5PZ76AqcbzCSTlPgpuT3L/ejXHxPFEsLLDJPCbI=
Subject key identifier:   CE:17:DB:64:F2:B0:F5:0F:31:C5:FF:A5:1C:CB:24:EF:AE:DA:99:DE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858461EFECE46CC4365901B9FEF80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23bf1113-1422-3559-8569-febeabd0265c.roa
Signing time:             Thu 06 Jun 2024 13:00:32 +0000
ROA not before:           Thu 06 Jun 2024 13:00:32 +0000
ROA not after:            Wed 04 Sep 2024 13:00:32 +0000
asID:                     37721
IP address blocks:        2001:470:2c1::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1e:fe:ce:46:cc:43:65:90:1b:9f:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  6 13:00:32 2024 GMT
            Not After : Sep  4 13:00:32 2024 GMT
        Subject: CN=08bf49d0-3189-49d0-aad6-b752536fd87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fd:b9:ee:78:ec:45:b0:d4:2b:48:f7:ee:a5:
                    69:61:dc:14:28:3a:41:94:dc:65:ac:30:99:2b:f8:
                    f9:e6:f3:6f:86:5c:11:a0:62:eb:3d:84:ee:9a:75:
                    8e:76:b6:c5:20:86:b6:33:48:59:93:70:62:26:88:
                    40:d6:64:92:8f:2b:a7:17:ab:79:7c:61:95:39:ec:
                    e7:60:51:77:64:7b:ad:00:bb:30:5f:fb:50:67:2a:
                    27:67:95:1e:bd:8b:8c:8f:31:e7:24:cc:40:66:fc:
                    2c:4b:9f:ed:d1:05:e0:48:2a:d0:a8:31:37:cd:67:
                    be:c8:a4:7b:74:63:fb:c4:dd:cc:9d:20:b6:2e:40:
                    56:a5:40:84:91:16:42:94:e7:8c:86:93:72:30:0f:
                    e2:6b:d4:af:0a:44:fe:fb:6e:b8:29:fe:f7:7a:96:
                    90:de:6a:29:bd:85:0f:59:8b:49:81:d4:c2:58:14:
                    d0:bc:f7:96:3d:84:69:0c:f3:10:5c:d9:c5:61:cd:
                    90:86:92:7c:40:c6:a4:8b:bf:27:e4:fa:c8:ea:37:
                    77:38:38:2d:b7:fc:a4:d5:13:b9:3d:d3:2e:4c:76:
                    d1:22:5c:c8:1e:84:27:cd:34:62:b9:b7:ed:b8:37:
                    cb:6b:73:2e:05:a2:5b:d6:cc:ac:aa:8e:b7:27:fa:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:17:DB:64:F2:B0:F5:0F:31:C5:FF:A5:1C:CB:24:EF:AE:DA:99:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/23bf1113-1422-3559-8569-febeabd0265c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:6e:e0:79:4d:88:ce:96:c6:df:37:0f:ac:89:5b:ce:78:6a:
         ba:14:f6:43:17:fb:da:0f:4f:a7:8e:b4:57:21:b7:fb:d8:06:
         f0:f9:c3:64:b9:5d:b9:7a:c1:62:28:34:72:b7:08:72:03:d5:
         d9:7c:82:46:56:f0:e4:74:46:20:c7:c8:28:4a:32:52:ac:75:
         61:6e:52:60:d6:d4:9f:96:64:43:6c:be:8c:46:a8:ff:95:79:
         4d:ce:e5:08:3f:93:c2:13:eb:c5:7d:c8:9a:73:39:61:bd:65:
         37:e6:25:b9:07:99:bf:42:c5:34:e6:4f:0b:8c:58:6a:22:af:
         83:54:03:5c:52:c8:17:73:ad:df:2f:eb:74:e2:b9:36:99:23:
         65:38:bc:28:31:e6:be:10:5a:d0:d2:dd:67:db:18:d5:ce:fa:
         bd:5d:cd:10:b5:28:45:d9:24:e0:11:ae:0a:ca:b5:cd:8f:f0:
         44:9d:c2:67:d9:a7:e0:dd:69:2b:7d:38:64:41:6e:9a:79:39:
         46:91:61:94:a6:3e:f0:ba:54:6b:60:a3:fc:3d:8c:0c:bc:b0:
         2e:40:3e:ed:57:e7:cd:ac:59:e9:c1:b7:e5:aa:6d:b8:18:22:
         83:60:ae:95:b4:1f:0d:b5:7e:e0:e7:62:ae:5d:0f:1d:85:41:
         04:58:7a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:48:33 2025 by rpki-client