Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30325d79-c776-3fcc-bf8d-513abfc1eabd.roa
File:                     30325d79-c776-3fcc-bf8d-513abfc1eabd.roa (raw, json)
Hash identifier:          0JgPAVg9GBP4inOE6Ap8URIUH04j+eh6H68Fo2UwVVA=
Subject key identifier:   FA:88:38:E1:DC:50:EE:19:CE:E6:70:AB:FD:0B:93:C0:6D:08:9D:83
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846C7F3F9D9DFB3E5E800DE1F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30325d79-c776-3fcc-bf8d-513abfc1eabd.roa
Signing time:             Tue 06 Aug 2024 01:30:27 +0000
ROA not before:           Tue 06 Aug 2024 01:30:27 +0000
ROA not after:            Mon 04 Nov 2024 02:30:27 +0000
asID:                     60602
IP address blocks:        2001:470:353::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c7:f3:f9:d9:df:b3:e5:e8:00:de:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  6 01:30:27 2024 GMT
            Not After : Nov  4 02:30:27 2024 GMT
        Subject: CN=585a32fb-b6c6-4664-9402-094088309b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:49:c8:7a:fd:42:b3:ce:79:1c:28:90:52:
                    39:28:7d:77:0c:62:57:49:2b:96:bf:8e:84:d4:13:
                    b1:e8:79:13:76:ee:f2:d9:7a:d3:b4:ef:be:e9:5e:
                    f2:0d:db:ad:d9:34:36:3e:5c:14:70:41:b3:c7:0c:
                    f6:8f:23:a3:5b:2a:0c:d9:34:ee:bc:d3:ea:a3:0f:
                    03:21:93:67:7f:07:04:fb:fc:43:cc:4f:9d:5d:99:
                    0f:74:04:5e:64:4e:e4:ca:37:a7:96:bb:f4:87:5c:
                    2b:46:03:e3:f9:70:37:1b:e1:23:80:d0:29:ff:4e:
                    c8:90:0e:c9:a0:a6:13:15:77:b6:e8:16:66:54:34:
                    45:29:87:e8:c5:3d:11:e6:8a:a8:3e:4e:94:65:cb:
                    09:c1:e0:9e:fe:2c:99:75:9a:99:83:fa:58:9f:a6:
                    de:44:83:75:af:ff:65:f4:83:58:c7:de:c4:3a:9d:
                    78:d3:04:39:16:be:2c:77:62:45:0e:3c:1c:82:3f:
                    c1:65:b8:6e:88:fa:c5:44:b1:b1:87:6c:3f:84:ab:
                    7d:93:9b:ea:6f:7c:6a:a2:96:59:0d:e1:d8:8b:0d:
                    d5:e6:64:2f:23:8a:cf:d1:94:47:7f:bd:fc:e6:61:
                    7f:b1:18:dd:5b:ff:0c:50:3d:f8:1a:b7:87:99:30:
                    56:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:88:38:E1:DC:50:EE:19:CE:E6:70:AB:FD:0B:93:C0:6D:08:9D:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/30325d79-c776-3fcc-bf8d-513abfc1eabd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:353::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:a9:28:4a:91:a2:a0:54:48:0a:53:05:1a:11:32:40:ec:97:
         c4:68:bd:c0:22:17:b0:33:25:0d:72:d5:00:11:6f:c0:d3:d1:
         a8:78:e0:86:0f:a0:1c:58:39:f5:b4:6f:83:87:95:30:a2:87:
         97:06:31:75:04:be:d4:3e:fd:78:91:5b:3a:e0:3d:a6:a6:33:
         13:b0:29:1d:39:bf:7a:41:1c:99:2d:af:9c:95:4c:c9:2c:b3:
         af:75:be:02:25:0b:f1:02:ab:69:af:e7:84:eb:05:c7:7e:5a:
         70:c5:cf:07:1d:4a:c4:19:dc:78:57:38:86:92:b4:2c:0a:2b:
         9b:78:34:c2:36:79:e7:e3:7b:d5:68:35:96:2a:97:7d:c6:32:
         fe:e7:2d:a3:75:21:ec:54:c5:be:ab:10:87:67:46:32:ab:94:
         27:63:3e:b5:68:8b:78:c8:5e:e7:78:03:5f:8b:ec:38:be:27:
         f3:49:72:55:77:61:95:6e:30:26:a8:16:a3:02:b4:b4:12:f7:
         2f:10:fc:ae:16:26:78:1a:9d:b4:cf:66:ac:7b:d1:9b:b9:0b:
         6e:fc:43:64:9b:2d:95:de:a6:36:69:3b:24:e6:0a:16:bf:5f:
         72:28:4b:bd:e7:fb:d7:cc:fb:d0:f3:e2:32:d7:6e:23:b3:97:
         d0:a6:39:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:12 2025 by rpki-client