Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41605cef-5e1a-3192-916a-fcadedb9f73c.roa
File:                     41605cef-5e1a-3192-916a-fcadedb9f73c.roa (raw, json)
Hash identifier:          66SF4cwjGk9xFfdUx60GdgteBzbqEL0cHNEe4+SpxiI=
Subject key identifier:   DC:E0:93:D2:83:CD:0B:98:CA:03:65:EA:3F:12:5A:9B:1D:A7:7E:D7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846C7F3E05B7F0F9ADC9913E640
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41605cef-5e1a-3192-916a-fcadedb9f73c.roa
Signing time:             Tue 06 Aug 2024 01:30:15 +0000
ROA not before:           Tue 06 Aug 2024 01:30:15 +0000
ROA not after:            Mon 04 Nov 2024 02:30:15 +0000
asID:                     204992
IP address blocks:        2001:470:354::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c7:f3:e0:5b:7f:0f:9a:dc:99:13:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  6 01:30:15 2024 GMT
            Not After : Nov  4 02:30:15 2024 GMT
        Subject: CN=cfb883ca-b0dd-4e52-b223-ae90a894440b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:4c:8d:cf:53:5a:e2:23:b1:ab:7a:57:9a:
                    a9:40:1c:38:af:df:3d:69:3c:48:5e:07:32:79:43:
                    28:ef:8c:f0:5d:b3:06:00:99:5a:51:3d:48:0e:d6:
                    f3:75:56:c3:6a:d3:40:bc:d5:d2:5a:03:c9:bc:40:
                    1a:4d:7d:07:61:6b:a4:bd:06:c0:65:dd:8d:a3:1b:
                    37:38:9d:28:c3:59:46:35:85:25:3f:2a:63:95:02:
                    38:f4:2d:fa:2e:d2:bc:f4:1c:c3:6d:81:be:01:6f:
                    d8:c4:1e:62:7e:64:d7:7e:0b:ac:82:bc:b1:29:96:
                    17:d5:b1:1b:fe:c9:4e:77:d5:7d:a6:c7:7d:9e:78:
                    ae:72:af:2e:1f:c0:cd:d7:6f:ae:6b:23:82:55:6b:
                    97:91:56:c2:0b:f9:a9:c2:51:ea:ed:70:f7:0a:14:
                    48:6c:37:66:1c:1d:09:0f:29:ea:34:e6:4b:fc:2c:
                    2b:2d:84:e9:fe:e0:2d:8f:16:b9:6e:5d:32:8b:35:
                    16:81:4d:89:f9:73:38:13:f8:68:95:28:26:89:36:
                    2c:bf:f9:9e:3a:6f:1b:fa:60:e4:0e:8e:49:41:0c:
                    90:fb:46:5d:d7:ff:3e:6f:ec:3d:ca:fa:76:81:32:
                    16:78:46:68:1e:c8:77:b9:09:e2:4c:91:51:96:25:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E0:93:D2:83:CD:0B:98:CA:03:65:EA:3F:12:5A:9B:1D:A7:7E:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/41605cef-5e1a-3192-916a-fcadedb9f73c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:354::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:1a:9e:3a:ab:ca:db:fe:d7:82:34:2c:37:7a:bc:46:60:d6:
         b7:a3:04:74:c2:55:8b:92:26:c9:08:e8:3a:56:a2:56:2d:7b:
         84:fc:26:19:36:00:17:29:f8:76:40:81:23:27:1c:6c:8b:1c:
         f4:7d:70:50:cf:e7:11:7a:5f:f5:36:a6:de:36:b3:0e:3c:b5:
         8f:66:43:e1:de:07:e0:a5:17:6e:e1:2c:ae:7d:a4:80:76:4a:
         a5:34:5f:31:b3:71:21:bc:ed:03:e5:96:5b:74:3d:2c:af:9b:
         be:26:1e:9d:01:09:e7:87:f2:42:fe:7b:fc:01:0f:ef:bb:c3:
         e8:88:ca:b7:8d:ca:33:62:cf:00:00:1e:1f:3b:6d:75:c8:5d:
         43:13:30:6a:60:84:53:61:81:12:2b:8e:3c:88:9c:24:16:7c:
         28:ca:9f:d1:7e:31:6a:63:88:4b:a4:0a:54:4f:5e:68:cf:3b:
         84:cc:b6:da:90:92:53:89:cb:91:fe:59:5f:a2:18:ba:3d:a3:
         a0:3b:9e:c5:d4:fd:e4:5d:f9:fc:b1:1a:57:92:cb:57:03:d2:
         bf:59:07:a8:2a:9e:6d:4d:84:5e:4a:ee:78:0d:94:a5:cc:bc:
         68:da:f4:81:20:d1:b5:6e:4d:96:ce:6f:a5:f2:7f:f1:ce:14:
         50:b9:c7:3c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEbH8+Bbfw+a3JkT5kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDgwNjAxMzAxNVoXDTI0MTEwNDAyMzAxNVowLzEtMCsGA1UEAxMk
Y2ZiODgzY2EtYjBkZC00ZTUyLWIyMjMtYWU5MGE4OTQ0NDBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqydMjc9TWuIjsat6V5qpQBw4r989aTxIXgcy
eUMo74zwXbMGAJlaUT1IDtbzdVbDatNAvNXSWgPJvEAaTX0HYWukvQbAZd2Noxs3
OJ0ow1lGNYUlPypjlQI49C36LtK89BzDbYG+AW/YxB5ifmTXfgusgryxKZYX1bEb
/slOd9V9psd9nniucq8uH8DN12+uayOCVWuXkVbCC/mpwlHq7XD3ChRIbDdmHB0J
DynqNOZL/CwrLYTp/uAtjxa5bl0yizUWgU2J+XM4E/holSgmiTYsv/meOm8b+mDk
Do5JQQyQ+0Zd1/8+b+w9yvp2gTIWeEZoHsh3uQniTJFRliVwaQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNzgk9KDzQuYygNl6j8SWpsdp37XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDE2MDVjZWYtNWUxYS0z
MTkyLTkxNmEtZmNhZGVkYjlmNzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcANU
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFIanjqrytv+14I0LDd6vEZg1rejBHTCVYuSJskI6DpWolYte4T8
Jhk2ABcp+HZAgSMnHGyLHPR9cFDP5xF6X/U2pt42sw48tY9mQ+HeB+ClF27hLK59
pIB2SqU0XzGzcSG87QPlllt0PSyvm74mHp0BCeeH8kL+e/wBD++7w+iIyreNyjNi
zwAAHh87bXXIXUMTMGpghFNhgRIrjjyInCQWfCjKn9F+MWpjiEukClRPXmjPO4TM
ttqQklOJy5H+WV+iGLo9o6A7nsXU/eRd+fyxGleSy1cD0r9ZB6gqnm1NhF5K7ngN
lKXMvGja9IEg0bVuTZbOb6Xyf/HOFFC5xzw=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:31 2025 by rpki-client