Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4cee8c41-5e52-3cc0-a506-b201a7039bf0.roa
File:                     4cee8c41-5e52-3cc0-a506-b201a7039bf0.roa (raw, json)
Hash identifier:          LkIAarJVHm092DmEXpvJtP63SuSMfkJlE6KjJ3Hzb1g=
Subject key identifier:   05:65:CA:84:FE:25:EA:BB:DA:57:8D:F4:96:F7:DB:A3:C3:A6:7F:CB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846C7F3D67EF0033C9B4E07CFC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4cee8c41-5e52-3cc0-a506-b201a7039bf0.roa
Signing time:             Tue 06 Aug 2024 01:30:11 +0000
ROA not before:           Tue 06 Aug 2024 01:30:11 +0000
ROA not after:            Mon 04 Nov 2024 02:30:11 +0000
asID:                     137329
IP address blocks:        2001:470:354::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c7:f3:d6:7e:f0:03:3c:9b:4e:07:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  6 01:30:11 2024 GMT
            Not After : Nov  4 02:30:11 2024 GMT
        Subject: CN=5e1c475c-709b-4d4a-aa37-731c4f2d1d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:b4:c4:3d:9d:8f:01:b6:dc:90:4d:d1:6f:
                    b8:34:c5:fc:e7:f5:4d:1e:a1:e1:8c:86:63:af:d2:
                    19:9c:0d:2d:bf:8f:1d:01:71:a4:23:61:24:63:03:
                    9b:01:a0:d9:1a:c7:0e:5e:f3:31:4e:75:03:d2:11:
                    82:c2:77:fd:a6:23:c1:fe:a7:85:9d:84:44:a2:cc:
                    8b:39:95:2c:74:1b:be:61:93:ef:d5:e0:f0:54:f8:
                    f2:41:4d:af:aa:b8:74:e9:76:ff:58:76:1b:19:3f:
                    0c:95:18:ea:32:86:8c:a5:fd:3a:4e:5b:03:42:39:
                    92:34:af:fb:20:da:1a:c7:08:9e:46:dc:a2:b6:8b:
                    65:cc:61:d5:15:c0:30:f7:8e:4a:40:f3:c0:8a:53:
                    3e:e7:f8:94:f1:a7:81:44:1a:d2:b0:92:a1:af:4b:
                    89:71:47:b0:99:0b:c2:11:e8:77:c3:1c:6c:e9:bc:
                    73:c6:e2:db:ef:3f:47:6b:80:fc:64:1c:86:40:97:
                    49:af:98:71:97:f0:57:fb:52:b2:81:e9:b0:d5:d0:
                    f0:0c:f2:6a:0a:a5:45:ee:f0:2e:20:d7:64:81:d2:
                    f4:74:8b:8b:6d:67:22:35:4f:7e:e5:97:50:b8:2a:
                    f0:9d:90:39:7c:50:0d:59:87:ab:80:aa:1e:60:d4:
                    aa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:65:CA:84:FE:25:EA:BB:DA:57:8D:F4:96:F7:DB:A3:C3:A6:7F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4cee8c41-5e52-3cc0-a506-b201a7039bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:354::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:0a:dd:8f:5b:8b:0b:79:9e:ac:b9:be:8d:f5:db:46:f3:ae:
         1c:03:87:3f:6e:5d:30:c1:30:09:83:c5:b0:95:57:67:5d:10:
         ee:8c:e3:92:5e:6d:19:c8:d3:c5:82:b2:7e:84:6f:17:39:42:
         93:ad:02:f5:f7:ce:e8:ba:66:69:77:55:7a:47:85:b3:d5:b3:
         62:84:a2:e0:1c:ee:44:d0:a0:17:07:5a:8f:da:ec:7a:8d:b4:
         9f:13:c8:e9:b4:f6:37:cc:37:cb:a0:33:34:c6:7e:ff:f6:1d:
         3d:76:93:81:ad:cd:3e:96:ea:7b:d0:ed:42:23:57:f4:30:17:
         8c:33:b4:fb:1e:82:9c:18:64:58:d0:6d:a6:c0:0f:ca:b1:b2:
         e5:fe:58:32:fc:9e:5f:a9:22:2c:75:93:0f:fe:62:0a:eb:ef:
         85:58:64:eb:46:f7:a9:76:77:b0:86:04:f0:0c:91:3e:4b:2d:
         17:ce:dd:7d:86:46:1a:d4:b7:21:df:4b:47:e0:73:32:18:e9:
         7b:13:f7:1b:79:8e:10:d2:b3:9d:dc:c9:6d:0b:fb:55:75:67:
         af:ff:91:e5:75:94:31:30:d1:5c:5f:d0:22:a2:19:5a:b4:d8:
         fb:e7:43:62:46:78:0d:fa:ab:99:85:05:69:4d:c0:80:28:ec:
         78:ac:42:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:28:30 2025 by rpki-client