Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6926c940-5a04-307c-bcd2-05a4c4c21044.roa
File:                     6926c940-5a04-307c-bcd2-05a4c4c21044.roa (raw, json)
Hash identifier:          2XJClSY++q1nYe698b239BoPz+XlZqPtAYM/19PaT30=
Subject key identifier:   6F:8C:F2:78:28:E3:88:82:7C:C9:29:C1:6E:F1:84:71:8C:16:BB:34
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D247FF49D016300898317D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6926c940-5a04-307c-bcd2-05a4c4c21044.roa
Signing time:             Fri 10 May 2024 01:30:54 +0000
ROA not before:           Fri 10 May 2024 01:30:54 +0000
ROA not after:            Thu 08 Aug 2024 01:30:54 +0000
asID:                     135126
IP address blocks:        2001:470:112::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d2:47:ff:49:d0:16:30:08:98:31:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 10 01:30:54 2024 GMT
            Not After : Aug  8 01:30:54 2024 GMT
        Subject: CN=0d5ae1c6-3685-4472-a51d-90c198fba318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:92:99:a4:c0:ad:62:3a:7b:50:00:ae:1e:32:
                    9a:02:5d:c9:6a:7c:ce:7b:f6:d3:09:30:8c:23:b9:
                    44:62:ff:78:5d:b6:35:6f:4c:3f:2b:1c:7b:82:e1:
                    ca:4b:43:77:25:13:b9:57:6d:0b:3b:10:60:e0:f8:
                    09:1c:04:6b:7a:ee:c8:43:89:68:ae:4f:1b:d7:c7:
                    d7:ba:27:2a:82:59:23:7f:d8:33:96:27:31:c7:f1:
                    d8:59:4f:2e:b5:df:e7:89:1d:68:f5:ed:58:d9:81:
                    fd:d6:3f:7f:b1:ff:ab:70:db:ed:35:73:d7:7b:22:
                    74:02:74:eb:cd:ba:de:c2:d1:a0:32:a6:d6:5f:30:
                    b8:81:97:c3:11:b7:db:b2:d2:97:88:c3:28:ff:f8:
                    5e:49:e2:f2:f6:00:2e:a6:a1:ca:70:3b:db:ae:d9:
                    b1:3c:99:bf:71:65:06:5c:eb:ff:18:bc:25:33:f7:
                    89:0f:81:48:21:5e:08:ad:91:97:71:ee:7c:2a:09:
                    95:87:39:f6:dd:d6:47:32:e1:56:d5:72:e4:51:9f:
                    52:8b:39:71:d0:98:cf:b5:bf:88:19:b4:d6:b3:c3:
                    e0:05:61:54:92:82:a0:c6:c6:b1:6a:40:ac:0f:19:
                    0d:5e:95:67:88:6d:4f:92:a7:9b:c2:8c:5f:75:4b:
                    f4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8C:F2:78:28:E3:88:82:7C:C9:29:C1:6E:F1:84:71:8C:16:BB:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6926c940-5a04-307c-bcd2-05a4c4c21044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:112::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:b6:1f:91:f1:25:71:4a:11:a2:6b:b9:46:94:20:93:8a:52:
         5a:5f:f8:35:3d:de:1d:ca:a6:96:64:aa:92:25:2d:56:63:b2:
         a1:88:8e:59:a1:06:66:3b:17:68:fc:d2:4c:21:02:6e:cb:01:
         c2:54:95:18:e9:9a:61:6b:56:f9:c6:8b:c6:35:2b:0c:29:6a:
         a5:d9:3d:02:60:c3:37:5f:b1:95:55:6b:f1:39:4d:ef:44:9f:
         5a:75:a3:42:ab:cf:db:5a:13:b4:4c:c7:d3:0c:dc:db:4a:8d:
         9a:7f:6d:08:99:e4:44:c8:c4:4a:6b:2a:90:05:2c:4c:aa:0f:
         54:6a:0c:be:91:55:d0:23:a0:12:94:e6:fc:a4:b1:c6:dc:16:
         78:01:83:91:5e:d3:2b:ff:73:c8:36:9a:e5:b1:0d:d4:a5:94:
         3c:83:da:1a:22:7c:4c:12:e7:8e:5e:dd:78:1d:55:c1:ee:8f:
         80:e1:bb:7f:5e:44:22:4f:12:8b:0e:27:b4:4b:01:6c:40:56:
         1a:ea:4a:9d:9f:76:dd:8c:8f:9b:59:44:64:e6:04:1a:3c:c6:
         f0:f8:f3:45:8f:70:1d:3e:eb:b7:76:53:e0:6e:c9:4f:52:c3:
         60:6f:a0:d8:ce:aa:3f:b8:d7:8e:ef:79:a8:c7:c3:20:58:5e:
         18:53:40:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:19:23 2025 by rpki-client