Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/722d8fac-5189-3923-9e0d-62d05e086d08.roa
File:                     722d8fac-5189-3923-9e0d-62d05e086d08.roa (raw, json)
Hash identifier:          a84KxxSLXgDmhurHh71B5AZbWq+cY9YElK05pjYCI0s=
Subject key identifier:   B8:EC:A0:62:8D:D9:02:A3:16:00:80:B7:81:77:EE:48:0F:81:35:BF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846663DE11E364D2E354A17B5C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/722d8fac-5189-3923-9e0d-62d05e086d08.roa
Signing time:             Tue 02 Jul 2024 01:30:09 +0000
ROA not before:           Tue 02 Jul 2024 01:30:09 +0000
ROA not after:            Mon 30 Sep 2024 01:30:09 +0000
asID:                     18647
IP address blocks:        2001:470:31a::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:66:3d:e1:1e:36:4d:2e:35:4a:17:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul  2 01:30:09 2024 GMT
            Not After : Sep 30 01:30:09 2024 GMT
        Subject: CN=0cf11b25-c4c2-4565-bd12-4db4a9b00118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:71:c0:bd:77:19:64:e4:81:a0:c6:f4:e4:e7:
                    51:23:cb:df:58:c8:a0:19:cc:bd:51:0b:d7:e8:b0:
                    e6:b4:7f:97:7b:b3:2f:19:de:d8:89:c7:4c:44:b9:
                    de:15:d4:58:34:4e:f5:93:4d:aa:6a:6a:2b:ea:e2:
                    81:50:0b:53:c0:8e:96:2b:7a:c0:7b:4a:ed:f1:62:
                    62:28:99:7d:cb:70:38:86:a7:9a:5b:6b:0e:79:c8:
                    6a:06:26:8f:92:cf:5e:95:bf:ef:2e:5d:f3:5c:57:
                    f9:82:c4:ab:39:fb:c7:3d:15:4d:fe:a7:7a:4d:56:
                    cd:40:38:d9:ee:68:8f:5f:f5:3a:fb:2b:d2:a4:92:
                    3f:b2:bf:aa:f1:b8:a7:60:39:c2:1b:85:82:36:81:
                    53:38:31:bd:b8:b7:2f:a3:a5:7d:c3:e1:90:f1:69:
                    dc:82:1a:18:01:cb:56:a8:2a:0a:f8:77:74:cb:b6:
                    e3:35:f7:5f:18:08:fd:31:09:4f:ce:e8:de:da:63:
                    6a:09:6f:dc:7b:05:32:b2:0c:f8:92:12:96:64:e8:
                    d3:32:6e:00:f7:d9:ee:3e:c7:d4:3f:6e:ed:0a:e7:
                    38:97:6e:13:b0:70:61:22:49:6b:3c:51:34:78:e8:
                    4d:c7:84:f5:e1:99:ad:c3:36:cd:62:9d:5f:0d:c2:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EC:A0:62:8D:D9:02:A3:16:00:80:B7:81:77:EE:48:0F:81:35:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/722d8fac-5189-3923-9e0d-62d05e086d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:4b:71:f3:19:2c:4c:36:19:19:1d:06:db:1b:29:4b:df:5c:
         81:d4:db:9a:6a:a7:16:0b:e5:f2:7a:48:52:ac:f4:e9:b5:b9:
         8e:75:3f:f4:ee:75:5a:9b:e2:ae:85:a8:18:dd:5e:e3:e7:19:
         ae:22:33:1c:23:f0:c1:01:c3:e1:ee:6f:ac:9c:43:fa:07:37:
         81:2e:45:96:23:da:db:44:02:d8:c9:1b:3c:59:94:61:c4:16:
         ea:51:5c:85:2e:dc:af:68:ea:78:47:e8:f9:81:b1:25:84:58:
         b1:47:22:43:ef:1c:5a:86:aa:9d:45:bf:e4:98:9b:7c:66:5a:
         ad:0b:0d:d0:42:a3:90:eb:9d:65:ae:b3:55:df:d8:10:3d:1f:
         a7:bb:e6:d6:93:57:0d:32:4f:92:45:8a:a7:9d:3c:7f:35:08:
         03:c6:6d:62:d0:84:d7:41:a5:2a:47:1a:8b:b2:f6:c1:53:08:
         23:e5:21:12:34:94:fd:95:54:98:d8:36:91:54:89:43:e6:7d:
         c4:d4:5b:7a:1a:09:3c:70:d0:79:7a:09:95:23:fb:25:84:5c:
         a4:09:3c:a5:a0:32:30:89:cb:f0:67:d6:51:7b:4f:38:9b:40:
         df:e8:95:11:4d:37:94:0e:7a:79:11:69:bb:2c:47:66:94:57:
         0f:ce:bd:57
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEZmPeEeNk0uNUoXtcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDcwMjAxMzAwOVoXDTI0MDkzMDAxMzAwOVowLzEtMCsGA1UEAxMk
MGNmMTFiMjUtYzRjMi00NTY1LWJkMTItNGRiNGE5YjAwMTE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXHAvXcZZOSBoMb05OdRI8vfWMigGcy9UQvX
6LDmtH+Xe7MvGd7YicdMRLneFdRYNE71k02qamor6uKBUAtTwI6WK3rAe0rt8WJi
KJl9y3A4hqeaW2sOechqBiaPks9elb/vLl3zXFf5gsSrOfvHPRVN/qd6TVbNQDjZ
7miPX/U6+yvSpJI/sr+q8binYDnCG4WCNoFTODG9uLcvo6V9w+GQ8WncghoYActW
qCoK+Hd0y7bjNfdfGAj9MQlPzuje2mNqCW/cewUysgz4khKWZOjTMm4A99nuPsfU
P27tCuc4l24TsHBhIklrPFE0eOhNx4T14ZmtwzbNYp1fDcKlJwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLjsoGKN2QKjFgCAt4F37kgPgTW/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNzIyZDhmYWMtNTE4OS0z
OTIzLTllMGQtNjJkMDVlMDg2ZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACNLcfMZLEw2GRkdBtsbKUvfXIHU25pqpxYL5fJ6SFKs9Om1uY51
P/TudVqb4q6FqBjdXuPnGa4iMxwj8MEBw+Hub6ycQ/oHN4EuRZYj2ttEAtjJGzxZ
lGHEFupRXIUu3K9o6nhH6PmBsSWEWLFHIkPvHFqGqp1Fv+SYm3xmWq0LDdBCo5Dr
nWWus1Xf2BA9H6e75taTVw0yT5JFiqedPH81CAPGbWLQhNdBpSpHGouy9sFTCCPl
IRI0lP2VVJjYNpFUiUPmfcTUW3oaCTxw0Hl6CZUj+yWEXKQJPKWgMjCJy/Bn1lF7
TzibQN/olRFNN5QOenkRabssR2aUVw/OvVc=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:34:21 2025 by rpki-client