Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/73497c28-8aaa-36d9-93dc-6eff8422668f.roa
File:                     73497c28-8aaa-36d9-93dc-6eff8422668f.roa (raw, json)
Hash identifier:          SSt2ZQaH51fllF3jcKPLaOWpfR+8Rx+t6OnlFsmffSk=
Subject key identifier:   B1:DA:5B:52:04:1D:EC:87:88:68:04:8C:AD:96:03:C1:C8:54:18:A1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846C7F3F0F849C74A5261C39700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/73497c28-8aaa-36d9-93dc-6eff8422668f.roa
Signing time:             Tue 06 Aug 2024 01:30:23 +0000
ROA not before:           Tue 06 Aug 2024 01:30:23 +0000
ROA not after:            Mon 04 Nov 2024 02:30:23 +0000
asID:                     37057
IP address blocks:        2001:470:353::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c7:f3:f0:f8:49:c7:4a:52:61:c3:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  6 01:30:23 2024 GMT
            Not After : Nov  4 02:30:23 2024 GMT
        Subject: CN=ef748a73-15d7-48f4-bec7-fdf7fbe36511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:df:8e:1b:1c:8c:5b:42:29:ae:fe:86:80:
                    d3:f5:6f:82:f2:9a:1f:59:c1:5a:87:9d:5e:63:ec:
                    71:c1:ee:86:8f:84:9e:0d:e4:94:f0:7c:7a:c5:d9:
                    a8:de:21:49:72:62:b0:6f:8f:bf:0d:8c:bf:df:d3:
                    a2:2b:c5:7e:30:a8:e2:c7:1f:d7:b3:19:09:67:6b:
                    36:4e:ca:27:9c:c8:df:85:ae:c3:75:7c:cd:c7:d2:
                    7b:16:07:c3:66:ea:0c:22:53:ae:17:27:87:46:8d:
                    c7:72:da:32:e7:62:4c:27:05:14:a1:d3:ed:e8:61:
                    79:e8:51:40:ed:03:3a:92:86:3f:15:27:1e:fc:65:
                    04:78:d7:11:f5:5f:05:f2:0a:48:35:82:57:e6:70:
                    34:44:6a:ae:19:76:b1:61:c7:26:e4:82:4c:ed:af:
                    76:12:e7:42:ef:41:4b:4d:e0:4f:91:64:f1:00:de:
                    19:ab:18:00:90:c3:cb:32:ba:f4:4b:9d:7d:a0:b2:
                    7a:92:81:3e:c0:e1:37:8d:20:3d:b8:f0:93:06:9f:
                    ae:e5:aa:dc:09:f4:70:18:56:56:c1:ed:d5:c0:e6:
                    2c:76:41:8e:11:70:51:4e:3f:fb:66:7c:0b:0d:85:
                    d6:93:b1:70:36:33:a4:79:b7:39:f6:db:21:1c:24:
                    36:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DA:5B:52:04:1D:EC:87:88:68:04:8C:AD:96:03:C1:C8:54:18:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/73497c28-8aaa-36d9-93dc-6eff8422668f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:353::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:7a:f0:68:f6:bc:d9:dc:ff:cf:2b:2a:11:75:bb:3d:e8:1a:
         e1:26:5f:aa:8c:59:a6:42:a2:21:8d:29:ed:e2:18:05:76:ce:
         e1:61:c3:35:bd:79:39:5a:16:55:23:c3:bf:73:c5:7d:ff:85:
         cc:80:69:c8:f1:8e:34:d5:71:de:59:3a:9d:ea:25:6e:40:b6:
         4b:2f:72:30:a8:57:0e:ed:55:5c:59:69:25:42:28:ff:96:8b:
         87:59:20:92:04:fb:6f:26:f7:c5:04:4d:17:57:63:6e:14:46:
         d6:e6:d9:0f:c7:a3:62:35:52:cb:5e:35:2e:fc:75:2a:49:5a:
         13:34:9d:11:15:15:de:1c:58:a9:19:b0:22:5a:0b:9c:f5:bb:
         a5:cb:92:c9:92:a8:b0:a9:47:1c:c0:9c:9f:8b:e0:28:fa:95:
         6d:3b:dc:bd:13:3c:48:c3:2b:06:6c:60:8d:93:e3:1f:c9:23:
         4c:8b:52:d0:cd:1c:0b:b8:c1:69:da:88:09:76:28:fb:06:55:
         30:bc:60:2d:6b:4a:5e:fe:b1:b5:16:65:56:f9:4c:d6:03:ee:
         20:c8:db:0d:ce:fa:ae:81:0e:96:b2:91:45:d1:ec:7c:c0:c0:
         5a:1c:cb:b9:ef:d7:61:99:24:2f:01:1d:6d:94:ab:e7:c1:6f:
         31:06:29:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:25:06 2025 by rpki-client