Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/772fa8bc-6fa7-3997-a6ce-e49c2bed9908.roa
File:                     772fa8bc-6fa7-3997-a6ce-e49c2bed9908.roa (raw, json)
Hash identifier:          n31bqJzjEXtxdi2SAxv3W/l/ovwB3NE0i1qGH1Qwt7o=
Subject key identifier:   89:12:87:90:3E:D1:4D:AF:55:64:79:12:6E:A2:DB:F5:19:6D:EE:DA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846C7F3EC8D73F9A67A96624D40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/772fa8bc-6fa7-3997-a6ce-e49c2bed9908.roa
Signing time:             Tue 06 Aug 2024 01:30:21 +0000
ROA not before:           Tue 06 Aug 2024 01:30:21 +0000
ROA not after:            Mon 04 Nov 2024 02:30:21 +0000
asID:                     267522
IP address blocks:        2001:470:30d::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c7:f3:ec:8d:73:f9:a6:7a:96:62:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  6 01:30:21 2024 GMT
            Not After : Nov  4 02:30:21 2024 GMT
        Subject: CN=b976326b-7a57-4a79-a9d9-de7e7c186a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:32:e9:28:23:67:7e:a0:e1:17:a4:55:8a:6c:
                    66:96:fa:7d:84:59:3d:23:e4:04:16:47:8b:a1:b5:
                    5b:0a:23:79:58:1c:42:17:72:63:e7:bf:e5:76:c4:
                    5f:7e:15:f4:78:2d:a6:1b:4c:ca:df:3a:1f:d5:eb:
                    56:70:3c:4c:86:cb:81:d1:fe:ac:1a:f8:09:f5:ee:
                    3e:e5:87:94:b6:f9:c5:32:5c:49:a0:3d:c6:b9:66:
                    3f:57:87:b9:62:c8:d0:66:34:2c:84:40:cc:c4:a4:
                    f3:0d:c1:59:6f:24:52:3d:65:f7:ae:f9:35:93:c1:
                    0f:37:e8:de:b3:c2:f1:e6:4c:ec:50:d2:73:34:24:
                    62:f7:f9:06:72:f7:e0:54:13:bb:33:a1:77:f7:8e:
                    08:a4:cf:c7:b7:c2:d1:62:fb:ef:a8:56:91:9e:c0:
                    13:22:e8:0e:d4:7e:93:bf:0a:33:7d:73:c7:aa:c9:
                    5e:8a:6f:70:2f:94:fe:f8:96:ad:ef:b5:d6:92:a6:
                    64:1b:b5:4c:00:89:c2:23:06:88:6e:b8:83:33:62:
                    2e:a7:1f:00:3c:49:59:5f:37:bb:d2:dd:d3:a7:79:
                    b4:05:a9:85:c4:b1:5b:f9:0e:e0:2c:4f:6d:a1:bc:
                    69:f9:fe:4f:b0:06:6a:fc:cb:77:e3:45:27:aa:25:
                    44:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:12:87:90:3E:D1:4D:AF:55:64:79:12:6E:A2:DB:F5:19:6D:EE:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/772fa8bc-6fa7-3997-a6ce-e49c2bed9908.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:30d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:23:da:b4:77:cb:bf:9b:3e:ea:1b:f8:34:d2:a2:f6:4b:ea:
         20:d3:41:fd:52:ea:63:69:9b:55:97:c4:9a:99:ae:ad:cb:ec:
         04:ab:99:77:b5:04:9f:75:eb:ee:28:c7:82:64:03:17:6a:2d:
         8a:a5:b4:f2:ee:45:1e:a9:24:40:65:b3:33:d5:fb:ca:72:4c:
         7b:64:c6:ac:1b:aa:43:da:f0:66:d2:92:f1:90:b4:ff:63:75:
         bb:59:72:9a:5d:59:ad:14:eb:c3:cf:fb:19:e3:d8:6c:00:64:
         6f:77:10:6a:0c:db:a8:08:4b:ed:d2:c0:8c:3f:40:66:09:d9:
         3e:8b:ce:d6:dc:ce:cf:fe:0d:1f:c5:38:51:ee:74:c9:8f:f2:
         61:af:b1:25:ba:2f:f1:32:3b:5b:7d:1d:03:0e:ca:ce:10:86:
         36:50:ca:3d:53:81:b0:01:02:20:70:f2:41:31:f4:4e:20:52:
         50:3d:57:96:2b:c3:8d:8e:13:3f:39:76:18:f9:1e:83:55:96:
         b0:9f:74:43:f5:e1:df:4f:59:20:db:78:32:b8:23:37:85:b8:
         45:46:32:19:14:40:d2:7c:50:78:58:9c:e8:76:3a:3e:0f:d1:
         69:e5:56:63:50:77:ee:7d:c9:b0:e4:5d:e5:bf:e8:a8:d2:a4:
         84:de:6a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:19:23 2025 by rpki-client