Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7a687808-525f-33ec-bb46-54f4bd3220ee.roa
File:                     7a687808-525f-33ec-bb46-54f4bd3220ee.roa (raw, json)
Hash identifier:          G/ERPlonIWRzG5usBjgcKbErIW+tQM7p/Z35AFo4cPs=
Subject key identifier:   90:DE:EB:EC:51:68:63:99:4E:D0:29:FA:C1:4F:B6:50:5E:EA:4B:B2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846C7F3E9A52CC95D21D5DD7280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7a687808-525f-33ec-bb46-54f4bd3220ee.roa
Signing time:             Tue 06 Aug 2024 01:30:20 +0000
ROA not before:           Tue 06 Aug 2024 01:30:20 +0000
ROA not after:            Mon 04 Nov 2024 02:30:20 +0000
asID:                     267522
IP address blocks:        2001:470:112::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c7:f3:e9:a5:2c:c9:5d:21:d5:dd:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  6 01:30:20 2024 GMT
            Not After : Nov  4 02:30:20 2024 GMT
        Subject: CN=fa2738d3-237f-4aae-80c9-a80e42c043b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:b8:42:a1:b7:99:19:19:6c:1b:0e:62:3a:
                    e5:31:38:2c:3c:19:31:7f:8b:eb:d0:5a:47:29:67:
                    47:60:a9:dc:00:d9:83:4c:1d:f3:86:55:1a:94:3d:
                    a7:24:2e:bc:4a:19:ab:75:39:93:76:f6:3a:97:05:
                    fa:12:d9:15:fd:30:0e:20:8f:53:d0:88:ae:46:13:
                    21:45:49:71:3c:71:99:51:ce:5a:4c:7f:37:7e:a1:
                    2f:7f:ff:4a:7e:35:06:f5:e9:19:b8:88:d0:41:88:
                    d8:69:a9:77:71:fa:d4:5a:1c:91:64:5b:a9:21:d7:
                    07:0e:ed:fb:c3:66:f5:9a:45:13:1b:cc:79:7d:bc:
                    f4:8a:6d:9b:4c:32:c7:77:e1:93:ea:a0:d7:a7:1f:
                    d5:8a:9d:db:d9:46:4a:7f:8b:9f:0e:64:f2:7b:74:
                    02:d5:11:e2:09:1b:9f:5f:a7:01:ca:04:0c:dc:7c:
                    fb:8d:30:58:5f:d0:54:2c:60:b4:4d:db:97:32:2d:
                    58:f6:35:fb:84:d6:fc:1a:76:9a:e1:4b:19:b3:14:
                    aa:a8:d7:f4:51:99:5a:4b:96:4c:93:a3:db:cb:40:
                    e3:99:70:c5:7d:a4:fd:70:05:78:32:10:b6:97:52:
                    04:18:b7:e7:73:c5:b5:58:e9:6d:13:28:b2:fb:95:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DE:EB:EC:51:68:63:99:4E:D0:29:FA:C1:4F:B6:50:5E:EA:4B:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7a687808-525f-33ec-bb46-54f4bd3220ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:112::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:29:7f:7d:20:c0:0d:7f:1e:09:3d:68:ca:83:ff:f9:32:84:
         98:70:85:29:2e:e0:6b:b9:fb:cf:79:cb:b0:e2:34:40:bb:6c:
         6f:b8:22:39:9b:1b:39:95:ca:b1:f3:cc:b5:27:fb:36:0f:f5:
         e5:ed:77:ef:a4:26:0d:e4:61:42:e7:42:34:f7:28:41:0c:33:
         2d:c0:8a:07:1e:f6:7b:d5:cc:0c:09:9e:c9:a5:e6:81:b6:51:
         a9:ff:1e:45:34:6f:f3:68:fa:e9:b2:a4:8e:62:c7:e9:b0:f0:
         94:4f:2a:e7:02:80:49:5e:51:b4:1b:8f:57:bc:91:64:91:46:
         d1:01:d6:25:c2:6c:05:81:70:f3:e8:af:1a:f4:73:02:8b:68:
         ed:dc:fc:8a:90:73:cd:da:1d:da:4b:e9:64:71:7f:4c:25:e0:
         f1:5a:47:7d:83:18:d0:2a:0b:20:39:8a:6a:7d:4d:26:46:92:
         3c:3c:a8:15:15:e4:cb:83:29:d2:55:99:30:59:94:02:72:7e:
         9c:d9:b9:99:41:b8:e3:ce:71:81:19:f3:c7:10:a9:71:c2:fc:
         39:e6:4b:a4:9e:07:f2:2b:ca:61:32:4d:da:5d:48:8d:61:0e:
         1d:0b:a2:f9:f0:37:24:cb:42:00:cf:f4:21:92:b6:4c:a3:71:
         77:b7:b0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:38:28 2025 by rpki-client