Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7cf606ab-ae5a-32a5-8d95-bf98ff3473f2.roa
File:                     7cf606ab-ae5a-32a5-8d95-bf98ff3473f2.roa (raw, json)
Hash identifier:          5Hdl3wli1cK5dgxLXibLbHY0gDp3IpqTKmjf2aC0vk4=
Subject key identifier:   F4:DF:10:1C:04:E4:A7:85:CD:88:D8:14:1C:4C:2E:D7:F1:FD:82:23
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858465A77465331F398BBB68A1F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7cf606ab-ae5a-32a5-8d95-bf98ff3473f2.roa
Signing time:             Thu 27 Jun 2024 20:16:05 +0000
ROA not before:           Thu 27 Jun 2024 20:16:05 +0000
ROA not after:            Wed 25 Sep 2024 20:16:05 +0000
asID:                     48347
IP address blocks:        2001:470:30d::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:5a:77:46:53:31:f3:98:bb:b6:8a:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 27 20:16:05 2024 GMT
            Not After : Sep 25 20:16:05 2024 GMT
        Subject: CN=bef59969-e078-4dde-91a6-7daff6800a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:7a:1e:8f:2e:2f:55:68:0d:2b:c6:c1:cb:
                    2c:fc:be:9b:fb:83:ae:5a:f6:fc:70:a8:9c:bd:b0:
                    dc:09:d2:74:36:ce:07:d2:2c:ae:2d:b1:74:5a:5a:
                    60:36:83:bd:23:6e:a7:2d:e7:c8:4c:2a:6d:3a:e2:
                    97:91:fe:04:ef:61:6e:9c:2d:d2:f9:62:a9:51:1e:
                    8c:af:f6:9e:0f:5c:f2:c3:85:b1:f1:54:e7:be:26:
                    21:d1:66:eb:19:e1:e2:5d:93:34:3d:ca:bf:77:a9:
                    3f:46:aa:49:97:d3:e9:28:57:bc:3e:65:60:95:8f:
                    98:90:b8:bc:0d:dd:47:36:f8:a5:5b:b3:66:70:d1:
                    8b:32:cf:3b:15:ed:43:b8:92:e5:8a:9d:db:8a:fc:
                    1b:3b:76:92:d6:b6:cf:e5:70:67:52:88:42:ce:18:
                    25:27:6e:91:14:f4:ed:f2:e4:7b:ef:ab:69:36:30:
                    bc:16:a1:f5:9f:75:ac:e3:40:10:96:09:06:8e:dd:
                    29:8c:e5:5c:ab:8a:7a:72:51:8f:55:81:3e:96:3e:
                    fa:7a:bc:3a:09:10:31:76:bd:f4:5a:e9:75:67:f0:
                    d9:fb:b2:9b:f7:56:b0:eb:38:43:d9:49:6d:0d:20:
                    21:b1:30:41:f2:d6:0a:04:b6:83:26:a7:97:d5:9d:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DF:10:1C:04:E4:A7:85:CD:88:D8:14:1C:4C:2E:D7:F1:FD:82:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7cf606ab-ae5a-32a5-8d95-bf98ff3473f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:30d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:9a:86:07:1f:81:e3:5e:a2:33:31:1e:a1:00:14:a5:a0:30:
         44:e5:1e:f2:22:e4:dd:ca:9b:de:a2:bd:52:13:f0:70:e9:2f:
         18:27:31:b2:66:c3:1c:85:d8:a3:e7:95:aa:88:0e:8f:b6:6f:
         99:f7:a6:01:ef:f0:9b:85:30:8c:1d:0f:29:75:ac:b2:2b:94:
         cd:b7:13:e1:00:56:85:b1:26:a8:83:d0:5d:ea:0c:3a:64:a6:
         4a:cc:0e:cc:a8:f5:09:20:6f:c3:b1:aa:a8:5f:e9:b4:5f:01:
         1b:cc:f4:21:43:8a:90:e0:65:f8:a2:a4:71:bb:0a:c5:16:8c:
         d2:38:3a:b9:8d:cd:cf:7f:5a:2c:c6:2d:91:c1:03:79:d5:f7:
         38:99:f3:52:69:fe:06:be:82:90:6a:37:0a:34:3c:36:9d:f1:
         f2:c6:d3:68:61:98:1e:09:d8:db:09:e1:b7:32:06:21:90:9d:
         0f:43:ea:70:38:f0:17:e6:1e:94:5c:07:7b:69:ed:9e:35:be:
         f0:3a:6b:68:b6:76:67:c0:f9:30:4e:f8:ab:2a:3f:cc:63:30:
         26:7f:70:07:6a:bf:a3:be:a3:36:00:c0:a9:64:e7:c4:19:4a:
         af:39:b4:4b:fd:1b:58:f1:73:aa:99:10:98:ed:09:5d:a4:80:
         03:79:b2:eb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEZad0ZTMfOYu7aKHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDYyNzIwMTYwNVoXDTI0MDkyNTIwMTYwNVowLzEtMCsGA1UEAxMk
YmVmNTk5NjktZTA3OC00ZGRlLTkxYTYtN2RhZmY2ODAwYTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq356Ho8uL1VoDSvGwcss/L6b+4OuWvb8cKic
vbDcCdJ0Ns4H0iyuLbF0WlpgNoO9I26nLefITCptOuKXkf4E72FunC3S+WKpUR6M
r/aeD1zyw4Wx8VTnviYh0WbrGeHiXZM0Pcq/d6k/RqpJl9PpKFe8PmVglY+YkLi8
Dd1HNvilW7NmcNGLMs87Fe1DuJLlip3bivwbO3aS1rbP5XBnUohCzhglJ26RFPTt
8uR776tpNjC8FqH1n3Ws40AQlgkGjt0pjOVcq4p6clGPVYE+lj76erw6CRAxdr30
Wul1Z/DZ+7Kb91aw6zhD2UltDSAhsTBB8tYKBLaDJqeX1Z3qBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPTfEBwE5KeFzYjYFBxMLtfx/YIjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvN2NmNjA2YWItYWU1YS0z
MmE1LThkOTUtYmY5OGZmMzQ3M2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMN
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGeahgcfgeNeojMxHqEAFKWgMETlHvIi5N3Km96ivVIT8HDpLxgn
MbJmwxyF2KPnlaqIDo+2b5n3pgHv8JuFMIwdDyl1rLIrlM23E+EAVoWxJqiD0F3q
DDpkpkrMDsyo9Qkgb8Oxqqhf6bRfARvM9CFDipDgZfiipHG7CsUWjNI4OrmNzc9/
WizGLZHBA3nV9ziZ81Jp/ga+gpBqNwo0PDad8fLG02hhmB4J2NsJ4bcyBiGQnQ9D
6nA48BfmHpRcB3tp7Z41vvA6a2i2dmfA+TBO+KsqP8xjMCZ/cAdqv6O+ozYAwKlk
58QZSq85tEv9G1jxc6qZEJjtCV2kgAN5sus=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:19:00 2025 by rpki-client