Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98983562-3888-3776-8d3b-1a893088ed0a.roa
File:                     98983562-3888-3776-8d3b-1a893088ed0a.roa (raw, json)
Hash identifier:          z39VTzxn7KlHE82Ck0gegDUfo2N0fcI0+lBGH3o+T2Q=
Subject key identifier:   E2:3F:13:4F:7E:87:97:94:F8:DC:98:45:FD:C7:94:10:DE:C1:9B:71
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858461DA87FB2048CEC84BBC0BC00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98983562-3888-3776-8d3b-1a893088ed0a.roa
Signing time:             Thu 06 Jun 2024 01:30:58 +0000
ROA not before:           Thu 06 Jun 2024 01:30:58 +0000
ROA not after:            Wed 04 Sep 2024 01:30:58 +0000
asID:                     17473
IP address blocks:        2001:470:30d::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1d:a8:7f:b2:04:8c:ec:84:bb:c0:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  6 01:30:58 2024 GMT
            Not After : Sep  4 01:30:58 2024 GMT
        Subject: CN=7ab72f25-dd2f-40f4-9283-f7bf81b0e72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:9c:65:f1:9f:28:5e:cc:5b:a3:af:43:73:
                    8c:98:ad:f2:32:a5:6c:29:83:5b:ca:bb:d0:61:6b:
                    d9:bf:0d:e8:45:5c:09:4a:28:fc:5c:49:2c:a4:e7:
                    89:d1:a9:86:13:dc:56:55:95:7b:d9:2d:3c:a6:4d:
                    04:36:32:98:95:5c:c9:92:f2:85:10:69:f8:a2:19:
                    dc:26:e7:21:98:e8:ec:37:97:e0:4e:38:1e:8d:2d:
                    38:64:f9:1a:14:12:f4:55:79:5e:70:35:12:6a:6f:
                    10:41:37:47:bf:3d:eb:61:a0:fe:ae:45:a8:cc:26:
                    e5:63:87:d9:e3:aa:ce:f3:e5:ca:5b:9c:2b:b5:69:
                    e2:c5:77:4e:e3:b8:8d:c3:71:5c:5e:af:39:08:55:
                    eb:d7:b3:9c:69:53:d5:d2:8c:8a:c9:73:ab:85:0c:
                    56:57:a5:98:8c:82:c6:51:c3:f4:b0:68:e7:0d:40:
                    28:f1:f3:92:68:37:58:e5:9a:17:18:80:85:cf:5b:
                    74:28:b1:8a:1d:e3:cb:10:e9:c0:1f:66:08:23:b5:
                    6e:ee:f1:a2:93:24:60:f0:15:e6:8a:7c:40:1d:a9:
                    4f:9f:0b:3e:d4:b0:15:1b:25:d5:cb:4b:da:1a:35:
                    4f:88:a4:9e:e1:80:f2:50:d2:91:56:48:f1:e2:e9:
                    9b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3F:13:4F:7E:87:97:94:F8:DC:98:45:FD:C7:94:10:DE:C1:9B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/98983562-3888-3776-8d3b-1a893088ed0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:30d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:cd:8f:37:f4:55:a1:90:24:65:93:e6:26:ce:62:ef:48:32:
         66:36:b1:c8:93:b2:ab:4c:97:92:f6:48:37:27:2c:34:41:3e:
         7c:26:ca:ba:c9:21:c8:56:7a:35:6f:7e:fe:48:3a:45:09:28:
         f9:7a:2b:68:82:5c:9f:e5:39:49:f0:57:6e:e8:ba:8e:8a:62:
         1d:2f:9b:ac:55:86:ff:cb:e3:0c:1a:4a:df:78:2b:66:da:ac:
         75:3c:08:88:b3:b2:54:ac:cf:ad:3c:cb:22:63:24:35:a0:45:
         78:bc:ed:b2:be:d0:3d:4b:eb:5c:a0:a7:07:1d:46:5b:b8:5c:
         7f:34:ce:db:63:d4:fc:bb:08:f9:48:c0:dd:0b:72:78:69:e7:
         6d:86:57:99:81:d8:be:80:74:c1:28:d2:7d:8e:eb:21:99:37:
         af:88:9b:b5:01:61:80:5a:30:1c:c0:3a:41:36:81:80:a6:17:
         7e:89:02:fb:83:81:18:d6:a7:6c:8b:44:be:a1:e9:9f:95:df:
         fb:52:82:08:be:4f:e6:ce:f0:27:18:fc:24:94:2a:64:e3:4f:
         70:6f:30:67:f1:a9:7b:23:12:58:e0:1b:08:24:2f:d1:b5:6c:
         74:d1:b6:bd:7f:61:40:cd:24:2f:e5:07:42:af:cb:65:a9:0c:
         56:7c:ee:df
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYdqH+yBIzshLvAvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDYwNjAxMzA1OFoXDTI0MDkwNDAxMzA1OFowLzEtMCsGA1UEAxMk
N2FiNzJmMjUtZGQyZi00MGY0LTkyODMtZjdiZjgxYjBlNzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnacZfGfKF7MW6OvQ3OMmK3yMqVsKYNbyrvQ
YWvZvw3oRVwJSij8XEkspOeJ0amGE9xWVZV72S08pk0ENjKYlVzJkvKFEGn4ohnc
JuchmOjsN5fgTjgejS04ZPkaFBL0VXlecDUSam8QQTdHvz3rYaD+rkWozCblY4fZ
46rO8+XKW5wrtWnixXdO47iNw3FcXq85CFXr17OcaVPV0oyKyXOrhQxWV6WYjILG
UcP0sGjnDUAo8fOSaDdY5ZoXGICFz1t0KLGKHePLEOnAH2YII7Vu7vGikyRg8BXm
inxAHalPnws+1LAVGyXVy0vaGjVPiKSe4YDyUNKRVkjx4umbRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOI/E09+h5eU+NyYRf3HlBDewZtxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTg5ODM1NjItMzg4OC0z
Nzc2LThkM2ItMWE4OTMwODhlZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMN
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGbNjzf0VaGQJGWT5ibOYu9IMmY2sciTsqtMl5L2SDcnLDRBPnwm
yrrJIchWejVvfv5IOkUJKPl6K2iCXJ/lOUnwV27ouo6KYh0vm6xVhv/L4wwaSt94
K2barHU8CIizslSsz608yyJjJDWgRXi87bK+0D1L61ygpwcdRlu4XH80zttj1Py7
CPlIwN0Lcnhp522GV5mB2L6AdMEo0n2O6yGZN6+Im7UBYYBaMBzAOkE2gYCmF36J
AvuDgRjWp2yLRL6h6Z+V3/tSggi+T+bO8CcY/CSUKmTjT3BvMGfxqXsjEljgGwgk
L9G1bHTRtr1/YUDNJC/lB0Kvy2WpDFZ87t8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:56:18 2025 by rpki-client