Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a75b3799-adb7-3bfa-bc33-010f2f925446.roa
File:                     a75b3799-adb7-3bfa-bc33-010f2f925446.roa (raw, json)
Hash identifier:          EIVMXiZDCajsZ/fMnDRoHepmSbP6W456wKxGhWJ2Mao=
Subject key identifier:   87:B5:18:FD:59:7E:21:AF:EE:61:52:51:88:DB:3F:76:B4:91:DB:95
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846169EC69871315F715C562540
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a75b3799-adb7-3bfa-bc33-010f2f925446.roa
Signing time:             Mon 03 Jun 2024 13:00:36 +0000
ROA not before:           Mon 03 Jun 2024 13:00:36 +0000
ROA not after:            Sun 01 Sep 2024 13:00:36 +0000
asID:                     64238
IP address blocks:        2001:470:b2::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:16:9e:c6:98:71:31:5f:71:5c:56:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  3 13:00:36 2024 GMT
            Not After : Sep  1 13:00:36 2024 GMT
        Subject: CN=d7a2b0f6-ebc1-49df-967f-d28fc6042b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:76:4c:05:78:a5:c0:df:94:b1:fb:cc:7b:
                    82:b1:56:86:6e:d5:77:e8:76:3f:c6:dd:bb:7d:59:
                    99:2f:f5:5a:97:96:17:d2:67:53:a9:e8:0d:8b:92:
                    40:17:1c:c2:61:9d:bd:ce:20:56:c3:ee:6c:ed:f1:
                    87:64:da:fd:a6:21:d2:56:e1:b9:e1:15:3d:c4:3d:
                    7a:87:73:0a:1e:d0:df:7e:46:fb:23:bb:2b:9f:9f:
                    b4:13:82:43:bf:69:cf:db:14:ef:51:7d:ac:1c:90:
                    7e:47:88:ff:c4:17:4e:f6:79:72:10:90:e7:50:db:
                    6a:24:f2:c9:5e:06:3d:21:b3:7a:6c:c7:57:ed:3e:
                    c3:21:93:3f:17:da:c0:ab:df:53:b7:ba:63:e2:d0:
                    9f:69:c9:bc:86:9c:47:69:1d:59:ca:96:f9:27:0d:
                    57:4d:d2:50:2f:38:6c:69:99:d4:f1:97:f1:fa:4f:
                    2a:52:98:4f:a0:18:97:87:23:5c:bb:80:3b:42:40:
                    7e:25:de:82:a0:33:17:6d:d5:70:f7:f0:36:07:3e:
                    d9:6d:aa:30:ec:d4:79:18:28:4f:11:3b:dd:f3:b7:
                    5b:f6:83:13:c4:2c:75:ae:cd:bb:d4:ca:77:98:dc:
                    cf:6d:44:bb:88:d9:ed:52:6f:2a:3d:b4:ee:08:c9:
                    24:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B5:18:FD:59:7E:21:AF:EE:61:52:51:88:DB:3F:76:B4:91:DB:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a75b3799-adb7-3bfa-bc33-010f2f925446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:b2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ae:a9:1d:8c:fa:5f:dd:e7:e6:e0:44:84:39:9a:f2:a9:c7:
         7b:1d:a5:f8:0a:06:5c:a4:9d:14:87:04:e0:13:d2:55:f8:0b:
         2d:70:92:50:20:64:96:52:d5:40:c8:36:61:cf:67:1c:90:33:
         a9:86:51:ac:60:72:11:c4:9d:4c:06:37:a0:b0:30:e5:40:41:
         5f:4f:5f:49:96:ce:e2:d3:8e:13:2b:60:66:62:73:df:62:44:
         95:74:32:ac:a5:77:f1:c5:8f:f5:05:69:2f:48:71:21:3b:ca:
         31:eb:ee:70:79:26:38:8a:ba:d8:d5:e8:b0:10:c2:1a:a2:d4:
         5f:02:71:6d:03:6f:0b:f0:99:74:c4:fc:dc:b8:47:5a:28:99:
         62:c0:5a:43:e0:34:53:76:f3:da:e9:a8:c9:1f:dc:c2:18:af:
         00:10:6d:78:d8:53:2b:05:ba:71:76:e9:41:d7:f6:04:a0:8c:
         3f:5b:2f:9f:14:c3:b2:c2:26:31:cb:07:c0:f2:68:0b:ec:55:
         05:4d:7f:71:24:a3:e6:90:f3:75:ca:ef:12:ea:25:66:31:20:
         18:25:ec:dd:6d:3c:42:b7:00:72:2f:1c:31:a0:70:b1:83:ff:
         70:7f:55:ad:58:49:ac:93:e8:ff:f7:33:e1:b4:d0:cd:1d:95:
         0d:d3:9b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:31:09 2025 by rpki-client