Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a99b0bcf-9619-3e96-87bc-993d04af4338.roa
File:                     a99b0bcf-9619-3e96-87bc-993d04af4338.roa (raw, json)
Hash identifier:          OcSiJbUBZ6/FuZgX2xbS+ZeItObQJJIdqoF+3fTieps=
Subject key identifier:   F9:9B:A2:E1:67:FB:73:3D:AB:37:43:6F:27:BE:7F:23:92:78:60:6D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584604793E39421719632FA96D00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a99b0bcf-9619-3e96-87bc-993d04af4338.roa
Signing time:             Tue 28 May 2024 01:00:25 +0000
ROA not before:           Tue 28 May 2024 01:00:25 +0000
ROA not after:            Mon 26 Aug 2024 01:00:25 +0000
asID:                     149448
IP address blocks:        2001:470:1c6::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:04:79:3e:39:42:17:19:63:2f:a9:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 28 01:00:25 2024 GMT
            Not After : Aug 26 01:00:25 2024 GMT
        Subject: CN=b0abc7c1-ab26-49b5-bc6f-6dd4edfee807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8a:ab:e1:2b:34:ce:dc:67:53:58:b3:4d:f2:
                    2c:ad:31:3c:b5:59:26:f7:04:c2:4d:11:c3:06:06:
                    0e:2f:12:ad:bb:59:c8:f3:0c:e0:33:6b:b6:cd:56:
                    07:06:28:cc:f9:2f:ee:7b:80:4d:71:86:b0:60:2c:
                    94:6f:ec:42:fa:5f:22:43:39:b6:87:ab:f2:4f:b8:
                    33:d5:25:00:b9:bb:18:24:18:9d:8c:6e:a2:d2:04:
                    4d:16:68:ab:c9:d5:77:1e:e0:76:5a:34:e8:f8:cf:
                    f9:d9:91:74:70:30:8c:bb:31:17:cf:12:65:e2:a9:
                    10:89:29:6a:96:50:78:ee:fc:93:e6:16:b7:1e:6a:
                    fe:75:3b:9f:30:3b:89:3f:c6:80:35:be:c0:7b:37:
                    14:27:87:a0:ae:15:e7:8d:26:16:38:f0:f3:31:8b:
                    88:6a:53:1b:b7:d2:d4:e5:10:f1:68:5a:b1:69:83:
                    b5:2a:34:1f:6d:8e:4e:45:5f:b1:eb:d4:91:5c:ba:
                    9f:0e:cd:6c:d6:03:f1:1a:3c:ee:fc:14:81:d8:5c:
                    eb:29:77:ed:4b:e1:8c:54:71:bc:c3:38:41:c2:cc:
                    0d:e1:13:c4:06:12:6c:f6:b6:56:fe:52:dc:bb:8f:
                    77:13:6f:a3:98:d2:97:e6:d8:c1:9c:30:0e:15:26:
                    a7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9B:A2:E1:67:FB:73:3D:AB:37:43:6F:27:BE:7F:23:92:78:60:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a99b0bcf-9619-3e96-87bc-993d04af4338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1c6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:54:cd:7b:10:99:e0:59:1f:ed:0e:4f:df:0d:82:3f:ac:
         46:d0:cd:8f:54:ae:84:b3:dc:64:0f:5f:5b:de:ff:5c:16:1e:
         77:6f:52:d1:7e:78:97:76:66:5d:bb:00:44:a7:ef:0b:84:b1:
         87:72:69:1a:fe:02:d5:26:f7:bb:1c:1a:19:dc:cd:c0:b4:08:
         cc:61:1a:ea:3e:21:0d:46:08:39:7d:9d:27:b7:f9:e0:6e:95:
         f1:1e:c9:05:36:7c:2d:74:5e:a3:af:94:db:7d:61:90:20:8c:
         55:65:71:b8:8b:a1:d3:1d:27:08:eb:96:dc:58:82:dd:92:9b:
         fd:bc:57:58:37:f5:fc:d5:ca:ab:c0:6f:2f:01:2e:d1:f1:1b:
         6a:6b:15:6f:c3:1b:6e:37:84:14:7f:b8:04:bc:d5:5c:26:8a:
         46:48:c6:bd:24:b6:65:4c:ea:e5:63:29:4e:e5:14:68:ed:23:
         f1:70:b6:e1:b4:2d:f3:d5:1e:dd:27:3f:a6:4b:68:da:57:07:
         e8:b5:20:be:27:d7:3d:85:be:8a:ab:a3:43:fc:84:4e:a0:9d:
         f4:8b:5f:3b:80:6c:ea:54:9e:c0:a2:24:d1:5f:bd:1e:4f:6b:
         7b:54:37:40:bd:ea:56:a1:1a:7a:c0:1d:c1:fd:38:ac:ad:d7:
         aa:54:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:02:32 2025 by rpki-client