Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ab8bd90a-dd43-3a23-8f24-1f97b3eaa28b.roa
File:                     ab8bd90a-dd43-3a23-8f24-1f97b3eaa28b.roa (raw, json)
Hash identifier:          HOxnO+7nq9jX5DFNXKGOmr7A9Bo0KAtWrueMb60h4Ro=
Subject key identifier:   BE:53:B7:57:DF:27:F8:F8:6E:78:C4:8E:6F:EC:56:36:C0:32:32:98
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285847C8E88FFD22AA977FC8870840
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ab8bd90a-dd43-3a23-8f24-1f97b3eaa28b.roa
Signing time:             Wed 06 Nov 2024 02:30:12 +0000
ROA not before:           Wed 06 Nov 2024 02:30:12 +0000
ROA not after:            Tue 04 Feb 2025 02:30:12 +0000
asID:                     215605
IP address blocks:        2001:470:1eb::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:e8:8f:fd:22:aa:97:7f:c8:87:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov  6 02:30:12 2024 GMT
            Not After : Feb  4 02:30:12 2025 GMT
        Subject: CN=d2f18ea2-5bba-4048-beb0-7fd1da3c1c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b8:6a:3d:ab:36:07:9c:2f:38:54:e0:21:ef:
                    15:5c:99:ef:8b:2c:77:fa:45:e7:1c:c4:ec:03:a5:
                    7f:d1:22:53:b6:08:15:e2:48:ac:bf:f5:df:0f:5e:
                    22:f2:9d:73:72:b7:bd:b6:4b:d5:68:71:56:83:90:
                    c2:94:4a:36:6e:f8:f1:69:f9:db:86:46:aa:b5:56:
                    0d:68:e0:ed:24:24:31:76:5a:1f:e5:24:a1:41:fd:
                    61:70:a4:85:4c:cd:c0:9d:81:c8:82:5a:4e:52:1b:
                    85:7b:3d:ae:e8:ab:6a:b5:b3:fe:90:65:94:d5:38:
                    12:7b:17:bf:02:5a:8a:29:60:ba:c3:75:a6:f3:8e:
                    f8:db:ba:7c:b6:9c:ae:06:13:a5:ec:f7:81:d2:03:
                    b6:ec:76:f7:8d:9f:67:22:af:c3:38:32:01:16:1c:
                    44:c3:78:b2:e7:76:7f:15:51:c8:5b:df:2a:dd:b0:
                    d5:80:5a:56:d1:ee:e0:c5:ca:57:c5:90:3e:43:8e:
                    fc:7d:08:9e:15:3a:f5:48:ea:67:bd:c1:73:5b:36:
                    39:ac:43:af:61:17:7d:cd:d2:b6:df:6e:d6:58:42:
                    dd:b8:bd:95:f2:c6:1a:d7:a2:ba:a7:af:11:3b:91:
                    df:5d:b4:37:05:5a:28:79:7e:5b:1e:c6:d9:65:fb:
                    07:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:53:B7:57:DF:27:F8:F8:6E:78:C4:8E:6F:EC:56:36:C0:32:32:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ab8bd90a-dd43-3a23-8f24-1f97b3eaa28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:da:40:6d:25:88:84:ef:cc:48:4c:c4:2e:34:1a:95:8f:38:
         60:e2:a5:60:e4:97:74:4e:cb:8a:c1:c7:76:d7:ca:fd:ae:78:
         30:b3:1e:d5:b8:24:c5:b4:e8:8f:93:55:6a:50:fb:e2:d3:70:
         14:05:16:40:2c:fd:ac:3b:b1:9c:5b:5a:d5:79:22:03:8c:64:
         9b:17:e7:5c:9a:9f:e1:6c:d0:69:7c:51:5b:4e:bc:e6:81:b3:
         67:b1:da:4f:3a:2c:c8:bc:c0:40:7a:cf:d8:97:74:e0:d9:a5:
         75:a0:5d:9e:66:2d:72:a5:00:cb:d7:b1:a6:0b:35:be:e2:94:
         8a:5d:db:8d:9a:86:74:9c:c4:9f:1f:06:ec:7c:7c:b1:b7:1f:
         94:a4:f0:fe:4e:0b:d5:82:7c:ca:ce:a4:00:60:a7:1a:35:b0:
         51:d8:08:c3:8e:5e:f0:e9:fc:be:c8:73:0a:6b:c6:dc:c2:5f:
         19:c3:f8:06:93:7e:26:e2:da:50:22:40:1c:f9:41:2c:43:f3:
         96:20:2b:2d:04:30:a7:cd:89:7a:d9:ce:ce:df:fb:96:97:32:
         18:35:8c:3d:d2:40:09:39:69:87:10:9b:e7:d4:b0:46:d2:58:
         35:69:43:41:0d:74:a3:e8:35:e5:98:8a:c6:44:7c:d6:2e:e4:
         bc:d3:c0:92
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEfI6I/9IqqXf8iHCEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTEwNjAyMzAxMloXDTI1MDIwNDAyMzAxMlowLzEtMCsGA1UEAxMk
ZDJmMThlYTItNWJiYS00MDQ4LWJlYjAtN2ZkMWRhM2MxYzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibhqPas2B5wvOFTgIe8VXJnviyx3+kXnHMTs
A6V/0SJTtggV4kisv/XfD14i8p1zcre9tkvVaHFWg5DClEo2bvjxafnbhkaqtVYN
aODtJCQxdlof5SShQf1hcKSFTM3AnYHIglpOUhuFez2u6KtqtbP+kGWU1TgSexe/
AlqKKWC6w3Wm847427p8tpyuBhOl7PeB0gO27Hb3jZ9nIq/DODIBFhxEw3iy53Z/
FVHIW98q3bDVgFpW0e7gxcpXxZA+Q478fQieFTr1SOpnvcFzWzY5rEOvYRd9zdK2
327WWELduL2V8sYa16K6p68RO5HfXbQ3BVooeX5bHsbZZfsHiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL5Tt1ffJ/j4bnjEjm/sVjbAMjKYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvYWI4YmQ5MGEtZGQ0My0z
YTIzLThmMjQtMWY5N2IzZWFhMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALfaQG0liITvzEhMxC40GpWPOGDipWDkl3ROy4rBx3bXyv2ueDCz
HtW4JMW06I+TVWpQ++LTcBQFFkAs/aw7sZxbWtV5IgOMZJsX51yan+Fs0Gl8UVtO
vOaBs2ex2k86LMi8wEB6z9iXdODZpXWgXZ5mLXKlAMvXsaYLNb7ilIpd242ahnSc
xJ8fBux8fLG3H5Sk8P5OC9WCfMrOpABgpxo1sFHYCMOOXvDp/L7IcwprxtzCXxnD
+AaTfibi2lAiQBz5QSxD85YgKy0EMKfNiXrZzs7f+5aXMhg1jD3SQAk5aYcQm+fU
sEbSWDVpQ0ENdKPoNeWYisZEfNYu5LzTwJI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:37:24 2025 by rpki-client