Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/abd90b9c-3e68-392b-8fdf-5a35e9c85b32.roa
File:                     abd90b9c-3e68-392b-8fdf-5a35e9c85b32.roa (raw, json)
Hash identifier:          HeauwtCq/+ujr/0npzSzMlJqwlgCEESX11ZtfRIgU3k=
Subject key identifier:   1E:50:16:17:61:8A:98:6B:B3:B9:40:B3:63:ED:A8:FF:51:EC:95:D7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858465A773F7A05903EF1ED2E8D40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/abd90b9c-3e68-392b-8fdf-5a35e9c85b32.roa
Signing time:             Thu 27 Jun 2024 20:16:02 +0000
ROA not before:           Thu 27 Jun 2024 20:16:02 +0000
ROA not after:            Wed 25 Sep 2024 20:16:02 +0000
asID:                     142125
IP address blocks:        2001:470:30d::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:5a:77:3f:7a:05:90:3e:f1:ed:2e:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 27 20:16:02 2024 GMT
            Not After : Sep 25 20:16:02 2024 GMT
        Subject: CN=51a3e809-30f9-41d6-abf2-eab9e87ffdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:18:35:1a:2f:eb:4e:31:1d:76:67:9b:a6:f0:
                    78:5b:92:0e:1e:4c:13:0f:11:94:d3:29:3c:7d:07:
                    2b:ef:2c:b4:69:ba:87:a6:6e:8d:de:2c:6e:78:d4:
                    da:c8:fc:e7:68:6d:12:bc:b3:dc:76:9e:eb:e2:5c:
                    aa:69:e3:65:57:94:63:f6:5a:8f:ef:c0:87:65:fb:
                    23:ba:20:ea:94:da:32:8f:6b:1b:6c:53:12:79:8e:
                    0a:10:af:e1:b0:06:8e:03:50:f5:76:e6:6e:cb:cd:
                    8d:d0:b3:8e:b7:e1:6c:51:04:c3:c7:7e:18:2b:de:
                    36:a0:d5:c4:ec:9b:bc:9f:22:03:8a:55:9c:f1:d0:
                    89:33:60:f3:c3:51:58:4f:87:ae:90:04:9b:85:b1:
                    97:d1:90:cf:54:e6:df:39:bb:75:75:1f:5c:26:f1:
                    79:20:c5:c7:5e:ad:12:d5:ad:f0:9b:fd:c7:c8:c3:
                    59:be:c9:32:0b:25:61:4d:21:55:1d:fb:e3:41:0e:
                    9d:96:36:d3:91:a6:1d:d5:7d:85:5d:bc:5f:78:cf:
                    79:01:dd:dc:96:a3:c8:67:a2:08:b9:59:87:b2:a3:
                    a3:5d:8c:54:76:b7:27:fe:a7:a9:9a:c8:1b:51:85:
                    79:d6:cf:2c:8d:a2:cb:38:e8:f5:87:c6:ad:91:33:
                    2f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:50:16:17:61:8A:98:6B:B3:B9:40:B3:63:ED:A8:FF:51:EC:95:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/abd90b9c-3e68-392b-8fdf-5a35e9c85b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:30d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:af:fc:42:dc:f8:a8:3c:c8:d9:39:f2:55:db:12:d2:f5:07:
         9d:e4:7b:ea:f0:17:a4:35:6c:49:4c:78:af:30:7f:84:6e:9f:
         31:ed:81:bb:d4:83:18:11:d7:63:d7:50:0a:3a:74:04:33:e4:
         d6:14:03:4d:71:78:df:b3:18:73:a6:b5:18:1a:3c:38:50:5b:
         fd:1d:a9:88:d5:c9:de:4c:29:d8:58:ce:d0:e5:45:1c:01:03:
         6a:d8:ca:63:97:c4:3b:cb:af:fe:3f:62:93:94:56:bc:6f:7d:
         48:23:0d:32:32:38:88:5a:0b:9d:3b:b2:00:77:93:40:65:9d:
         aa:4a:49:f2:e7:fc:f5:8b:b4:33:a6:d0:c1:29:e6:ab:59:1a:
         a7:1d:ef:48:89:41:0c:f3:7a:bc:e5:9e:75:60:5a:a7:8b:9d:
         e2:d0:f8:89:c2:79:88:cd:f1:4d:56:d0:f1:a8:33:9b:8b:7a:
         85:2c:1c:88:8b:16:4b:95:d3:0c:6d:30:23:7d:88:5a:d0:3f:
         b0:26:ea:a4:09:3c:5b:c4:0b:80:e0:9e:a5:a8:ad:ea:6c:58:
         83:03:0c:ab:c5:17:c0:17:7d:c8:34:da:51:08:2f:7c:21:33:
         61:8f:b5:cb:a8:70:e6:fa:b6:87:8e:ab:ac:6b:f6:fe:c4:6f:
         16:dd:f4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:24:49 2025 by rpki-client