Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b113711e-7c6a-397f-bacd-b7b68badcc14.roa
File:                     b113711e-7c6a-397f-bacd-b7b68badcc14.roa (raw, json)
Hash identifier:          uyJEL0KAwFgl/c3AhqkgP1Gr6VkyOwAMZKCj/ySRIwM=
Subject key identifier:   04:2F:51:66:93:F0:6F:90:E7:4E:0B:78:2A:06:71:09:47:CA:32:76
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858464E746708356D3C79EE8AF6A0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b113711e-7c6a-397f-bacd-b7b68badcc14.roa
Signing time:             Sun 23 Jun 2024 13:00:35 +0000
ROA not before:           Sun 23 Jun 2024 13:00:35 +0000
ROA not after:            Sat 21 Sep 2024 13:00:35 +0000
asID:                     32575
IP address blocks:        2001:470:26f::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:4e:74:67:08:35:6d:3c:79:ee:8a:f6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 23 13:00:35 2024 GMT
            Not After : Sep 21 13:00:35 2024 GMT
        Subject: CN=905fedbe-d945-4833-9f69-a28c31f4d378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:bd:17:04:ff:b2:d9:cb:77:c6:fd:0f:f0:
                    a5:43:c4:6f:9f:e6:92:bd:5c:6f:e6:92:e1:90:04:
                    e9:f9:6f:c4:1a:63:f7:b6:8d:c0:fa:10:e3:f5:1f:
                    17:15:02:44:71:ec:30:bd:45:aa:01:5a:2b:1b:13:
                    3d:7c:5d:67:d0:b0:94:d5:6c:da:27:00:64:b1:f2:
                    9a:02:14:76:49:cc:08:e8:66:61:7d:64:f0:36:c6:
                    32:6e:5c:2b:0a:2a:5d:27:ab:25:49:de:f8:f2:90:
                    8d:2a:a5:b5:ed:8f:45:da:3d:97:41:bf:0e:af:1e:
                    8e:bb:3d:0e:af:e1:c3:f6:2e:6b:72:9a:b1:29:eb:
                    ed:5c:84:8d:81:c1:07:c9:f8:60:ea:39:9d:bf:57:
                    20:0d:d0:2c:ee:b2:37:42:d7:1a:c3:fc:18:bd:36:
                    ac:b1:48:25:31:a4:69:20:57:95:79:bb:8f:75:c3:
                    d1:d5:8f:fa:29:bc:23:b3:d3:10:0c:ad:a7:b8:78:
                    44:5c:91:a4:9f:22:5e:23:49:6a:ca:9e:c3:c4:9c:
                    9a:5a:7a:2c:64:e4:3c:59:d0:aa:4d:4f:4f:9d:52:
                    f4:ba:c7:60:f4:3e:8b:bd:16:35:bf:42:08:4b:0b:
                    60:52:83:c0:e2:b5:3a:bc:2c:6d:66:bf:82:c9:bf:
                    6f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2F:51:66:93:F0:6F:90:E7:4E:0B:78:2A:06:71:09:47:CA:32:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b113711e-7c6a-397f-bacd-b7b68badcc14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:26f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:0a:b9:c2:d5:10:a3:2c:36:0e:3e:4b:2e:ae:64:44:b1:2d:
         bf:ea:42:7a:b9:33:d2:71:50:56:75:c8:26:18:0e:75:ad:c3:
         04:f9:94:8a:d5:ea:41:2f:a1:72:40:cd:6e:ed:04:7a:6e:30:
         d7:29:fe:b1:fc:a9:0e:57:d9:3b:20:e9:98:61:0b:4b:85:f8:
         f3:ec:58:f1:71:39:2c:d7:5b:49:c0:ab:48:a7:a5:97:bc:ec:
         b9:d3:ea:bc:5e:f3:af:44:e5:07:3b:d6:40:81:41:a0:bf:98:
         f4:cf:2c:0f:9c:8f:3a:03:f9:cf:83:47:82:e2:ce:4b:7e:1d:
         27:22:34:ad:01:4f:64:e8:05:2d:c1:68:00:21:5e:ec:c3:64:
         1d:c6:a2:08:6d:98:12:64:96:b4:19:85:f5:9e:ea:f6:10:89:
         ad:5e:d5:4e:a8:1f:90:59:02:2f:7e:d4:0d:2f:df:f0:6c:63:
         8a:fc:28:da:fc:45:f5:28:41:9e:44:7f:a7:3a:a9:3f:26:82:
         f6:85:56:36:68:a2:8a:1f:cb:ac:9d:ef:5e:96:8b:3a:95:e5:
         56:09:ad:05:c8:7a:77:65:20:e6:27:9f:b4:d1:a8:1d:80:a7:
         16:04:af:d1:b7:67:e0:63:0d:ae:b1:c3:8d:46:53:ce:15:5e:
         06:21:e9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:46:47 2025 by rpki-client