Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6fbe1a6-7bb3-3ae8-85bf-98c2e9df0647.roa
File:                     b6fbe1a6-7bb3-3ae8-85bf-98c2e9df0647.roa (raw, json)
Hash identifier:          Twe6d74hRAVjo+8WuNlzivKNW+fyJvYMrGYekXtp2jg=
Subject key identifier:   86:18:F3:CF:A4:A1:60:B5:91:AD:6F:86:0A:1D:66:44:A5:E2:66:AB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846C7F3D59DF5B50C5B6169F100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6fbe1a6-7bb3-3ae8-85bf-98c2e9df0647.roa
Signing time:             Tue 06 Aug 2024 01:30:10 +0000
ROA not before:           Tue 06 Aug 2024 01:30:10 +0000
ROA not after:            Mon 04 Nov 2024 02:30:10 +0000
asID:                     137329
IP address blocks:        2001:470:353::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c7:f3:d5:9d:f5:b5:0c:5b:61:69:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  6 01:30:10 2024 GMT
            Not After : Nov  4 02:30:10 2024 GMT
        Subject: CN=167dc0b8-7d4c-4bd2-bcfa-92ad7737f31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:82:f0:40:97:44:33:5e:ec:d3:2e:f5:f8:
                    26:a8:ad:27:f2:01:44:9b:0b:bf:6b:e0:5a:68:f8:
                    08:8f:80:04:13:22:18:e3:62:36:3a:e0:b2:dd:7d:
                    34:0d:5f:63:fb:48:3d:83:e3:ec:ac:fc:85:73:4f:
                    2c:4a:ea:b8:1e:6a:62:d2:0c:e4:1d:3e:46:2e:b6:
                    35:ee:51:53:08:f1:7c:20:79:42:04:ee:8f:a0:08:
                    76:d1:8d:44:ff:18:16:49:1e:89:0c:72:78:1a:4f:
                    5c:a8:96:8d:15:7c:08:c8:7a:36:79:7b:23:df:9a:
                    95:da:da:00:55:5d:1a:6f:25:fb:5a:4b:05:a8:72:
                    bd:34:d4:19:d3:81:72:7d:91:e9:bd:87:e9:a9:b1:
                    59:38:91:52:18:89:e7:ed:5f:af:5f:0e:ac:07:95:
                    81:85:3c:d8:fa:b7:96:fc:ea:23:d0:5a:19:60:c3:
                    3d:4e:46:07:b1:41:3e:d5:3d:78:0a:fc:f3:01:bb:
                    9a:9e:11:b3:4a:15:fc:10:cb:09:3b:79:e3:f1:15:
                    21:a3:e8:73:c3:0d:9c:19:31:44:b5:28:6a:57:8e:
                    84:78:07:21:73:42:96:a6:0a:2c:98:e7:e9:9b:60:
                    e6:24:c8:13:ee:c1:44:60:20:50:bc:4c:aa:fc:72:
                    10:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:18:F3:CF:A4:A1:60:B5:91:AD:6F:86:0A:1D:66:44:A5:E2:66:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b6fbe1a6-7bb3-3ae8-85bf-98c2e9df0647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:353::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:b5:6a:e0:99:2f:7e:ef:ca:06:2b:04:dd:5e:00:b7:32:be:
         62:43:c0:b5:d7:30:6c:4c:d6:69:79:a2:e8:7c:67:40:dd:9d:
         cc:03:1f:d0:2e:70:00:65:97:69:d4:8e:15:75:bf:d0:77:e3:
         6a:18:f0:24:02:f6:9d:52:20:1a:cd:9b:1c:9d:a2:ba:28:01:
         77:13:93:10:e0:b0:90:8d:e4:bf:05:4a:ae:7e:39:cb:f2:b9:
         66:1f:56:ee:72:a7:d7:1a:6c:e1:a0:f9:9a:bf:b1:9b:8f:ab:
         dc:60:1d:3f:30:cd:26:0c:30:a3:e7:14:51:88:3e:26:a0:3b:
         db:59:20:12:f5:49:83:b8:3c:93:77:3a:f0:76:17:07:c7:e1:
         23:6b:e3:b5:6d:90:2d:d3:4a:99:91:54:0d:4a:fb:d8:83:96:
         92:9d:c6:77:8c:a4:29:37:16:2f:b9:56:e9:4e:fd:95:c5:cc:
         50:06:9e:88:d2:70:fb:91:eb:6c:eb:75:53:4b:b1:28:73:b0:
         8f:76:5a:c8:2a:4c:7b:2b:b3:8e:f5:f8:a3:d0:49:55:b1:ec:
         95:76:d7:44:05:36:56:90:af:ce:e0:d2:af:6f:6b:d3:a9:1c:
         20:f8:5b:f7:5a:85:82:4f:0f:c3:a0:a2:30:94:0c:bd:cc:41:
         c8:c4:89:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:37:03 2025 by rpki-client