Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/beaae36f-c2f7-3600-84b0-ae62dd87b5ee.roa
File:                     beaae36f-c2f7-3600-84b0-ae62dd87b5ee.roa (raw, json)
Hash identifier:          v1bNTkoEmVfpqACbC2LSYxuoYwAfqCGF0VphvP9ihF8=
Subject key identifier:   76:0F:D9:4B:71:02:CE:4E:58:4D:E3:B1:38:29:D6:BE:1F:72:AB:DB
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846C7F3F26A04BC8CFD5A6A1300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/beaae36f-c2f7-3600-84b0-ae62dd87b5ee.roa
Signing time:             Tue 06 Aug 2024 01:30:24 +0000
ROA not before:           Tue 06 Aug 2024 01:30:24 +0000
ROA not after:            Mon 04 Nov 2024 02:30:24 +0000
asID:                     399503
IP address blocks:        2001:470:353::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c7:f3:f2:6a:04:bc:8c:fd:5a:6a:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  6 01:30:24 2024 GMT
            Not After : Nov  4 02:30:24 2024 GMT
        Subject: CN=940fe301-99fe-4055-8073-9c271386a68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:2b:0a:5a:b3:81:95:30:a1:78:71:94:61:
                    84:d1:06:a7:61:f6:42:4f:6b:ac:85:30:c7:f5:b1:
                    6d:e3:e8:82:92:d7:78:09:4e:0e:52:e2:e0:0a:86:
                    13:a8:af:86:84:a3:00:a6:2d:61:aa:6a:93:e1:e9:
                    0f:cd:75:cd:cc:5c:45:ea:cb:27:81:c4:89:91:ba:
                    83:71:f9:4c:fc:c1:a0:f3:df:39:77:51:cf:a5:79:
                    9c:19:c6:53:51:c6:7a:ce:ff:54:bc:2d:91:e1:e6:
                    be:5f:f2:6c:69:6d:c7:9a:a9:2f:f6:24:74:b0:1b:
                    48:63:31:16:fd:51:e0:d2:7e:7c:85:16:f4:b1:e6:
                    8e:15:08:8d:98:6f:a5:b2:f9:5c:25:af:32:ee:5a:
                    2e:80:3b:46:e8:3b:3c:6c:eb:23:40:e7:c4:40:ef:
                    c2:e0:7c:41:d1:a1:30:12:3d:3c:a7:b2:1a:7d:13:
                    a7:5d:e8:78:03:c0:73:65:7e:ec:d6:d0:7c:c8:9d:
                    62:c0:66:ec:44:8d:86:57:90:13:f9:6d:05:b7:aa:
                    87:ca:2c:6b:c0:da:09:1b:f8:be:7f:2d:e6:78:af:
                    97:88:12:11:e8:e1:cf:8d:6d:5a:f6:0c:e2:55:ff:
                    d4:b1:55:f1:63:45:81:70:aa:07:f4:60:48:5a:26:
                    69:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0F:D9:4B:71:02:CE:4E:58:4D:E3:B1:38:29:D6:BE:1F:72:AB:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/beaae36f-c2f7-3600-84b0-ae62dd87b5ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:353::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:d6:f6:e1:c3:d0:69:21:79:ca:54:fe:bf:a1:8a:3e:95:9c:
         41:75:fa:0f:cb:45:cc:49:f7:51:5e:83:cd:38:8a:57:a3:ee:
         c7:4f:bc:0a:5f:9f:db:02:2a:48:98:00:50:58:f8:ed:a4:92:
         ae:d2:54:07:ec:05:42:c8:c8:2f:8d:da:d1:9e:38:a0:d6:9d:
         e8:32:3a:12:33:b8:1a:d9:18:09:03:33:2a:8b:2b:18:e5:90:
         11:9b:e3:d3:11:04:14:bf:25:21:f1:b4:d9:0c:09:43:0a:41:
         3f:d2:b9:6b:af:e3:6c:2e:c2:e8:03:5e:96:88:d4:1e:f3:69:
         76:e8:e5:b8:09:4e:eb:78:ea:03:6b:2d:8a:c5:51:72:dd:fd:
         b6:24:bd:6b:d4:69:6d:70:19:c2:1f:e8:df:64:15:ff:65:4c:
         37:64:fe:57:9d:57:be:2e:52:e2:5d:3a:5e:aa:55:8d:4b:c3:
         1f:2d:4d:b4:c7:0c:55:18:4d:e7:0b:2c:98:2c:a0:1c:61:67:
         f2:f2:17:d1:8d:c8:56:e2:63:2e:72:3d:bd:a9:bc:89:d6:68:
         73:18:b6:63:ae:b1:11:95:ab:53:ac:93:ad:3f:b5:d4:e7:a7:
         c6:60:33:54:45:e8:32:9e:e1:3b:20:7e:99:6f:80:e3:fb:92:
         bb:47:85:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:07:25 2025 by rpki-client