Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c627b0e4-7245-3277-b0ff-bb4019a9abc4.roa
File:                     c627b0e4-7245-3277-b0ff-bb4019a9abc4.roa (raw, json)
Hash identifier:          vhWdXIanDI9F03GEa67keGQ+leVskcZQNllTFv4o1jY=
Subject key identifier:   71:87:A9:8B:09:23:24:D1:20:41:7E:49:AB:AA:E6:61:B3:78:F3:5C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846BCC912887B8DFF26E3745900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c627b0e4-7245-3277-b0ff-bb4019a9abc4.roa
Signing time:             Fri 02 Aug 2024 01:30:07 +0000
ROA not before:           Fri 02 Aug 2024 01:30:07 +0000
ROA not after:            Thu 31 Oct 2024 01:30:07 +0000
asID:                     399504
IP address blocks:        2001:470:31a::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:bc:c9:12:88:7b:8d:ff:26:e3:74:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 01:30:07 2024 GMT
            Not After : Oct 31 01:30:07 2024 GMT
        Subject: CN=fe03b5db-8ec3-454b-aba6-c9c86c8bda75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f2:dc:ad:34:be:9a:ea:d0:69:dc:6b:ad:ea:
                    f9:b0:4d:18:44:fd:9f:3a:d1:b2:b0:e1:33:65:c7:
                    e0:56:62:f2:a9:78:9f:bf:c9:dd:1e:02:27:12:88:
                    82:01:a9:c3:30:96:8b:e1:ca:60:e7:a1:8b:94:71:
                    67:2d:de:89:61:10:78:53:21:49:f6:40:70:e2:55:
                    51:65:e0:a0:2a:a9:8d:bf:c8:19:99:eb:cc:0e:68:
                    92:bc:06:6e:7e:8f:6f:7e:ac:ad:11:da:e6:72:b0:
                    15:dc:3d:42:27:13:19:76:49:39:df:58:bf:fe:96:
                    7c:88:66:1a:10:52:f2:1b:23:c8:07:cf:25:3a:03:
                    91:14:1a:9a:8b:64:9f:12:ec:f6:3a:3f:7b:38:0e:
                    54:10:32:a9:18:9a:88:9b:84:ae:94:dc:bd:1c:07:
                    a3:15:3f:51:0b:32:7a:4d:b7:c2:c5:1e:d8:0a:7b:
                    7d:5c:69:30:8f:95:c9:83:b5:66:31:a6:68:cd:3a:
                    71:b6:96:b6:e9:63:1a:32:1f:ec:ee:cf:41:17:e3:
                    5a:49:c7:74:27:9b:e2:02:f4:18:47:bb:aa:36:e8:
                    74:0c:cc:d5:b3:fa:55:17:80:5c:18:fa:59:ea:7f:
                    71:d5:f7:61:a1:a8:02:0d:ef:ea:ad:82:af:fb:72:
                    08:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:87:A9:8B:09:23:24:D1:20:41:7E:49:AB:AA:E6:61:B3:78:F3:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c627b0e4-7245-3277-b0ff-bb4019a9abc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:7c:e5:00:40:ba:68:16:74:09:03:2c:53:1e:be:58:e8:a1:
         9e:b0:19:77:53:fb:1d:7e:f1:63:b8:cb:4e:0e:af:a8:32:73:
         ec:0e:3f:85:71:59:65:5c:24:4e:40:9e:63:72:ec:ad:39:2d:
         72:b0:c3:a1:dc:69:7a:bc:86:67:f4:05:0c:05:1c:60:ea:6b:
         8e:3b:93:81:14:89:af:3c:76:c9:40:00:e4:20:81:a6:bf:a0:
         a1:f1:b3:e5:0b:3c:20:dc:57:f8:7d:d4:a7:58:8d:a2:95:68:
         de:39:70:04:94:42:52:85:89:fa:dc:08:d9:57:80:6a:71:6e:
         0d:ad:1e:76:81:f4:cb:3f:22:08:9d:de:71:2b:c5:88:87:ae:
         5a:ea:39:9a:a6:b8:1e:48:a5:bc:b0:b0:2f:d9:bc:89:ef:a9:
         22:81:75:0b:6c:da:5e:bf:73:b9:5d:2c:2d:44:4a:96:d9:bf:
         67:c6:80:68:6d:ce:8d:3c:d0:fc:d0:01:f0:ac:dd:5a:09:9b:
         48:5c:3d:f9:f7:4e:04:dd:9d:a9:a6:30:9a:cb:1b:3e:bb:cd:
         87:51:ab:38:67:1b:95:93:00:1a:7d:8d:f7:41:f7:7b:a4:a3:
         41:5b:cd:ff:08:4e:cb:c7:92:c0:be:68:2c:76:61:3d:f3:5a:
         85:db:26:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 19 15:28:03 2025 by rpki-client