Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cba0e79a-e92e-3c4e-9cee-aadac5c8c19e.roa
File:                     cba0e79a-e92e-3c4e-9cee-aadac5c8c19e.roa (raw, json)
Hash identifier:          8G0ZFXhEyJzgyaSH+wrNt28C4dmrBtXG6aGHoV/93aU=
Subject key identifier:   A9:AD:F6:5A:5B:FB:2B:85:BC:6A:EB:E9:6B:29:25:B3:7E:C0:19:4F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846BCC90E59D31DBA5297EA6F40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cba0e79a-e92e-3c4e-9cee-aadac5c8c19e.roa
Signing time:             Fri 02 Aug 2024 01:30:05 +0000
ROA not before:           Fri 02 Aug 2024 01:30:05 +0000
ROA not after:            Thu 31 Oct 2024 01:30:05 +0000
asID:                     399504
IP address blocks:        2001:470:230::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:bc:c9:0e:59:d3:1d:ba:52:97:ea:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 01:30:05 2024 GMT
            Not After : Oct 31 01:30:05 2024 GMT
        Subject: CN=4dffbce0-d238-4749-abdf-d2d0905c390f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:21:20:a3:dc:54:84:ef:33:fb:c4:9b:5a:
                    f0:c3:59:82:a1:15:9d:ba:40:44:5d:ca:bb:9f:2d:
                    cf:b4:41:2f:92:17:b4:7c:03:0f:6d:1a:f9:2d:c9:
                    a7:7c:4d:53:e5:7a:cf:27:cc:52:f5:7a:38:a0:26:
                    b5:7a:92:60:34:46:d0:84:17:51:1a:3d:26:c0:c7:
                    cc:10:47:82:db:7c:fc:0b:bd:d0:ba:4b:f9:3a:54:
                    1f:07:7f:28:4d:9e:6f:ce:eb:72:84:2d:e4:b8:b4:
                    a9:fc:bf:cc:55:31:c7:cb:99:6f:07:2e:b6:d1:51:
                    cf:a8:e6:93:10:a9:79:c9:62:17:35:d1:8e:af:82:
                    8b:e5:46:df:03:b3:ce:91:34:34:2b:23:40:e8:df:
                    04:38:bc:9f:eb:1f:09:21:be:e2:b4:6a:3a:5e:e2:
                    21:bb:aa:8b:50:98:b4:2c:d4:d3:37:d1:5b:ca:f2:
                    ae:78:8f:34:be:30:b6:be:5c:ca:1d:d6:1e:48:86:
                    0b:8f:10:4d:ce:af:a3:a5:70:45:f1:ad:a1:0f:dc:
                    73:29:e3:ae:42:0f:b2:f0:66:5d:e0:88:8d:4e:50:
                    11:1a:19:1f:17:a4:24:8c:e3:95:49:ee:b9:ca:40:
                    50:4f:b8:91:f6:4a:cc:5e:31:53:0c:a6:7c:e0:b8:
                    88:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AD:F6:5A:5B:FB:2B:85:BC:6A:EB:E9:6B:29:25:B3:7E:C0:19:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/cba0e79a-e92e-3c4e-9cee-aadac5c8c19e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:230::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a7:6f:29:03:b0:91:31:f0:32:01:9c:f2:18:cb:29:51:60:
         75:1d:d1:a5:d4:53:6e:49:95:2e:a3:2e:21:c4:29:df:4b:64:
         fc:8a:2c:ea:a1:ff:04:ed:d7:b8:d4:ca:05:8b:49:57:c8:c8:
         ea:cc:b2:8e:79:75:9c:14:19:81:e6:46:02:cb:5a:1b:d0:22:
         df:5d:e2:d2:6f:85:f5:84:af:3f:fd:1c:1a:7a:bf:18:44:04:
         97:a0:b8:1b:20:e4:2f:b7:4d:c8:09:57:1f:03:8d:b2:b4:04:
         5a:9b:07:3f:3b:d9:3b:20:24:35:6d:1d:b8:ad:fa:b9:69:1e:
         fc:97:0e:fa:8f:fd:32:a4:64:f9:8e:39:7b:fa:00:06:63:cd:
         da:e7:a0:74:83:f8:27:1d:04:5f:9d:73:9d:f6:07:8e:ef:7f:
         60:55:74:74:d2:9b:7c:5d:70:ce:54:25:10:f9:81:84:66:70:
         d7:e9:d6:21:79:50:19:b0:02:e2:ec:e8:c5:12:6d:1a:dc:5b:
         e4:f7:f4:d3:f9:34:2e:46:8a:91:9c:ef:bd:15:60:ee:0b:08:
         ad:56:59:5c:85:9c:5d:dd:87:9d:af:47:a8:ce:2a:a9:9d:2d:
         57:2d:47:69:05:0f:be:bf:bf:17:b6:f0:2d:48:c8:cb:c7:b0:
         37:41:c4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:44:42 2025 by rpki-client