Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ce730aab-f81d-3bd0-8be8-88684eb90d7c.roa
File:                     ce730aab-f81d-3bd0-8be8-88684eb90d7c.roa (raw, json)
Hash identifier:          a/l7g2oYNGz2nnpmmXWYHElnmT3u77o3xY/el76Xkgk=
Subject key identifier:   A0:C3:9A:0F:51:78:F5:95:EF:B6:D1:E9:E8:8B:1E:DC:71:F8:10:D4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858462073270F38467FD4995D0A40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ce730aab-f81d-3bd0-8be8-88684eb90d7c.roa
Signing time:             Fri 07 Jun 2024 01:30:54 +0000
ROA not before:           Fri 07 Jun 2024 01:30:54 +0000
ROA not after:            Thu 05 Sep 2024 01:30:54 +0000
asID:                     200020
IP address blocks:        2001:470:2ef::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:20:73:27:0f:38:46:7f:d4:99:5d:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  7 01:30:54 2024 GMT
            Not After : Sep  5 01:30:54 2024 GMT
        Subject: CN=84a472a3-3950-4d64-b4d7-c1c1697dd6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:19:87:f4:bb:c7:f4:69:a8:8d:bb:f6:61:
                    f5:43:da:1a:b1:de:56:c4:cd:f1:fb:7c:52:31:6e:
                    29:66:35:00:f5:b5:df:b8:b9:34:7b:0b:32:da:6d:
                    c6:b6:63:36:93:c6:06:44:78:59:a4:47:c1:9e:52:
                    4f:87:c9:45:92:b3:92:c0:78:b7:ef:c7:b1:5a:72:
                    ca:45:18:c9:75:ea:3a:8e:84:c9:47:67:b4:44:c4:
                    0f:7d:c8:ab:5a:c0:54:a8:09:65:62:a3:bb:86:e7:
                    06:24:1e:e8:d4:2c:08:a2:e9:ed:38:76:d6:1b:7e:
                    2c:6e:5b:66:94:70:08:0d:da:0d:d3:13:c6:0f:c1:
                    c6:14:6c:00:00:83:95:d7:ad:da:58:fc:ee:bd:51:
                    58:9a:70:d6:c6:93:8e:95:85:d8:e6:58:2d:15:6c:
                    40:e7:cf:d3:e6:95:fd:de:59:a0:11:23:7d:0a:1c:
                    6d:f0:5e:cd:97:c6:67:9b:b2:5f:c6:83:46:a1:19:
                    b7:0b:2e:93:ab:4a:f7:3a:41:e9:2c:a6:b3:66:26:
                    ac:aa:5a:be:56:f6:8e:02:99:59:5e:6b:2b:06:4c:
                    f7:95:62:36:50:aa:15:51:d0:23:6c:30:d3:57:33:
                    c5:a2:36:b3:87:96:36:4b:e2:ce:c2:a9:f7:cd:13:
                    2c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C3:9A:0F:51:78:F5:95:EF:B6:D1:E9:E8:8B:1E:DC:71:F8:10:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ce730aab-f81d-3bd0-8be8-88684eb90d7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2ef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:16:00:98:8c:44:25:eb:1a:82:1c:e0:28:3f:3d:3c:4c:5c:
         e1:d1:fd:94:b7:94:09:ff:5a:46:9a:b3:ff:12:27:1d:cf:34:
         0d:84:ca:d8:f2:cc:3b:f0:3f:4a:b5:5f:19:86:97:53:8e:13:
         62:ed:13:da:e3:27:56:94:dd:8a:94:4f:2a:40:b7:aa:21:b0:
         ca:58:b2:68:ad:6c:c4:4e:85:80:9f:a2:35:7e:1c:5c:03:6f:
         aa:f6:a8:5e:de:5c:dc:2e:76:2c:20:89:41:e1:f5:61:24:d9:
         97:b4:26:9e:7d:c1:71:8f:c7:ef:a0:b9:f8:9e:83:d5:ca:b2:
         27:26:1e:f2:72:96:bf:b7:32:3e:49:be:86:8d:9a:fd:49:d3:
         c4:90:45:69:54:51:e0:c0:ca:61:61:0f:e2:78:ff:3d:74:44:
         fd:a1:92:ca:6d:8b:ed:c2:12:63:dd:31:65:3c:de:78:fd:48:
         f3:af:ab:2a:38:04:dc:a2:43:87:66:91:01:16:9d:cc:e1:4c:
         44:8e:df:46:0a:a0:f1:07:36:85:fd:95:4f:82:ff:8a:99:c0:
         f7:da:91:9f:7b:8d:08:37:06:85:10:bf:92:6b:a1:8f:56:0b:
         96:00:fb:cd:f9:99:41:98:ad:02:18:7b:15:f0:2d:3e:6d:68:
         08:e8:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:12:36 2025 by rpki-client