Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3cec198-bfe2-3502-91cf-acd68dea2900.roa
File:                     d3cec198-bfe2-3502-91cf-acd68dea2900.roa (raw, json)
Hash identifier:          y3/JsPPGDYH7dqwgZKeC4XRA/TWbtcED5i0hgWbh8bc=
Subject key identifier:   5C:39:FD:39:6C:8B:F5:15:0E:7B:F8:9F:32:9E:96:54:C8:47:D9:F1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846169ED254C96B8E3E74A6C900
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3cec198-bfe2-3502-91cf-acd68dea2900.roa
Signing time:             Mon 03 Jun 2024 13:00:36 +0000
ROA not before:           Mon 03 Jun 2024 13:00:36 +0000
ROA not after:            Sun 01 Sep 2024 13:00:36 +0000
asID:                     397601
IP address blocks:        2001:470:25e::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:16:9e:d2:54:c9:6b:8e:3e:74:a6:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  3 13:00:36 2024 GMT
            Not After : Sep  1 13:00:36 2024 GMT
        Subject: CN=2625c4f7-aea4-4c5a-a18e-47534801ba6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:74:16:f9:4b:c1:38:1c:18:72:b4:26:de:98:
                    a9:2f:bc:95:2f:b1:7b:05:53:3c:e8:b6:fa:38:ea:
                    61:ef:ee:3d:ba:f7:53:3a:8f:9c:b3:e0:61:51:41:
                    28:7d:75:8c:c5:f8:78:d4:d7:59:30:51:ca:22:63:
                    cd:56:41:b0:2f:80:5c:ab:f5:56:68:7e:c1:12:e8:
                    e5:e4:cf:9a:8a:b5:da:4b:b5:ae:00:3c:9e:3a:e4:
                    f3:d3:15:ac:9a:a6:3a:f1:ff:d1:5a:82:b4:d7:79:
                    d1:78:72:7d:ca:90:c9:ef:46:f6:69:37:fb:db:ee:
                    89:18:e6:51:c2:9a:f9:44:84:d6:ee:8e:bd:95:55:
                    98:8d:3e:23:12:a2:7d:bc:17:b3:bb:12:36:b4:f4:
                    cb:b6:a0:57:3e:66:b3:fe:59:dd:d9:69:cf:c2:8f:
                    b6:ce:3f:44:02:29:2a:05:58:b2:1e:1f:df:3b:f2:
                    b1:bd:92:e3:f8:ad:1b:d8:41:74:4f:4e:aa:d5:f9:
                    c9:3d:fa:58:f5:bc:b9:2d:60:c8:ee:49:c5:86:9f:
                    d4:35:30:40:c0:fe:84:da:d7:cf:bd:e5:e3:8e:74:
                    10:0c:ae:d6:8e:fa:e5:1a:5b:de:e9:8b:5b:2b:e5:
                    4e:44:96:58:0c:56:a6:a2:6b:49:51:f0:32:58:1d:
                    20:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:39:FD:39:6C:8B:F5:15:0E:7B:F8:9F:32:9E:96:54:C8:47:D9:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d3cec198-bfe2-3502-91cf-acd68dea2900.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:25e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:d6:52:39:68:83:aa:06:90:17:68:58:1d:72:8e:54:33:7a:
         c6:c1:f4:fa:27:b8:57:e6:16:29:4b:3d:0d:cc:79:2d:0b:1c:
         a0:fb:d3:0d:9f:4d:06:1f:4f:42:24:9f:74:6d:36:04:aa:11:
         1b:1c:cf:c6:47:f7:b3:61:d7:cc:00:8b:7f:a7:e2:a2:ac:2b:
         16:01:25:1e:68:66:b6:81:ea:9d:0e:0b:d7:9d:45:69:b0:f8:
         08:07:48:73:59:a8:0f:d8:8d:3a:2d:18:d7:b8:f2:6c:4c:14:
         c5:e9:26:c0:64:a6:e6:de:07:e8:4b:8b:e0:4e:ce:83:dd:a6:
         d2:51:48:47:ea:5c:eb:e2:11:d9:ff:4d:10:da:a8:dc:e7:8d:
         3e:ba:a0:0f:e7:9e:9a:42:a7:68:12:42:45:b0:96:aa:96:8e:
         ad:59:2e:92:32:e6:86:80:7d:c0:ec:31:7a:0e:8d:60:75:70:
         a0:81:24:0a:49:ea:43:0c:e5:83:d5:fe:ce:73:d5:ac:b6:74:
         ed:96:5c:9d:60:44:b5:86:42:1a:6f:6c:55:38:f1:9e:de:a9:
         26:41:51:ae:a3:12:8d:56:1a:fe:f4:a7:db:bc:d2:8f:36:4d:
         d8:0d:31:6b:e0:7a:2e:e0:f6:8d:3c:17:15:d4:d3:72:fd:d4:
         99:32:25:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:47:53 2025 by rpki-client