Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e26df730-0557-3d8d-ad5a-18b806ce9f90.roa
File:                     e26df730-0557-3d8d-ad5a-18b806ce9f90.roa (raw, json)
Hash identifier:          NwgzMNwZzvcNeWl/kbmeaav6S1k/mqOSFhRsRu4fjvc=
Subject key identifier:   CF:0C:96:8E:49:18:11:6C:94:93:B8:8C:F9:46:14:E8:BE:16:E3:C2
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584635543F37BA0E98C517BAF380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e26df730-0557-3d8d-ad5a-18b806ce9f90.roa
Signing time:             Fri 14 Jun 2024 13:00:35 +0000
ROA not before:           Fri 14 Jun 2024 13:00:35 +0000
ROA not after:            Thu 12 Sep 2024 13:00:35 +0000
asID:                     41568
IP address blocks:        2001:470:2a1::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:35:54:3f:37:ba:0e:98:c5:17:ba:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 14 13:00:35 2024 GMT
            Not After : Sep 12 13:00:35 2024 GMT
        Subject: CN=9f4f36c5-ba25-41ef-8cf7-35bdd0f24e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c1:6f:c0:f5:70:0d:87:f2:74:96:e8:35:41:
                    1e:b4:96:31:ba:8d:c6:1d:6c:75:7b:ac:54:4d:1e:
                    7a:e5:00:9c:52:48:80:7c:b8:92:17:a6:1b:23:35:
                    b5:a5:74:81:02:ce:db:10:91:4b:58:ac:69:79:5d:
                    5c:54:90:d8:06:67:9e:6b:35:c3:f5:3d:4d:93:6b:
                    ec:14:d5:e2:34:1d:30:14:b6:15:5b:f5:a2:f4:72:
                    f8:50:bb:91:92:46:a0:28:1e:9a:06:f1:6a:28:41:
                    52:1c:47:ef:44:6b:ae:34:33:05:53:03:b1:63:54:
                    53:0e:2c:a7:a8:22:f1:6a:7e:c4:6f:b3:04:22:27:
                    5d:ad:94:dc:ab:17:e5:e8:95:d6:d4:a6:cf:17:3c:
                    2c:28:87:14:e9:90:55:c5:60:96:ad:45:72:ee:37:
                    1f:d5:70:f9:ae:b6:24:c9:d5:19:82:71:4e:06:1e:
                    ea:56:1d:34:35:03:8f:7a:d0:ed:27:f7:68:41:49:
                    d8:7b:55:f6:5e:62:38:f7:25:05:40:fc:00:ca:4e:
                    ff:b3:80:10:3d:d4:0c:4e:11:9b:05:e0:9b:2d:e8:
                    09:8f:75:c5:5a:a2:66:af:7c:d9:41:d3:16:e2:95:
                    2b:f1:0f:06:40:f5:e1:89:64:44:22:2e:07:c0:e8:
                    f6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0C:96:8E:49:18:11:6C:94:93:B8:8C:F9:46:14:E8:BE:16:E3:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e26df730-0557-3d8d-ad5a-18b806ce9f90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2a1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:fc:79:26:be:0c:39:98:b2:de:b8:39:6a:4a:c9:5e:5d:ac:
         4f:70:68:63:13:c1:b4:6d:c6:4e:fb:3d:bd:4c:da:f5:ff:95:
         5c:81:ab:1b:26:9a:52:f3:52:eb:8e:5f:3d:09:0d:4d:f8:f0:
         bd:17:f6:e0:c0:84:90:23:d5:48:87:e8:73:e6:a0:1b:f4:00:
         67:71:fe:ec:3e:9f:66:07:66:08:88:c9:fc:0f:b6:7b:31:72:
         ba:de:91:f7:4b:da:0f:c4:a7:3b:d2:c4:53:9f:a2:a7:1c:39:
         f3:d9:1b:52:1f:d4:ac:d7:5d:62:70:6c:49:73:37:17:32:09:
         cc:53:ca:50:21:e3:23:09:ac:e3:b1:e8:bd:70:b2:97:75:b5:
         73:00:f7:19:5d:29:41:7e:28:6d:cd:ad:37:e0:9e:32:5b:f9:
         cf:a3:68:a3:5a:76:fc:57:51:68:6e:31:7b:28:32:05:41:08:
         b4:ed:6d:d4:b1:7f:6f:88:14:37:d2:72:e7:e6:48:37:bf:09:
         63:43:b3:91:78:c7:5f:e5:8c:e1:c9:29:a9:65:eb:63:fc:8a:
         f7:65:59:fe:06:73:b3:d1:89:2c:c2:23:96:1c:ce:f4:c7:c7:
         cf:41:2d:99:5d:65:1e:28:da:3a:60:0b:ad:2b:ce:e3:ed:1a:
         07:83:5c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:41:48 2025 by rpki-client