Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3b4ae5f-56db-32e3-8e0c-cdf498cdaaa6.roa
File:                     e3b4ae5f-56db-32e3-8e0c-cdf498cdaaa6.roa (raw, json)
Hash identifier:          mnTZKDBCI8fU+kihzTdjtYx05Tbacbi22LHIvXIPLP0=
Subject key identifier:   8E:5F:FF:17:3C:A5:0A:79:DF:73:FC:BC:D2:18:F4:17:57:20:57:55
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D0195BC0C1A269D14DB970
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3b4ae5f-56db-32e3-8e0c-cdf498cdaaa6.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     1426
IP address blocks:        2001:470:21f::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:19:5b:c0:c1:a2:69:d1:4d:b9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=995aeb5b-c4fb-4c7b-a318-e485dbbb9753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1b:08:90:e2:55:7e:3b:d4:b7:7d:12:b5:3e:
                    e4:ae:e2:d1:0f:cb:8c:78:01:0d:e8:62:73:8f:85:
                    19:35:0d:ab:7f:cc:11:7b:0c:65:22:9f:3b:11:9b:
                    61:25:38:fb:d2:02:8e:e0:a4:45:39:6a:d2:44:ac:
                    22:da:dc:f8:28:e0:c4:88:1f:a4:3e:1b:d3:82:d2:
                    07:29:b0:29:83:92:3f:51:0c:5f:7a:a8:ca:4f:13:
                    ed:a5:6d:82:b1:d8:e7:cc:6c:22:f4:dd:26:aa:2e:
                    19:d3:4d:a2:e7:b2:7e:42:dd:c4:1e:9e:7d:40:ad:
                    23:8f:cc:d6:d9:83:9b:b8:5c:23:d2:7c:93:3d:f3:
                    4a:a5:3e:ce:f7:4e:64:7d:0f:b2:20:f3:6a:2d:ef:
                    df:b5:11:0d:56:92:39:46:15:c1:86:c6:50:05:5b:
                    50:9d:2c:4d:78:52:ab:b1:7d:e9:aa:25:7d:e4:6a:
                    e2:c6:73:07:f6:e3:f0:22:f3:c5:5d:a3:48:54:66:
                    53:60:80:d4:4b:ae:21:0f:43:8f:39:cf:1a:56:7a:
                    62:08:25:fe:0d:ed:80:64:49:89:c4:c5:ba:95:5c:
                    ed:66:a9:61:ce:db:59:1d:bd:2c:1f:c8:aa:fe:e5:
                    a8:ce:6c:e8:ff:28:31:06:a6:10:62:78:f0:58:ec:
                    18:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5F:FF:17:3C:A5:0A:79:DF:73:FC:BC:D2:18:F4:17:57:20:57:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3b4ae5f-56db-32e3-8e0c-cdf498cdaaa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:21f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:18:93:eb:62:f3:35:07:2d:0b:34:8b:dc:b3:59:6b:ba:a4:
         fd:4a:4b:80:51:d4:b0:f2:97:5c:a8:f0:65:30:a9:8a:c2:d0:
         b6:fa:ce:a0:ce:6e:11:f5:bc:28:84:09:b8:c4:44:b8:3d:95:
         4d:e7:aa:18:ef:2e:a7:ef:9d:8d:e4:e2:9c:aa:9e:05:64:c9:
         1b:89:1c:00:bb:8a:fe:dd:10:f5:12:3a:70:00:61:2b:0a:bc:
         79:8c:2c:6d:54:8c:33:56:0e:aa:c1:d9:cd:a3:7f:87:99:a5:
         4c:5f:9e:a5:c0:de:42:cc:01:b7:85:9c:29:b4:22:d9:2c:9a:
         5e:fd:4d:4b:ed:de:c9:6b:5c:e1:18:4b:7b:b3:f3:e9:eb:96:
         61:5f:81:65:66:e3:4e:b2:91:f3:03:64:e1:7d:9c:95:6e:b3:
         b8:fa:9f:c6:b7:f1:99:e2:e1:4f:69:73:4b:31:3c:da:28:7c:
         50:96:3b:09:f3:76:a2:1e:2b:be:87:9f:6c:da:84:4b:a1:05:
         ae:c7:93:16:e8:34:cd:2c:c2:0a:3f:65:70:5e:5d:48:66:45:
         97:4b:a4:74:8b:cc:65:cc:cd:b5:10:5a:16:7c:21:bc:b7:e2:
         37:1c:7e:3e:81:8d:93:a9:8d:0d:7c:46:d1:1e:a4:4f:bb:31:
         78:d7:40:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:17:40 2025 by rpki-client