Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eae4b753-c8b4-3ffe-97f4-7ec72f45b709.roa
File:                     eae4b753-c8b4-3ffe-97f4-7ec72f45b709.roa (raw, json)
Hash identifier:          wua9r3oxovc+x8GeZv7LX6lYdFQVchxm9Wd1DiOHv3w=
Subject key identifier:   74:13:31:1B:BD:9D:05:4A:7B:0D:E4:D7:92:80:BD:92:81:97:C0:0E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846407F309F266C232A553E2D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eae4b753-c8b4-3ffe-97f4-7ec72f45b709.roa
Signing time:             Tue 18 Jun 2024 13:00:33 +0000
ROA not before:           Tue 18 Jun 2024 13:00:33 +0000
ROA not after:            Mon 16 Sep 2024 13:00:33 +0000
asID:                     400790
IP address blocks:        2001:470:43::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:40:7f:30:9f:26:6c:23:2a:55:3e:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 18 13:00:33 2024 GMT
            Not After : Sep 16 13:00:33 2024 GMT
        Subject: CN=b0e8ab43-3607-4bd4-8382-92eb9f8f657a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3a:09:97:ae:10:7d:f5:75:b0:a8:d7:a4:21:
                    df:87:ab:ca:b0:2c:da:8c:4f:ae:31:68:c8:cf:4e:
                    cc:5c:76:bb:93:ec:86:7d:07:e4:7d:70:ce:55:10:
                    87:e7:8e:28:1a:ac:6b:41:20:1c:5e:12:6e:fc:5a:
                    4c:ec:30:b9:57:ae:06:10:b2:9f:59:d2:5f:3b:5f:
                    14:2c:01:af:b2:ed:c4:cd:57:2e:3f:d5:66:5b:65:
                    73:cb:32:3e:ed:58:32:35:1a:15:80:d2:c2:98:dd:
                    31:de:00:ca:03:21:5c:df:8f:ec:91:27:fd:24:5d:
                    1a:4d:a1:8e:6d:da:26:c8:d8:cf:9d:33:32:36:cf:
                    d4:27:cf:0d:f1:0c:eb:b9:6e:87:3a:22:9e:e9:23:
                    87:4a:2e:5a:93:9f:55:86:05:b2:b4:3d:10:e6:df:
                    df:74:77:c3:2a:4f:9e:a8:62:49:47:83:94:be:14:
                    5c:3d:c5:46:a2:8d:e5:38:d9:42:da:c4:48:51:73:
                    60:8d:1a:92:43:97:95:f5:3b:8f:3c:61:ce:55:65:
                    75:af:24:24:8d:36:83:df:dc:7e:59:3d:c2:56:78:
                    47:83:d4:d9:3b:81:f4:df:ee:33:11:d5:47:a5:f7:
                    bf:08:c9:a2:8d:26:fb:1f:c7:6a:68:d1:4b:68:93:
                    7c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:13:31:1B:BD:9D:05:4A:7B:0D:E4:D7:92:80:BD:92:81:97:C0:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eae4b753-c8b4-3ffe-97f4-7ec72f45b709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:43::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:6e:5a:b1:e6:e4:9f:2d:af:d3:20:b7:9a:1e:1f:f6:d7:0b:
         28:50:16:0e:12:f8:18:44:cc:4a:1e:52:31:cb:c9:93:5b:07:
         f1:0c:a2:08:f3:c4:34:26:cc:07:c3:8d:f8:16:91:30:d2:5a:
         cb:95:fe:bc:00:b0:72:21:43:f6:57:87:99:e1:cd:a9:bf:14:
         10:b3:e5:44:28:cc:eb:3f:40:b8:d1:28:08:1b:36:d3:1d:c5:
         4d:12:9f:67:66:cb:56:97:e4:3a:2c:41:8e:f7:f2:6c:2e:98:
         a5:04:bb:a6:dc:e0:b5:c8:30:93:52:b8:fb:a2:1a:99:4a:8c:
         93:47:0d:14:48:7a:96:5c:b0:d1:e5:d8:74:52:51:3f:93:cb:
         56:81:f5:a1:19:92:5c:3c:38:7e:3b:92:03:b2:f1:c7:af:be:
         87:2d:8f:b2:28:1f:13:e9:78:71:be:53:c1:26:d5:74:aa:d7:
         f3:fc:54:d3:d1:97:f2:0d:be:90:00:68:23:dd:cd:87:b7:a5:
         65:a3:bf:2e:e5:18:2f:a0:2e:98:84:29:67:77:49:3a:f1:eb:
         f3:f5:0e:05:84:a3:0e:98:76:e1:f0:54:2f:1f:fd:bc:0c:a1:
         eb:32:c2:c4:be:58:7c:b8:b5:7a:f1:39:7d:a6:36:ae:91:15:
         65:9e:6f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:52:10 2025 by rpki-client