Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eb16c0ef-08ab-33f6-a6d7-dd95694714f9.roa
File:                     eb16c0ef-08ab-33f6-a6d7-dd95694714f9.roa (raw, json)
Hash identifier:          h0ipBEOj+7DMZfDUG6Eh3Jcf+O49PrfUUYI3UdElMFE=
Subject key identifier:   D9:27:46:63:62:C3:E6:D7:99:70:53:44:29:2D:68:D7:AC:97:53:F3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858461ADDC540761DBC8CB646FB80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eb16c0ef-08ab-33f6-a6d7-dd95694714f9.roa
Signing time:             Wed 05 Jun 2024 01:30:52 +0000
ROA not before:           Wed 05 Jun 2024 01:30:52 +0000
ROA not after:            Tue 03 Sep 2024 01:30:52 +0000
asID:                     132139
IP address blocks:        2001:470:309::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1a:dd:c5:40:76:1d:bc:8c:b6:46:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  5 01:30:52 2024 GMT
            Not After : Sep  3 01:30:52 2024 GMT
        Subject: CN=a6a31812-57ba-4e8e-b0c4-f8cfa8222c82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:5b:ee:3c:af:07:47:84:e8:4e:a4:d2:d2:
                    e0:2b:44:34:d9:33:82:33:61:f3:cb:7a:3b:96:46:
                    b7:6f:05:a3:34:63:5d:e7:7a:c6:dd:4a:96:5d:ca:
                    6a:24:d0:31:2c:26:74:66:4e:6b:fa:b5:3e:11:5a:
                    5d:14:a7:4d:92:c6:26:ad:a6:8e:51:c9:1c:83:8f:
                    2d:a1:48:fb:3b:a1:b4:65:c9:37:2f:7c:a2:98:1c:
                    06:48:e5:5f:2a:a6:13:5c:da:b6:eb:f1:d5:74:c5:
                    6c:62:89:50:34:9e:2b:5a:58:dc:07:72:57:e9:c4:
                    5f:b1:db:28:43:b5:6a:fa:0b:75:9f:aa:7d:7d:a3:
                    47:12:0a:1e:3d:13:9d:ac:de:81:06:12:3e:8e:54:
                    39:fe:25:cc:2f:07:f6:5d:47:6d:4a:25:52:45:2e:
                    b3:91:56:c1:bc:f9:0c:b5:ac:b0:f9:44:ce:64:4d:
                    eb:76:90:ca:41:8e:2d:fb:c0:84:8d:81:7d:d1:42:
                    df:57:e4:cb:26:16:c7:f9:39:52:61:4e:40:67:13:
                    49:b8:f3:7b:d0:29:b8:09:5b:47:81:97:57:57:d9:
                    f0:86:6e:11:5d:0b:48:b0:2e:f4:68:3f:25:bc:dc:
                    7b:08:4f:df:37:7c:2c:bd:0f:e7:4b:b7:55:e9:9d:
                    2b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:27:46:63:62:C3:E6:D7:99:70:53:44:29:2D:68:D7:AC:97:53:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eb16c0ef-08ab-33f6-a6d7-dd95694714f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:309::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c6:69:5d:40:76:09:15:f8:bd:83:86:78:0d:4c:05:be:8d:
         74:bf:7a:88:06:7d:e3:f6:85:ae:08:d8:4d:1e:be:c8:df:6b:
         e6:43:f4:64:73:6f:bf:26:3b:2c:76:d6:d8:2f:04:1f:53:5a:
         fd:f7:15:5e:be:13:0c:b7:d6:f1:83:75:f4:7a:6e:f1:35:28:
         9b:28:c8:1e:31:60:05:6d:7e:29:20:d9:b5:42:fe:e7:42:81:
         a2:37:3f:98:07:75:fa:3e:8d:4e:ed:1d:54:5b:73:83:67:c7:
         a0:6e:78:21:5f:bb:f3:08:d1:65:95:d4:fc:7f:48:70:fd:a3:
         4a:68:97:73:66:7c:ab:98:5c:8e:2d:51:9a:9b:f1:8c:4a:66:
         c3:15:c5:0a:d4:a8:16:aa:6a:b4:6d:54:cf:34:76:52:4d:21:
         a7:ee:e5:28:29:d7:0c:5d:e4:43:2f:ea:f4:20:7d:a4:4a:75:
         50:09:b2:5b:e0:50:fd:4a:5f:cf:f1:a3:66:24:5c:9c:77:05:
         ff:4b:a3:96:a8:5a:26:ea:ff:a9:9b:33:42:fd:e1:46:72:79:
         2e:4f:c8:8c:ba:c5:b6:30:19:4a:40:bd:cc:2c:1a:7f:79:19:
         33:67:89:6a:6c:c3:3b:8d:68:29:53:9f:84:41:19:6e:a4:56:
         ff:52:c2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:29:36 2025 by rpki-client