Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eec2a6b3-8c33-326d-bc5d-9e786faaa769.roa
File:                     eec2a6b3-8c33-326d-bc5d-9e786faaa769.roa (raw, json)
Hash identifier:          0rRdIEUQuY9Xtj9Jys2+rGeqqw8XcmI/yA6vmt/tDMw=
Subject key identifier:   80:FF:37:0D:FE:A3:CF:1B:F0:15:75:D0:D9:6A:07:C1:3F:0B:79:DE
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584620644D28076059ED94567980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eec2a6b3-8c33-326d-bc5d-9e786faaa769.roa
Signing time:             Fri 07 Jun 2024 01:00:24 +0000
ROA not before:           Fri 07 Jun 2024 01:00:24 +0000
ROA not after:            Thu 05 Sep 2024 01:00:24 +0000
asID:                     33247
IP address blocks:        65.49.127.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:20:64:4d:28:07:60:59:ed:94:56:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun  7 01:00:24 2024 GMT
            Not After : Sep  5 01:00:24 2024 GMT
        Subject: CN=3915ad4e-4448-48dc-b478-4331707ffe75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b5:dc:1b:a5:f3:2a:77:da:0b:10:c9:4c:88:
                    9d:32:1a:0b:4e:7d:07:53:40:2e:c0:3b:c1:05:84:
                    0d:58:9d:95:ea:88:f7:e1:bb:23:9b:45:ba:fe:ad:
                    9c:31:a2:ef:7f:e9:fc:ea:ec:92:6b:08:9a:97:89:
                    ea:89:de:24:71:74:84:ee:8a:b7:5d:e1:9e:7f:71:
                    16:20:0d:8b:37:4d:fd:45:f7:c4:a8:86:20:cc:af:
                    46:3c:26:4e:4a:c1:b9:68:a3:ae:24:d6:fe:d9:14:
                    3a:75:87:41:70:6d:01:b4:f8:45:b1:15:67:7c:b7:
                    43:39:6d:6c:d8:7a:7f:6a:b1:de:fb:7b:7b:3b:6f:
                    66:2e:26:c8:79:37:d0:90:31:7c:2f:66:fd:e7:4a:
                    91:53:8c:67:1c:16:41:65:19:61:a6:2c:be:64:2c:
                    d2:a6:0e:21:11:bd:80:07:19:eb:a3:3e:9f:d4:d5:
                    38:b9:88:36:06:f4:49:1c:61:ee:63:e1:5e:74:ef:
                    3e:de:92:a1:38:a0:c5:be:14:2b:d6:af:f9:30:cf:
                    67:8e:7c:bb:f2:c8:53:32:6b:26:14:be:cd:4b:26:
                    b2:2b:00:e3:25:77:97:78:1b:73:df:ba:72:13:dc:
                    0f:7d:5a:86:e3:a0:db:9e:4d:af:26:87:7d:38:7a:
                    da:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FF:37:0D:FE:A3:CF:1B:F0:15:75:D0:D9:6A:07:C1:3F:0B:79:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eec2a6b3-8c33-326d-bc5d-9e786faaa769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a5:b8:7d:cf:61:a7:11:42:6f:d1:59:1a:77:ac:6f:05:cf:
         64:c0:4c:d3:64:b3:fd:89:73:87:82:cc:be:c8:fa:dd:f7:31:
         7c:59:7a:54:eb:a7:c2:4f:58:4b:22:8e:09:02:ec:14:fc:06:
         cd:ac:b8:d6:19:67:65:97:74:50:f6:32:a6:96:2d:50:58:15:
         93:85:9a:d6:73:ef:52:30:7d:96:06:f0:a1:39:8c:a7:f3:8f:
         57:99:a2:08:f6:84:a4:df:69:18:6b:53:e0:39:3b:c5:a9:d4:
         d9:af:7f:6a:6b:7c:d8:67:24:26:16:29:92:14:03:7c:4e:41:
         48:55:c5:0b:ed:aa:76:74:8d:60:44:c9:a6:b2:d9:4e:5f:bf:
         8d:18:df:28:39:3e:f6:3a:7c:00:1a:de:68:2b:c9:e8:16:d0:
         2e:5e:18:18:57:ec:26:78:68:3a:08:6a:16:94:8c:80:f3:72:
         d1:f7:6e:58:60:4a:ad:af:76:b4:13:41:12:4b:79:e7:05:0c:
         b5:3f:a0:3d:20:af:fd:2e:3b:f4:77:75:96:7d:06:8e:61:4d:
         bc:f9:46:f7:6b:24:35:5d:af:f9:ff:15:e1:e6:20:45:25:35:
         64:6c:4f:ad:d2:3e:dd:95:05:3e:af:53:43:29:eb:ef:fa:02:
         b1:eb:15:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:23:28 2025 by rpki-client