Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fffa4ff4-5ae2-3268-9f10-feffe77c67ea.roa
File:                     fffa4ff4-5ae2-3268-9f10-feffe77c67ea.roa (raw, json)
Hash identifier:          MvbCSHS3L7+sKbJWUjjGuAGYlPoIEArSWd9OvQEp6n8=
Subject key identifier:   77:DF:91:0B:38:A0:7A:5A:BF:C9:16:49:13:74:2E:51:19:D5:8A:F3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858463563535D702D771BADE72E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fffa4ff4-5ae2-3268-9f10-feffe77c67ea.roa
Signing time:             Fri 14 Jun 2024 13:30:59 +0000
ROA not before:           Fri 14 Jun 2024 13:30:59 +0000
ROA not after:            Thu 12 Sep 2024 13:30:59 +0000
asID:                     37057
IP address blocks:        2001:470:31a::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:35:63:53:5d:70:2d:77:1b:ad:e7:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 14 13:30:59 2024 GMT
            Not After : Sep 12 13:30:59 2024 GMT
        Subject: CN=ea21e4fd-b9ca-4acb-8682-cae22c088bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:02:e8:b7:03:68:e2:8c:ea:28:51:89:ca:8f:
                    6a:9a:07:2d:ac:6e:0f:89:45:45:a3:43:76:5d:3b:
                    34:c4:66:93:fe:3a:1c:21:12:50:13:ae:1f:fe:2d:
                    cd:47:92:58:30:25:31:27:5d:4a:4f:22:a1:33:83:
                    ea:fc:db:f1:e8:09:2f:1b:46:4e:d7:17:4b:9c:ad:
                    86:76:4e:48:4a:f7:d2:a5:36:bc:a5:9f:d9:7c:5b:
                    60:e6:3d:f0:a3:a2:ec:4d:49:ac:0d:fc:43:02:5f:
                    b2:94:cf:2e:5a:9c:30:97:99:97:9c:b3:24:75:61:
                    b2:22:56:d6:31:8c:40:b5:94:89:5d:10:78:3c:12:
                    48:ac:a0:af:de:ab:94:43:7d:22:f5:a2:b1:f2:ed:
                    04:d2:39:b4:c9:df:0f:ce:ab:de:c9:33:23:1f:31:
                    2c:ea:25:87:63:e1:e4:b0:0d:7c:3c:12:8e:ce:c9:
                    08:09:9b:6e:47:25:1e:31:a7:e8:3d:5d:75:45:fb:
                    60:ce:2a:f8:88:35:01:33:14:d4:07:30:61:68:5b:
                    1c:9d:3b:fb:7b:3d:3c:5a:10:0a:6e:e0:69:a6:72:
                    21:ff:19:ce:89:63:d2:2a:8e:db:c9:c3:94:da:7c:
                    56:30:09:bc:7f:be:24:06:3e:53:ca:bb:03:18:08:
                    f8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DF:91:0B:38:A0:7A:5A:BF:C9:16:49:13:74:2E:51:19:D5:8A:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/fffa4ff4-5ae2-3268-9f10-feffe77c67ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:27:60:0c:75:62:6f:2f:6c:ac:4e:80:b9:7b:fb:67:4c:b4:
         66:c6:11:b3:ca:bd:6e:0f:46:27:86:43:30:eb:43:0e:30:77:
         ad:34:90:e0:92:9e:09:33:a1:e1:9f:56:db:94:f8:7b:b9:a7:
         d1:dd:7c:65:ee:e7:69:9d:bd:d3:d3:d7:15:74:22:ee:80:f1:
         5a:35:dd:17:dc:51:ef:04:31:f7:e6:fc:1f:f4:a7:af:f3:b2:
         ef:67:da:c3:c7:8b:60:c3:af:16:ba:5c:09:2e:4b:86:63:ee:
         3c:47:ab:9c:36:7b:12:37:04:04:8e:d3:93:29:db:ba:99:1d:
         16:9d:49:f2:99:0f:1d:c8:94:f3:93:9b:58:f2:ff:24:28:75:
         96:d9:75:a9:66:0c:88:ef:f5:b2:a8:be:47:d5:ec:6c:32:12:
         f0:c0:a1:ae:a9:a3:5f:fa:b6:1e:74:2a:f4:de:31:e0:62:3a:
         61:49:75:41:ba:7d:cf:da:e3:44:73:fc:2b:a6:82:7a:22:88:
         51:70:b3:6a:be:67:31:1a:66:a1:40:8d:1f:87:a5:f1:63:70:
         93:d2:52:6b:3b:3b:5e:f0:91:59:3d:b4:fa:ff:c8:87:2d:f4:
         51:0f:d8:cd:32:9b:21:80:20:49:e5:d4:52:d6:49:14:f4:03:
         89:44:28:b2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEY1Y1NdcC13G63nLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDYxNDEzMzA1OVoXDTI0MDkxMjEzMzA1OVowLzEtMCsGA1UEAxMk
ZWEyMWU0ZmQtYjljYS00YWNiLTg2ODItY2FlMjJjMDg4YmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQLotwNo4ozqKFGJyo9qmgctrG4PiUVFo0N2
XTs0xGaT/jocIRJQE64f/i3NR5JYMCUxJ11KTyKhM4Pq/Nvx6AkvG0ZO1xdLnK2G
dk5ISvfSpTa8pZ/ZfFtg5j3wo6LsTUmsDfxDAl+ylM8uWpwwl5mXnLMkdWGyIlbW
MYxAtZSJXRB4PBJIrKCv3quUQ30i9aKx8u0E0jm0yd8PzqveyTMjHzEs6iWHY+Hk
sA18PBKOzskICZtuRyUeMafoPV11Rftgzir4iDUBMxTUBzBhaFscnTv7ez08WhAK
buBppnIh/xnOiWPSKo7bycOU2nxWMAm8f74kBj5TyrsDGAj4TQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHffkQs4oHpav8kWSRN0LlEZ1YrzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvZmZmYTRmZjQtNWFlMi0z
MjY4LTlmMTAtZmVmZmU3N2M2N2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAMa
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABYnYAx1Ym8vbKxOgLl7+2dMtGbGEbPKvW4PRieGQzDrQw4wd600
kOCSngkzoeGfVtuU+Hu5p9HdfGXu52mdvdPT1xV0Iu6A8Vo13RfcUe8EMffm/B/0
p6/zsu9n2sPHi2DDrxa6XAkuS4Zj7jxHq5w2exI3BASO05Mp27qZHRadSfKZDx3I
lPOTm1jy/yQodZbZdalmDIjv9bKovkfV7GwyEvDAoa6po1/6th50KvTeMeBiOmFJ
dUG6fc/a40Rz/CumgnoiiFFws2q+ZzEaZqFAjR+HpfFjcJPSUms7O17wkVk9tPr/
yIct9FEP2M0ymyGAIEnl1FLWSRT0A4lEKLI=
-----END CERTIFICATE-----
Generated at Thu Apr 17 15:29:30 2025 by rpki-client