Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65b4c99a-bc0f-3f1e-af51-db5ef8c15a19.roa
File:                     65b4c99a-bc0f-3f1e-af51-db5ef8c15a19.roa (raw, json)
Hash identifier:          kuHE/ArTm/G11EJBWCH4PAEE78JqX2ZORAalW85L8qU=
Subject key identifier:   38:47:56:7A:3D:70:38:27:86:29:68:63:90:47:3C:71:E3:62:17:AF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285843530939594E63F95FAACE4C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65b4c99a-bc0f-3f1e-af51-db5ef8c15a19.roa
Signing time:             Fri 22 Sep 2023 12:00:00 +0000
ROA not before:           Fri 22 Sep 2023 12:00:00 +0000
ROA not after:            Mon 03 Feb 2025 05:00:00 +0000
asID:                     396982
IP address blocks:        2600:1901::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:53:09:39:59:4e:63:f9:5f:aa:ce:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 22 12:00:00 2023 GMT
            Not After : Feb  3 05:00:00 2025 GMT
        Subject: CN=b912b6b4-8d25-44f8-86bb-f1656e9e6cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:de:b1:20:10:88:34:86:5c:c6:3b:10:6b:33:
                    be:af:98:10:47:21:1e:87:9f:92:8f:d2:2e:38:01:
                    cb:c9:a2:ff:7f:47:00:d7:00:f1:17:cf:b4:a0:09:
                    1d:6f:25:a8:f4:6a:e4:0c:32:55:bf:93:d5:dd:a1:
                    8a:e7:a4:c6:53:a8:e8:99:cf:0f:ae:3a:99:b1:62:
                    71:9c:4c:5a:48:93:61:95:9c:b0:23:b6:48:ef:1a:
                    92:de:bd:a2:5e:2f:c5:87:20:6b:53:ad:08:5f:d5:
                    5d:06:2f:ce:3c:10:4b:4b:d8:d6:2e:cc:80:0a:71:
                    d3:4e:21:92:9b:d8:c4:27:a4:bf:18:ad:b4:18:52:
                    e0:95:12:e9:8f:33:24:02:d1:8e:29:38:be:3c:f1:
                    7e:05:34:65:d4:88:41:52:cb:c3:79:78:44:2e:b7:
                    ab:3d:b4:cf:06:54:a7:0e:b9:f8:52:af:8d:c2:62:
                    16:5a:43:12:d4:55:98:2f:a1:55:c6:f3:75:da:29:
                    86:7d:df:f8:b5:d3:37:48:99:20:1a:57:ad:c0:1d:
                    48:89:7f:c2:65:bb:e2:c5:47:58:f7:f5:72:49:88:
                    7b:f2:e3:46:be:42:60:ba:93:ad:36:41:82:69:27:
                    25:13:b3:64:06:18:c3:a1:a6:4e:08:db:a7:2f:07:
                    55:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:47:56:7A:3D:70:38:27:86:29:68:63:90:47:3C:71:E3:62:17:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/65b4c99a-bc0f-3f1e-af51-db5ef8c15a19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1901::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4a:02:f8:34:d1:d7:6d:d4:e9:03:22:2c:4d:b0:0c:b5:87:
         a9:f4:d3:12:b7:4a:20:c0:46:88:b3:1a:64:b9:9a:d9:cf:56:
         5c:de:a5:71:b1:38:99:14:45:e8:49:df:41:fe:3c:f4:ab:81:
         21:b6:49:61:7e:25:af:17:bb:35:b8:fa:67:4b:67:8d:c9:ae:
         de:61:ed:cf:0f:16:4b:24:67:87:83:49:87:ed:24:67:74:e3:
         36:b1:76:de:eb:c4:ec:b3:13:d0:d6:ec:5f:6b:18:13:70:2e:
         04:e2:5e:8b:61:92:6f:15:6b:e0:0f:e8:ed:77:9a:b6:7c:9f:
         aa:16:70:7d:94:52:93:01:e5:86:be:42:64:2a:e2:c8:36:6f:
         33:8c:0a:06:bf:ca:2a:c5:58:3e:ef:64:5a:4b:39:a2:41:54:
         0e:b2:8c:e0:3f:6a:e8:0b:b9:18:3f:d9:45:3c:5d:9b:cc:a8:
         e9:c2:78:e6:dc:3a:be:1e:27:28:c1:f3:34:2c:b7:a3:c4:af:
         d4:0c:dc:da:3a:7f:67:03:33:88:ce:96:e3:02:14:55:18:ef:
         c1:a7:69:b5:cc:8b:ce:e2:61:24:f4:58:3b:1d:f4:f0:ce:c9:
         d1:59:ce:ff:c4:3b:9d:ae:67:de:71:c5:59:44:c5:79:20:5f:
         55:cd:06:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:03:42 2025 by rpki-client