Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0b23969-6bc1-3c14-9d62-b58bd3b215cc.roa
File:                     f0b23969-6bc1-3c14-9d62-b58bd3b215cc.roa (raw, json)
Hash identifier:          +UwZjDRc3oQf4+pKtPaHdOervNVQnMzqoBkVB3oBzpQ=
Subject key identifier:   21:5C:F6:68:1D:2D:66:98:3C:97:AE:29:18:74:8A:00:D7:6E:BB:F0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285842B065598A129C386603DE4780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0b23969-6bc1-3c14-9d62-b58bd3b215cc.roa
Signing time:             Wed 26 Jul 2023 12:00:00 +0000
ROA not before:           Wed 26 Jul 2023 12:00:00 +0000
ROA not after:            Mon 29 Jul 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        2600:1901:ff80::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:65:59:8a:12:9c:38:66:03:de:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jul 26 12:00:00 2023 GMT
            Not After : Jul 29 04:00:00 2024 GMT
        Subject: CN=0a25f251-bcf9-466e-aba1-34d508913a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:36:cd:13:47:b1:14:8a:1d:9b:de:7a:58:
                    98:45:76:b0:15:34:0d:a5:bf:48:60:dc:5f:a7:ed:
                    69:47:0e:73:0b:52:c2:9a:69:e4:ba:be:5d:1f:eb:
                    17:6e:cd:3a:0a:e1:0a:22:07:87:77:a9:69:f5:47:
                    22:15:44:c0:37:83:9c:08:fe:56:a0:68:e9:51:56:
                    eb:7f:95:41:16:cc:7e:27:05:91:3a:66:57:2e:23:
                    39:b4:32:0b:67:e2:09:23:43:e5:b4:0e:fe:1f:37:
                    93:86:db:8a:86:b8:d2:7c:0c:93:92:ea:c9:65:42:
                    7f:da:1b:01:ae:03:a1:1c:a1:41:27:46:c9:8b:c5:
                    14:03:12:fc:db:e7:1f:8b:22:fd:be:46:9f:81:6b:
                    94:49:4b:b0:44:31:b3:3f:61:fb:f1:88:b8:45:0d:
                    83:42:fa:58:1c:5e:6b:03:58:67:93:74:95:36:c9:
                    f5:8e:ad:df:ca:5f:e6:cd:a2:6d:6d:7b:63:62:ca:
                    f8:ea:ca:85:9d:5c:b4:41:8f:01:12:9f:ef:41:02:
                    02:02:d0:60:76:cb:81:c8:d3:34:79:72:8a:53:69:
                    c3:1e:33:8f:21:bf:c7:be:c9:37:8e:b2:86:93:4f:
                    e7:07:b3:48:96:b7:d8:fa:09:88:70:1d:cb:79:75:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5C:F6:68:1D:2D:66:98:3C:97:AE:29:18:74:8A:00:D7:6E:BB:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0b23969-6bc1-3c14-9d62-b58bd3b215cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1901:ff80::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:a3:93:1c:8e:a7:a7:3c:b6:03:d1:1d:ba:0e:5c:80:75:5b:
         da:18:f2:36:24:fc:4e:0d:7a:ea:8d:ba:bd:0d:f3:24:c6:16:
         72:99:95:00:c5:a0:87:19:34:1e:7a:f0:ce:46:c7:11:2b:bc:
         75:44:30:73:26:16:10:28:d1:b3:6a:60:6b:08:89:ca:1f:a9:
         a9:22:c3:7f:50:2a:c2:7b:60:d8:5a:52:50:46:75:0a:b7:83:
         a6:57:0a:42:6a:94:7e:f5:8d:83:bf:e6:7f:57:95:2a:e1:57:
         58:08:f1:ea:3d:ad:72:63:91:49:d3:db:03:ca:df:b6:e9:a6:
         8f:70:1c:54:8a:14:b7:cb:7f:e1:17:3d:fe:5f:9a:da:19:04:
         9b:96:d1:28:a9:15:d5:c3:12:94:14:e5:4c:08:34:db:4a:cb:
         4d:70:fb:64:96:08:8d:49:9a:11:a9:36:65:42:1c:98:35:00:
         11:13:5b:ff:87:54:80:b2:4b:3f:3d:91:38:7b:08:fb:75:0a:
         51:05:5a:f4:09:2d:27:c7:d1:3c:14:f2:97:78:b9:ee:69:18:
         f9:13:da:77:5d:ec:05:57:9a:1e:fa:75:da:e2:98:fb:2c:fe:
         99:a7:f2:8b:a4:80:cd:58:b5:7f:4a:d2:07:3d:1d:80:8d:38:
         7d:20:50:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 12:51:52 2025 by rpki-client