Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32d93ab9-83e2-3d0b-b618-c767524da877.roa
File:                     32d93ab9-83e2-3d0b-b618-c767524da877.roa (raw, json)
Hash identifier:          gNADji8Ys6rwoeSu/65N8LnJTqEY6t7T3u3SGUFQoxA=
Subject key identifier:   EF:4B:6E:73:0B:D6:48:8A:D7:08:70:8C:C9:FA:B9:10:58:25:B1:7A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584843BEA89B63403D9449716500
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32d93ab9-83e2-3d0b-b618-c767524da877.roa
Signing time:             Fri 20 Dec 2024 02:30:12 +0000
ROA not before:           Fri 20 Dec 2024 02:30:12 +0000
ROA not after:            Thu 20 Mar 2025 01:30:12 +0000
asID:                     199468
IP address blocks:        2001:470:21f::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:43:be:a8:9b:63:40:3d:94:49:71:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 20 02:30:12 2024 GMT
            Not After : Mar 20 01:30:12 2025 GMT
        Subject: CN=ec90bd2a-d4b7-4088-8469-9ae1ff833083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f7:ea:e9:05:9a:9f:65:35:ef:5b:3c:40:af:
                    69:f6:c8:09:a7:6d:61:b8:4d:43:3a:58:3c:cb:71:
                    a6:94:5d:81:8f:b9:05:10:4a:a8:9a:ad:4a:df:b2:
                    fb:72:11:5d:54:33:bd:33:e7:0d:ee:b5:34:ce:25:
                    db:86:0b:5c:85:a9:4e:a5:1b:54:93:26:46:5a:71:
                    e5:ca:87:71:5b:ce:cd:fb:4f:49:60:96:7c:fe:36:
                    59:d9:3a:d3:3b:d1:e1:01:54:ab:a8:ee:6a:6a:28:
                    98:37:24:4a:65:6e:89:94:72:e3:ef:02:21:62:34:
                    51:57:8d:ac:d9:89:df:4f:03:55:a7:31:f3:e0:ab:
                    a2:0c:cb:1c:56:ae:f8:ff:ba:23:85:9d:4b:d9:01:
                    a4:6b:78:1f:b3:bc:7f:b6:a0:21:51:92:98:fe:b5:
                    e2:d2:38:6d:70:ef:fe:38:27:94:4a:c2:27:b0:b5:
                    5f:1c:13:87:fd:b4:7d:fe:66:94:ee:76:7e:e5:cc:
                    d8:be:e3:f0:58:1d:31:39:18:3d:56:d2:ea:38:8e:
                    6e:2d:4a:be:6c:9e:b0:63:69:cf:9e:41:6c:b1:14:
                    ee:f8:13:e7:56:8f:b5:69:de:a8:28:f4:83:d6:e7:
                    8c:b2:5d:24:4e:b9:64:86:c7:47:36:d1:6c:6f:10:
                    a4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4B:6E:73:0B:D6:48:8A:D7:08:70:8C:C9:FA:B9:10:58:25:B1:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/32d93ab9-83e2-3d0b-b618-c767524da877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:21f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:65:39:5e:0e:9a:f9:dc:7d:d9:a0:db:f2:79:f7:23:92:d2:
         0e:b9:e1:62:bd:da:a5:f8:ba:de:bb:cb:42:a4:de:2c:49:d3:
         f5:92:85:ba:45:c2:65:c2:cb:31:40:f5:01:b8:01:ac:e9:d2:
         55:b7:de:46:7b:4e:6c:5f:35:4f:2a:57:ac:c3:3f:9c:8e:66:
         ae:88:43:83:99:fb:20:a8:74:ba:df:8f:09:b0:d2:46:ea:14:
         a4:00:bc:9e:48:e7:17:ee:12:9e:30:2c:0a:ff:84:a7:7a:dc:
         f7:1a:4f:84:4b:50:da:d3:5c:3e:23:21:85:31:5c:8b:b8:cb:
         c2:0e:c6:e9:82:96:2e:8a:5c:64:bd:aa:cf:0c:3a:34:93:1d:
         9a:78:7d:c5:ff:3a:8b:9d:74:0b:2e:2a:22:80:25:c7:30:c7:
         c8:5c:6a:4a:45:d8:8c:23:9b:96:6e:73:39:ba:50:29:f5:31:
         43:18:33:db:6e:a9:e2:64:1b:0c:78:e9:aa:85:bd:f9:46:6b:
         8f:6a:2d:1b:dd:28:1e:9e:95:b3:25:db:2c:43:90:3c:1e:d6:
         11:52:79:d2:a4:a8:ef:be:62:94:3f:30:32:1a:c2:1f:8a:a5:
         20:ac:b5:d6:ef:44:9d:33:f2:2b:e4:37:5f:f9:8e:42:fa:56:
         e6:e5:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:50:56 2025 by rpki-client