Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56a5cb66-9406-3dd0-9bd1-c75a4b81d070.roa
File:                     56a5cb66-9406-3dd0-9bd1-c75a4b81d070.roa (raw, json)
Hash identifier:          lfTr8vdGxG6otJiV/eP4VSuTEF0a6VOXnzAD39qhBdE=
Subject key identifier:   C0:A7:3A:0C:31:C5:5F:8B:D8:E4:AD:57:C4:4C:16:52:DC:5A:AA:BF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858464D0F199B3E0809F9943E8DC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56a5cb66-9406-3dd0-9bd1-c75a4b81d070.roa
Signing time:             Sun 23 Jun 2024 01:00:24 +0000
ROA not before:           Sun 23 Jun 2024 01:00:24 +0000
ROA not after:            Sat 21 Sep 2024 01:00:24 +0000
asID:                     211826
IP address blocks:        2001:470:26e::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:4d:0f:19:9b:3e:08:09:f9:94:3e:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 23 01:00:24 2024 GMT
            Not After : Sep 21 01:00:24 2024 GMT
        Subject: CN=9c305019-7332-4e87-a92b-1555ee7678a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1e:43:25:48:10:89:4c:4a:36:a2:c1:57:9f:
                    03:14:fa:f2:fa:a6:1b:6d:41:e4:c7:3c:fd:43:16:
                    85:80:ae:5e:dc:f5:2a:48:de:62:f5:ba:7a:47:ef:
                    3f:86:8e:7b:79:92:b0:12:97:32:46:b4:ce:b9:b5:
                    0e:ce:84:bb:fe:08:7b:bb:ae:fb:30:f9:7e:d1:2f:
                    54:2f:64:cb:92:c6:6e:a1:e0:e2:8d:8b:15:42:52:
                    58:c8:be:ea:61:bf:92:2d:dd:73:37:bc:50:26:fd:
                    47:b3:5c:1f:da:3e:4d:01:56:c3:cb:d3:8d:84:14:
                    82:f7:8e:04:01:95:c7:ae:94:46:5c:70:2b:98:a1:
                    7f:53:3c:63:5d:ae:b3:7e:e7:db:4d:73:94:f8:61:
                    c0:6b:25:48:91:ec:8a:30:c7:83:2c:47:79:a1:0c:
                    e4:99:d7:b7:46:85:66:a9:a6:c6:5e:0d:cf:3b:78:
                    9e:f3:a7:69:a8:d8:14:95:e9:1c:26:d4:f4:2b:dc:
                    6a:2a:bb:29:0c:75:6d:41:2d:1f:d2:35:aa:20:46:
                    34:8d:4b:20:f6:a5:87:05:97:e9:dd:16:12:fd:fa:
                    57:a5:a6:51:dd:9d:f0:01:54:a8:44:c1:9f:6c:09:
                    99:43:e1:b3:d7:e2:5b:6e:1e:36:98:84:73:f5:bd:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A7:3A:0C:31:C5:5F:8B:D8:E4:AD:57:C4:4C:16:52:DC:5A:AA:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/56a5cb66-9406-3dd0-9bd1-c75a4b81d070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:26e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a4:3c:10:ad:43:3c:69:2d:cc:19:16:c1:e3:80:a7:b9:75:
         61:62:50:3b:87:75:4a:6d:e9:f9:f2:9a:78:53:3f:5a:4f:1e:
         f9:9f:1a:4f:d4:0c:99:75:f7:72:2b:cd:f0:aa:80:e3:98:f0:
         0f:d3:68:bc:46:48:03:83:4c:ed:96:cc:32:a2:49:d6:ba:d5:
         f7:cb:00:d2:e8:51:44:f2:79:8e:e5:c6:b3:d2:64:d5:13:8e:
         a9:4c:cb:08:fb:e6:d9:6d:70:8a:f8:12:74:81:8c:2f:07:ad:
         92:ac:67:72:62:fd:82:5c:eb:29:a5:1a:6b:25:26:ba:fc:13:
         7e:8b:04:2f:e9:33:26:dc:e1:b1:34:c2:5c:f8:3e:00:35:15:
         36:4d:2b:7f:72:91:05:0e:43:72:a5:c4:28:0c:c8:06:50:ff:
         43:a0:55:7f:0a:91:c4:5d:48:dd:95:3a:a7:a1:0d:3f:ab:ae:
         61:ca:12:65:42:74:82:0d:79:21:dc:d7:2b:ef:4d:93:77:6f:
         5e:36:6c:48:b6:9b:ed:52:39:84:32:83:ab:c1:94:9e:8c:89:
         49:c1:ef:b7:66:cc:8f:62:75:7f:94:ce:59:d5:97:4d:0c:9c:
         1f:5f:47:4e:26:35:7d:12:d8:da:ac:7f:29:a6:58:9b:29:43:
         f2:ac:d1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:30:20 2025 by rpki-client