Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f50559a-bd1d-3495-b3aa-a7ec8f0815c6.roa
File:                     8f50559a-bd1d-3495-b3aa-a7ec8f0815c6.roa (raw, json)
Hash identifier:          JB9mU+WOROnG4nEk3Uw/pF10t/XyV4WmQu5GiUxntN4=
Subject key identifier:   74:A2:ED:7D:F2:A0:8C:D2:5A:F3:85:72:E8:EB:61:28:57:1C:7D:07
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584633EEE591370E52E1E8E2AA40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f50559a-bd1d-3495-b3aa-a7ec8f0815c6.roa
Signing time:             Fri 14 Jun 2024 01:00:26 +0000
ROA not before:           Fri 14 Jun 2024 01:00:26 +0000
ROA not after:            Thu 12 Sep 2024 01:00:26 +0000
asID:                     393552
IP address blocks:        2001:470:c0::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:33:ee:e5:91:37:0e:52:e1:e8:e2:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 14 01:00:26 2024 GMT
            Not After : Sep 12 01:00:26 2024 GMT
        Subject: CN=e9af97eb-f857-4317-a146-9ef0145c4f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:7a:ee:41:c8:eb:fc:74:d9:e4:de:3a:19:
                    5a:2c:73:3a:d2:29:fd:4f:74:4f:20:61:50:e3:dc:
                    0f:91:83:ee:85:2c:8f:ee:d4:30:6b:6e:b1:52:89:
                    a9:b1:4e:1d:27:2f:ef:63:05:8f:75:62:a0:20:b6:
                    d6:4e:2f:9a:0a:8d:1f:ec:c9:27:75:38:f7:8e:82:
                    5e:2d:eb:60:07:09:98:19:e3:ae:3b:62:ac:55:fd:
                    99:e5:c7:3f:70:07:b5:77:09:8d:c0:df:e6:b8:18:
                    29:12:84:5a:88:2e:48:4a:97:fc:a6:f2:3a:5a:26:
                    d7:1e:57:22:48:49:ce:3d:1a:82:9c:e6:ef:c8:aa:
                    01:35:ab:77:80:84:53:36:20:f7:95:c1:b8:06:21:
                    50:2a:de:c8:18:c1:e8:66:99:4d:8e:b8:d5:56:3a:
                    cc:01:6a:f1:4c:bd:c5:2a:74:bc:91:09:71:61:37:
                    fd:bd:e0:10:64:21:be:e1:2d:38:1d:3b:d5:47:f1:
                    3e:0a:94:71:84:86:07:d5:a0:33:5d:a9:70:c8:4f:
                    94:ee:c3:fc:20:78:cf:0e:77:4d:92:0b:fa:9f:3a:
                    a3:8e:2d:82:1a:fd:03:5a:0d:8a:66:bb:3c:c7:60:
                    f2:82:e8:ae:78:ae:08:22:3a:49:8c:91:3c:a6:26:
                    5a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A2:ED:7D:F2:A0:8C:D2:5A:F3:85:72:E8:EB:61:28:57:1C:7D:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8f50559a-bd1d-3495-b3aa-a7ec8f0815c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:9b:f9:5a:7e:6b:21:14:26:45:48:09:50:cb:ed:1f:f2:b4:
         af:74:7b:1b:f4:7b:35:93:da:85:fa:c3:76:6f:67:36:4f:0c:
         48:f9:63:68:3f:8c:36:a8:24:da:1e:09:81:2e:67:7f:38:ae:
         6f:5c:e2:66:e2:e8:07:58:54:4d:5d:37:ae:2d:49:7a:5f:e0:
         55:b9:e0:b0:40:b7:75:e2:85:aa:f9:09:52:48:4e:c9:e9:83:
         ed:3a:33:33:d3:a7:54:c9:b7:c8:e4:a9:e1:00:b9:14:ed:8d:
         5f:d4:b9:ee:13:4b:ee:76:92:4a:cc:4c:67:d6:d9:37:bb:b4:
         f1:e5:96:3d:67:cb:e5:96:88:85:05:95:de:b3:d1:7c:de:46:
         bb:5f:40:0e:88:51:bc:b5:83:a3:8b:38:d6:ee:78:0a:0f:0b:
         48:db:2a:93:50:3c:3f:6b:e2:f3:2d:fc:68:73:71:f8:c9:31:
         e9:61:fd:17:b8:07:6f:e4:5f:4e:37:d6:b6:09:e0:70:75:5d:
         17:75:fe:fb:2c:da:4b:2a:67:2f:80:a4:b9:4f:f7:68:f5:18:
         59:a2:ca:d2:cb:b8:4e:f9:85:d4:3a:ec:45:a6:95:4a:d2:8c:
         6d:f5:bd:ce:b6:f1:4e:fe:e1:2a:d8:5d:c0:4c:35:9a:97:93:
         ed:76:7c:e7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEYz7uWRNw5S4ejiqkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDYxNDAxMDAyNloXDTI0MDkxMjAxMDAyNlowLzEtMCsGA1UEAxMk
ZTlhZjk3ZWItZjg1Ny00MzE3LWExNDYtOWVmMDE0NWM0ZjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjN67kHI6/x02eTeOhlaLHM60in9T3RPIGFQ
49wPkYPuhSyP7tQwa26xUompsU4dJy/vYwWPdWKgILbWTi+aCo0f7MkndTj3joJe
LetgBwmYGeOuO2KsVf2Z5cc/cAe1dwmNwN/muBgpEoRaiC5ISpf8pvI6WibXHlci
SEnOPRqCnObvyKoBNat3gIRTNiD3lcG4BiFQKt7IGMHoZplNjrjVVjrMAWrxTL3F
KnS8kQlxYTf9veAQZCG+4S04HTvVR/E+CpRxhIYH1aAzXalwyE+U7sP8IHjPDndN
kgv6nzqjji2CGv0DWg2KZrs8x2DyguiueK4IIjpJjJE8piZa7wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHSi7X3yoIzSWvOFcujrYShXHH0HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOGY1MDU1OWEtYmQxZC0z
NDk1LWIzYWEtYTdlYzhmMDgxNWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcADA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGeb+Vp+ayEUJkVICVDL7R/ytK90exv0ezWT2oX6w3ZvZzZPDEj5
Y2g/jDaoJNoeCYEuZ384rm9c4mbi6AdYVE1dN64tSXpf4FW54LBAt3Xihar5CVJI
Tsnpg+06MzPTp1TJt8jkqeEAuRTtjV/Uue4TS+52kkrMTGfW2Te7tPHllj1ny+WW
iIUFld6z0XzeRrtfQA6IUby1g6OLONbueAoPC0jbKpNQPD9r4vMt/GhzcfjJMelh
/Re4B2/kX0431rYJ4HB1XRd1/vss2ksqZy+ApLlP92j1GFmiytLLuE75hdQ67EWm
lUrSjG31vc628U7+4SrYXcBMNZqXk+12fOc=
-----END CERTIFICATE-----
Generated at Thu May 8 14:36:35 2025 by rpki-client