Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/99460571-493f-3fa8-a65c-8446f9d89a49.roa
File:                     99460571-493f-3fa8-a65c-8446f9d89a49.roa (raw, json)
Hash identifier:          Rugrefn46naZDZcqXPcr7MGnZEbvEqUTkHUm68T00no=
Subject key identifier:   FC:BD:9C:01:B8:D9:AD:67:C3:17:D9:5E:5E:91:B7:72:F0:AB:50:43
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846513F2E862D799193B4FEBA68
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/99460571-493f-3fa8-a65c-8446f9d89a49.roa
Signing time:             Mon 24 Jun 2024 13:00:34 +0000
ROA not before:           Mon 24 Jun 2024 13:00:34 +0000
ROA not after:            Sun 22 Sep 2024 13:00:34 +0000
asID:                     49282
IP address blocks:        2001:470:1ee::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:51:3f:2e:86:2d:79:91:93:b4:fe:ba:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 24 13:00:34 2024 GMT
            Not After : Sep 22 13:00:34 2024 GMT
        Subject: CN=d9fa817b-c7cf-4eea-b0ac-1e063b345d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5c:af:86:c9:e8:99:85:6b:a0:47:89:05:5b:
                    d9:ea:3a:7b:4b:88:4d:df:8c:c5:36:b9:f0:f6:55:
                    06:40:8b:d0:56:1f:28:81:e0:79:ec:56:36:40:a0:
                    69:2a:83:64:94:00:9c:ff:9f:f0:c9:06:43:0b:05:
                    1d:f3:98:94:9c:0a:44:45:bd:19:31:80:86:78:d5:
                    44:7d:0d:68:5d:5a:a0:2b:a7:9b:b4:a4:1e:d7:0f:
                    ca:d8:41:d6:1f:78:46:fd:c1:15:2c:6f:90:c3:80:
                    08:2a:01:96:b9:21:e7:b3:99:91:8b:b4:f1:d0:a3:
                    0e:de:92:3d:92:e6:a0:5c:6b:eb:2e:eb:9d:13:e8:
                    28:6b:de:cb:8f:10:57:53:a6:3d:9f:75:b2:18:6b:
                    c9:40:d8:84:d2:36:2b:7c:2b:d5:4c:89:81:78:8b:
                    39:f3:98:be:5f:cb:5f:8a:d9:9a:25:6b:e5:03:c1:
                    1c:15:9a:9f:63:76:62:67:b4:90:ff:b0:a3:b5:53:
                    d9:b2:53:1f:9d:07:7f:16:78:8e:da:68:5c:15:2e:
                    f7:3f:1a:38:41:0d:4d:12:5e:dd:5e:ad:a8:e7:a0:
                    3b:93:07:c2:ff:7e:75:6e:75:b3:9f:ac:4b:f3:0b:
                    0e:11:cf:36:f0:fd:21:d2:af:a8:3b:27:25:2a:fb:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BD:9C:01:B8:D9:AD:67:C3:17:D9:5E:5E:91:B7:72:F0:AB:50:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/99460571-493f-3fa8-a65c-8446f9d89a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1ee::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:6e:60:a0:e1:46:8c:a2:c9:b0:1b:cd:fb:4b:2a:aa:81:9f:
         e3:0d:ee:c5:01:08:d0:5e:cb:a7:66:55:19:12:6e:32:ac:90:
         16:63:9d:79:40:f9:6c:c6:68:81:73:51:41:b2:ed:6f:e4:84:
         1f:cb:84:fe:85:0f:f5:bc:15:d7:35:f1:68:58:0d:b5:eb:e3:
         9c:63:96:54:0a:0a:7f:c6:83:06:21:ee:d2:e1:ec:6f:b4:82:
         d1:47:4a:1f:41:37:21:b2:eb:bb:ca:f1:b2:25:05:ca:90:3f:
         f5:fc:22:1c:44:d7:ac:10:9a:e8:14:aa:db:78:a7:77:dd:ee:
         e8:52:f3:30:23:da:4c:fd:a2:54:96:b6:97:39:a7:da:a4:f9:
         e0:63:38:36:13:d5:a3:fa:d1:76:ff:68:7f:c4:c4:c8:6c:08:
         fa:1f:0c:6e:33:8d:c3:e5:1c:d4:ad:a8:00:88:31:b2:d9:58:
         4f:20:9b:88:70:79:0f:3a:55:62:6f:4a:a2:ac:14:14:7b:75:
         0d:ef:b6:e0:2c:56:ad:c7:5a:ea:ec:52:33:68:4f:4c:a7:09:
         6c:55:07:ec:1f:61:ab:ec:fb:59:06:52:b8:fb:fe:0a:f5:05:
         9b:c6:88:db:70:fd:e1:85:e7:c3:fa:cd:dc:32:87:6c:65:e7:
         80:88:97:15
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEZRPy6GLXmRk7T+umgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDYyNDEzMDAzNFoXDTI0MDkyMjEzMDAzNFowLzEtMCsGA1UEAxMk
ZDlmYTgxN2ItYzdjZi00ZWVhLWIwYWMtMWUwNjNiMzQ1ZDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01yvhsnomYVroEeJBVvZ6jp7S4hN34zFNrnw
9lUGQIvQVh8ogeB57FY2QKBpKoNklACc/5/wyQZDCwUd85iUnApERb0ZMYCGeNVE
fQ1oXVqgK6ebtKQe1w/K2EHWH3hG/cEVLG+Qw4AIKgGWuSHns5mRi7Tx0KMO3pI9
kuagXGvrLuudE+goa97LjxBXU6Y9n3WyGGvJQNiE0jYrfCvVTImBeIs585i+X8tf
itmaJWvlA8EcFZqfY3ZiZ7SQ/7CjtVPZslMfnQd/FniO2mhcFS73Pxo4QQ1NEl7d
Xq2o56A7kwfC/351bnWzn6xL8wsOEc828P0h0q+oOyclKvv0cwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPy9nAG42a1nwxfZXl6Rt3Lwq1BDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvOTk0NjA1NzEtNDkzZi0z
ZmE4LWE2NWMtODQ0NmY5ZDg5YTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHu
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHFuYKDhRoyiybAbzftLKqqBn+MN7sUBCNBey6dmVRkSbjKskBZj
nXlA+WzGaIFzUUGy7W/khB/LhP6FD/W8Fdc18WhYDbXr45xjllQKCn/GgwYh7tLh
7G+0gtFHSh9BNyGy67vK8bIlBcqQP/X8IhxE16wQmugUqtt4p3fd7uhS8zAj2kz9
olSWtpc5p9qk+eBjODYT1aP60Xb/aH/ExMhsCPofDG4zjcPlHNStqACIMbLZWE8g
m4hweQ86VWJvSqKsFBR7dQ3vtuAsVq3HWursUjNoT0ynCWxVB+wfYavs+1kGUrj7
/gr1BZvGiNtw/eGF58P6zdwyh2xl54CIlxU=
-----END CERTIFICATE-----
Generated at Wed May 7 13:45:51 2025 by rpki-client