Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b4bfc3c9-7ad9-31c8-a192-d49eabb40ecd.roa
File:                     b4bfc3c9-7ad9-31c8-a192-d49eabb40ecd.roa (raw, json)
Hash identifier:          SBpHpu10OYMgLCOh9xVsPRVdvirIxmIB9QrAaVXF/tQ=
Subject key identifier:   B2:0E:6B:42:BB:6F:26:10:05:FC:91:A4:48:E0:E7:46:69:57:C5:B4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858463133415C654DE511C33A23E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b4bfc3c9-7ad9-31c8-a192-d49eabb40ecd.roa
Signing time:             Thu 13 Jun 2024 01:30:54 +0000
ROA not before:           Thu 13 Jun 2024 01:30:54 +0000
ROA not after:            Wed 11 Sep 2024 01:30:54 +0000
asID:                     23047
IP address blocks:        2001:470:313::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:31:33:41:5c:65:4d:e5:11:c3:3a:23:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 13 01:30:54 2024 GMT
            Not After : Sep 11 01:30:54 2024 GMT
        Subject: CN=615e4419-551a-4894-bfa0-7cdd55af5fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:94:f3:e9:e8:e4:1c:fd:e7:3a:ed:88:22:
                    ef:44:d5:43:8a:fe:9b:7a:92:72:74:a9:81:f1:66:
                    14:c7:80:1b:d0:db:d0:0c:b6:47:e9:50:7d:0e:13:
                    f3:ff:7e:fb:d5:be:80:8e:48:21:12:e3:40:03:ab:
                    1b:a4:35:15:74:44:88:bd:58:1c:f2:34:e8:f4:c3:
                    e6:6f:58:5e:ab:2b:b0:5a:62:99:6c:c7:6f:ce:27:
                    b3:98:42:68:59:b2:87:13:1e:14:73:92:76:cc:42:
                    0e:d6:6b:15:13:c9:2f:b2:ca:7a:75:e0:75:b5:22:
                    fd:4c:dd:fe:c6:26:72:cd:5a:61:58:b4:97:d0:68:
                    3d:bb:6c:8b:db:df:f7:54:77:29:67:5c:5f:72:ed:
                    bf:07:83:45:aa:1a:bd:99:fc:54:e2:1a:3d:59:3c:
                    61:b2:58:5e:12:71:63:96:1c:33:6d:df:88:2a:8e:
                    53:14:33:b9:42:55:1b:84:ea:07:8d:01:fb:dc:96:
                    2b:bb:99:86:65:bf:d7:b8:37:f6:38:59:4e:2a:6b:
                    8c:e3:6f:d7:e9:1d:24:57:e3:c8:4d:a0:ae:d4:4e:
                    1a:bb:0d:f2:c2:b0:c6:fd:77:73:73:c5:f5:0a:c0:
                    0a:af:60:e3:b4:ce:c5:d4:8c:71:f2:cf:86:34:77:
                    1d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0E:6B:42:BB:6F:26:10:05:FC:91:A4:48:E0:E7:46:69:57:C5:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b4bfc3c9-7ad9-31c8-a192-d49eabb40ecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:313::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d4:d0:d8:e8:1d:be:74:e6:06:13:d5:04:f0:72:06:1c:64:
         c2:03:61:28:41:6b:fa:b5:d9:be:7a:60:66:fb:a6:a4:7c:8e:
         52:8d:3f:02:0e:af:90:71:41:b2:04:b9:fe:4a:86:80:1f:91:
         24:d6:ae:5a:56:cc:6f:04:8c:b6:19:dc:c2:d0:ba:f4:66:0f:
         1c:21:5f:e7:56:73:3c:d2:67:35:ac:48:1a:aa:28:af:e0:4d:
         0b:c2:dc:f4:3b:4c:6c:59:7f:5a:83:37:90:5a:5b:3d:13:32:
         92:c7:d6:fb:6d:43:ac:a1:87:c6:1b:c6:ba:b3:90:bd:15:0a:
         a0:32:23:96:2f:7f:03:1d:8d:b4:01:b5:c5:e1:d7:9b:22:6f:
         c3:72:05:de:85:89:e6:71:2c:d4:bf:6c:82:e3:bf:11:77:bb:
         88:38:4c:78:77:56:0f:52:71:6e:f0:0a:49:d6:33:7a:9c:35:
         6b:44:dd:ec:01:cd:ac:ee:ff:a0:ec:56:c7:d4:a0:6b:43:79:
         ae:1f:2a:15:95:2a:8a:e3:a0:93:e1:f2:2f:d3:dc:dc:08:37:
         55:09:96:ee:da:26:8d:02:e8:ae:2d:f0:c4:bd:9b:88:0e:cb:
         45:66:c7:c3:a3:07:d5:bc:d8:1a:58:df:34:b8:76:d8:74:dd:
         3f:b0:8c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:28:55 2025 by rpki-client