Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2dcc0ae-86d9-3c73-82a8-607f0b6ab795.roa
File:                     c2dcc0ae-86d9-3c73-82a8-607f0b6ab795.roa (raw, json)
Hash identifier:          4M/mhExBv8u28qR5U1Ukjne0fggHZG9UWSDtENfPqsc=
Subject key identifier:   AD:B9:EA:B2:E3:71:4B:F9:D6:ED:85:30:81:83:9B:0C:E3:D5:AB:44
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584543E717602ED2BCA26A50E600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2dcc0ae-86d9-3c73-82a8-607f0b6ab795.roa
Signing time:             Wed 20 Mar 2024 01:30:51 +0000
ROA not before:           Wed 20 Mar 2024 01:30:51 +0000
ROA not after:            Tue 18 Jun 2024 01:30:51 +0000
asID:                     48925
IP address blocks:        2001:470:230::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:43:e7:17:60:2e:d2:bc:a2:6a:50:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 01:30:51 2024 GMT
            Not After : Jun 18 01:30:51 2024 GMT
        Subject: CN=b1b6a484-d9c5-4c89-bf9a-aefcbe64ade6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c3:9e:12:ae:72:4b:fe:08:7f:16:8f:e4:bd:
                    b0:9a:b1:0a:d0:3b:f1:7f:73:0e:93:dc:68:bf:02:
                    9d:b9:22:08:7b:b8:11:af:d6:3f:77:8f:b4:93:4a:
                    6f:de:cf:af:50:d5:14:68:6c:8d:17:ac:ea:93:55:
                    5e:cd:7d:33:a7:f6:c7:80:95:11:18:a0:21:8e:f1:
                    a2:a0:d5:b4:ea:71:62:4f:04:25:2a:77:e8:91:aa:
                    83:3b:aa:6f:e0:99:8b:26:0b:10:6a:92:e8:d6:78:
                    a5:ea:6b:67:e9:c6:9f:61:72:79:4f:a6:4f:00:9e:
                    28:4a:72:50:b4:ae:7d:38:14:cf:9f:d5:13:1f:72:
                    df:9b:27:19:a6:b5:18:2f:79:bc:30:e0:d3:59:ad:
                    7d:72:b2:7d:de:88:29:49:bb:6d:c7:ec:9a:a1:cb:
                    1f:a3:95:11:4e:1a:27:13:11:e6:29:63:43:4c:9a:
                    4f:ef:0c:71:97:74:61:06:79:a8:c6:48:96:a0:e6:
                    e8:f9:e6:38:d8:90:55:34:3f:8a:b6:2d:cd:8c:d5:
                    5a:35:8f:e5:83:4d:d9:a7:a2:fb:e1:fc:f3:0c:43:
                    45:c4:cf:e9:75:a8:d8:be:60:5c:b8:bd:35:43:11:
                    38:20:f8:1f:bd:06:e2:88:7c:df:7a:38:1c:45:37:
                    8a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B9:EA:B2:E3:71:4B:F9:D6:ED:85:30:81:83:9B:0C:E3:D5:AB:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c2dcc0ae-86d9-3c73-82a8-607f0b6ab795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:230::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:9b:59:2f:2e:da:96:42:21:2c:d4:93:a9:ea:29:e4:cd:fd:
         7c:e9:47:6c:3e:79:a5:4e:ae:b7:57:79:ba:14:60:a8:c7:e5:
         99:9a:ce:b0:41:22:42:2b:7f:0e:ba:ee:b6:db:33:e8:92:32:
         61:62:ea:cf:88:09:8f:d9:d4:75:28:f6:ed:c4:d6:06:29:c4:
         96:e4:5d:b6:d3:e9:8c:9f:58:75:9b:96:d3:bd:52:31:64:ed:
         fd:09:5d:81:e0:30:23:b2:11:34:dc:dd:9c:a8:43:ea:8e:13:
         ee:7e:dd:c2:f4:e8:2e:60:b7:61:dc:19:12:64:07:72:39:ee:
         49:97:d2:10:11:f1:74:f5:2c:89:e3:51:0a:b5:b5:46:6a:6a:
         b1:91:ea:df:f4:a7:b5:8d:ee:4c:db:63:c2:f2:f2:0c:97:f5:
         97:f1:4e:7c:70:ff:49:5a:ce:9e:40:87:46:ee:e8:4e:3b:32:
         86:26:52:7d:60:cb:a5:7f:4e:57:51:b2:a9:20:da:48:4f:80:
         8b:fe:95:de:f7:90:42:0a:a6:18:ba:2e:59:0e:21:78:fb:2c:
         4d:22:ea:69:43:f2:60:74:42:5a:6e:de:0e:66:57:e6:cc:b1:
         93:57:eb:60:8d:e5:4e:12:59:bf:63:53:7e:ce:96:d3:82:bb:
         38:29:02:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:18:13 2025 by rpki-client