Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7291f28-a792-37ca-9b3c-5101bc724416.roa
File:                     c7291f28-a792-37ca-9b3c-5101bc724416.roa (raw, json)
Hash identifier:          KLo8S7tCEL7o753u68EItO2vzbstTYSthyYVxFtPx78=
Subject key identifier:   2A:17:70:D3:20:1D:F0:47:30:B2:E9:21:BC:FE:CE:28:90:97:C7:A9
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285842DAEDBBB1D4E563DF70857BC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7291f28-a792-37ca-9b3c-5101bc724416.roa
Signing time:             Thu 10 Aug 2023 12:00:00 +0000
ROA not before:           Thu 10 Aug 2023 12:00:00 +0000
ROA not after:            Sun 11 Feb 2024 05:00:00 +0000
asID:                     137491
IP address blocks:        2001:470:182::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:da:ed:bb:b1:d4:e5:63:df:70:85:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 10 12:00:00 2023 GMT
            Not After : Feb 11 05:00:00 2024 GMT
        Subject: CN=16c7e456-1bd0-4f4f-89ad-a99b982f4ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:80:2e:71:2e:48:ae:f0:f1:93:0e:43:45:cf:
                    ba:d7:74:08:61:63:b8:9f:e6:28:24:3d:d5:51:ef:
                    a3:10:bc:3b:df:89:f2:56:73:3e:8d:61:49:8d:e0:
                    a1:d8:7a:9d:f5:91:c7:6f:b5:5f:85:ad:83:92:54:
                    83:c3:e4:7d:36:6e:9d:54:ec:ba:80:be:1b:b8:27:
                    2b:d3:52:cf:6a:e3:36:97:e5:1e:13:bb:e0:11:ce:
                    7c:7b:d9:0d:90:60:5c:9e:0f:8a:63:e1:10:fb:e9:
                    41:23:d8:01:6a:a3:63:4c:ab:6d:ca:51:6c:f5:c7:
                    6f:58:9d:61:bf:40:8f:a8:e8:cb:da:c2:d9:80:39:
                    cd:d2:e8:1d:ce:8d:7d:7a:b1:1a:2f:a2:62:a0:e9:
                    63:17:d8:fd:e9:42:c9:88:a2:0b:d9:5c:b2:10:b7:
                    6f:7f:7f:8a:41:1e:d2:6b:72:5f:64:ef:f6:08:72:
                    0a:e6:df:f8:0e:45:a0:5e:f9:6d:16:c6:2b:ef:56:
                    c3:8e:8a:d0:f9:6a:06:4a:99:34:83:1e:14:1c:bd:
                    22:5a:60:85:7e:ab:a5:83:22:0d:ca:0f:0f:54:ff:
                    4b:32:a7:3d:a5:87:64:d9:a5:65:d6:ff:91:9e:af:
                    7d:5c:27:1e:9b:ee:5b:85:c2:bc:bb:85:d1:27:6f:
                    59:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:17:70:D3:20:1D:F0:47:30:B2:E9:21:BC:FE:CE:28:90:97:C7:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c7291f28-a792-37ca-9b3c-5101bc724416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:182::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c5:43:6c:70:a4:84:2c:b8:69:d1:d1:09:6f:18:0b:fd:49:
         f5:b1:39:ab:94:7e:7c:2e:c4:17:3a:2d:b6:90:5e:35:8e:4b:
         8d:ad:fc:ef:2e:55:e3:b9:da:9a:0d:47:15:d5:9a:d4:f8:e0:
         4d:e2:0c:f9:76:f1:d8:25:67:d0:35:71:97:69:f6:ca:7f:02:
         79:b6:7b:46:6f:0c:4b:64:be:a4:1c:bd:d1:d7:c9:40:45:ce:
         3e:60:82:62:a2:5e:08:32:6a:14:68:3c:88:38:57:e7:a2:6a:
         af:03:02:4d:00:0b:da:4d:0c:a0:52:11:49:da:82:b1:65:f2:
         10:89:64:22:6c:e2:05:9f:52:14:cc:0b:f4:56:2b:96:d1:41:
         97:b1:04:52:46:f6:c7:56:30:82:16:37:ed:b0:d3:ac:4a:75:
         f9:5b:b8:66:e4:55:99:af:e2:8f:a4:f0:84:da:9e:a9:9f:d8:
         f4:77:53:35:3e:e8:0d:88:03:82:c6:58:63:f0:ee:af:aa:99:
         c5:ca:a6:b0:7a:c0:13:10:ac:78:4b:79:dd:3c:94:72:6b:81:
         80:93:f4:1c:bf:76:15:59:fd:87:cd:e2:aa:5b:4e:3c:a1:4f:
         dd:28:34:dd:21:c4:e8:b9:ba:cf:6d:f8:19:c1:a0:2b:49:af:
         33:f7:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:45:29 2025 by rpki-client