Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eb826869-bb2f-33d4-babb-ee7ac9f3dfa1.roa
File:                     eb826869-bb2f-33d4-babb-ee7ac9f3dfa1.roa (raw, json)
Hash identifier:          MGzs/jGznbG265hB1oVXM0EzMW3hcrGgxFMpNWlsVig=
Subject key identifier:   5F:04:85:8B:54:CE:F2:01:A0:FD:49:40:70:1B:4D:FD:30:23:EE:5F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858464779B8DB8CDFCCE8BFD32080
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eb826869-bb2f-33d4-babb-ee7ac9f3dfa1.roa
Signing time:             Fri 21 Jun 2024 01:00:26 +0000
ROA not before:           Fri 21 Jun 2024 01:00:26 +0000
ROA not after:            Thu 19 Sep 2024 01:00:26 +0000
asID:                     46925
IP address blocks:        2001:470:1e6::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:47:79:b8:db:8c:df:cc:e8:bf:d3:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 21 01:00:26 2024 GMT
            Not After : Sep 19 01:00:26 2024 GMT
        Subject: CN=9c3d50f5-7c9e-41c7-b031-5d92c5a4b609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6e:25:29:16:55:76:00:b3:09:51:66:2f:f9:
                    3d:93:d4:ec:12:19:6e:be:c4:79:c5:d1:7a:53:da:
                    72:b8:51:70:02:54:d7:50:ac:dc:ae:0c:33:f4:5f:
                    8b:15:a0:f9:50:73:62:51:8f:0f:3e:e3:21:49:2a:
                    5b:af:13:2f:d1:a6:2a:c6:9f:51:61:69:90:ba:ce:
                    cf:eb:7a:db:a9:72:86:15:49:12:f7:58:5e:54:ef:
                    5c:35:bf:82:32:ff:ae:d8:58:af:dd:cd:d3:ea:0f:
                    12:a8:a4:0c:26:e8:07:32:e3:62:f1:31:29:02:99:
                    39:d9:1c:9b:51:98:27:29:bf:d0:e3:f7:64:5d:d7:
                    cd:40:62:bb:05:dc:92:6c:7b:68:cd:91:51:de:ed:
                    80:a6:2f:c5:cb:4a:6e:a1:f6:f5:0a:94:c0:7d:18:
                    c7:09:ee:90:bc:ce:e6:9a:28:14:c7:06:94:f7:1d:
                    53:a5:5d:aa:e8:5c:be:2d:d5:eb:98:79:63:c7:94:
                    99:7d:72:c7:cb:64:70:b6:19:ea:46:8c:06:55:a2:
                    08:a9:68:e7:b8:a9:58:3c:61:0b:31:53:31:e7:ef:
                    c3:28:ca:17:15:1f:b8:9f:33:8d:b2:82:8c:a7:6f:
                    2f:a0:a7:ac:97:f4:93:a5:75:f4:06:95:cb:05:bd:
                    b0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:04:85:8B:54:CE:F2:01:A0:FD:49:40:70:1B:4D:FD:30:23:EE:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eb826869-bb2f-33d4-babb-ee7ac9f3dfa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1e6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:2a:2c:72:a1:33:08:75:27:40:2f:e4:71:d6:62:50:79:65:
         cc:c7:94:e4:9f:e9:ae:8b:64:69:68:3c:c7:73:16:4e:a8:1f:
         aa:c6:27:56:8c:1b:75:6c:be:e2:06:08:77:ac:1e:86:50:79:
         e4:74:8d:08:d2:d2:42:f9:31:9b:d4:8c:94:42:24:13:75:e5:
         f0:60:b5:40:da:02:e4:f2:28:3a:1d:14:38:07:e0:3e:b1:6c:
         6d:28:68:c6:41:ea:bc:c0:bc:54:06:6b:be:a0:44:11:fb:f6:
         eb:9d:87:54:6e:d5:df:b6:a8:2b:06:b3:03:b3:66:9c:9a:33:
         91:ca:58:38:2a:48:eb:ec:72:02:89:18:63:db:1e:42:03:e0:
         82:f6:6f:6b:92:79:ee:1a:d4:d7:cd:41:04:fa:1a:cf:7c:14:
         68:f3:f6:94:4e:3a:59:95:86:8e:04:a6:3c:86:84:9f:ac:2d:
         dc:a7:f0:19:60:37:87:03:a2:b5:10:ac:68:54:48:dd:32:9d:
         f7:97:38:2e:97:8b:52:9c:2d:89:3f:3d:bb:8d:a1:01:4c:66:
         ea:8b:eb:09:5d:77:eb:12:44:64:08:89:78:ab:9a:53:d8:8c:
         7d:7e:51:7d:27:ac:7e:74:ff:04:61:f0:a7:dd:87:68:1c:de:
         5b:5d:b2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:54:24 2025 by rpki-client