Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/aab5736f-6c3a-3962-99f4-edecc5ba36d8.roa
File:                     aab5736f-6c3a-3962-99f4-edecc5ba36d8.roa (raw, json)
Hash identifier:          y9iAdL6CobDf5pU3Ax6M6GItH/vQh5brqKN2yjy3gPI=
Subject key identifier:   17:9E:41:6B:82:0A:02:1F:86:BC:DA:F3:E3:CF:D2:CF:9D:78:50:B8
Certificate issuer:       /CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
Certificate serial:       010D0C9F43285842973723EF766712E696D29C28
Authority key identifier: CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/aab5736f-6c3a-3962-99f4-edecc5ba36d8.roa
Signing time:             Tue 18 Jul 2023 19:23:25 +0000
ROA not before:           Tue 18 Jul 2023 19:23:25 +0000
ROA not after:            Mon 16 Oct 2023 19:23:25 +0000
asID:                     852
IP address blocks:        2602:812:2003::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:97:37:23:ef:76:67:12:e6:96:d2:9c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
        Validity
            Not Before: Jul 18 19:23:25 2023 GMT
            Not After : Oct 16 19:23:25 2023 GMT
        Subject: CN=1c396a91-6303-4475-840e-7e7f040ae33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:95:24:ce:53:04:49:bb:2d:6a:b0:3f:e2:fe:
                    6c:80:1d:57:8c:50:de:32:fa:65:1c:dc:4a:35:c9:
                    f2:73:13:5a:7b:99:1f:6b:a8:05:08:37:bb:db:08:
                    e9:79:f3:3e:26:0d:4a:b3:5a:76:51:70:59:33:ce:
                    11:a1:3e:c0:84:17:22:78:53:f4:5b:bc:44:13:81:
                    bb:03:57:da:39:45:b4:ac:0b:73:53:1a:56:8b:d7:
                    12:b9:d0:2d:2b:69:da:f7:62:f8:70:1e:eb:06:fb:
                    d8:54:97:5c:c2:be:7e:50:62:93:10:2d:a0:5e:15:
                    08:11:f3:34:5d:c4:5b:ea:87:07:3c:f9:57:41:a7:
                    33:a2:24:ce:db:f6:59:aa:65:92:99:fd:8a:86:7a:
                    73:d9:13:af:d2:a5:7c:e4:53:8b:81:78:3c:6d:4b:
                    13:d2:fb:48:9a:5d:9b:c9:29:4d:d5:1d:0d:19:34:
                    b8:46:a3:0a:47:27:04:3c:27:aa:c1:d0:96:f8:0a:
                    7f:30:1c:8e:b1:2a:76:fe:66:7f:58:b3:22:6c:b6:
                    9c:57:5a:bb:c4:49:6b:95:3f:69:47:79:d2:44:9a:
                    23:ec:6b:e0:8d:f9:0c:70:a2:d2:01:d5:bb:31:e0:
                    04:ec:3d:90:52:41:e6:ce:3b:d7:5d:3d:95:a1:71:
                    25:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9E:41:6B:82:0A:02:1F:86:BC:DA:F3:E3:CF:D2:CF:9D:78:50:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/aab5736f-6c3a-3962-99f4-edecc5ba36d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.crl

            X509v3 Authority Key Identifier:
                keyid:CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:812:2003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c6:80:6a:4c:8b:58:d0:d8:19:3d:aa:73:37:f3:8c:9d:e8:
         02:58:1d:1a:92:ee:03:41:52:63:05:a6:e6:3d:5a:02:8f:b5:
         5b:4f:bd:5e:bc:82:22:94:55:b0:d3:0e:97:33:de:da:c0:c4:
         5c:73:b8:e3:1f:f3:54:29:5f:47:55:18:21:46:46:f0:3b:0c:
         f0:4b:fc:c3:98:d6:4b:b6:ea:d8:f9:8f:b9:e6:90:ba:0c:83:
         1f:7c:68:34:78:1d:b4:12:fb:95:e5:10:fe:62:92:15:69:fd:
         59:ed:5c:70:84:e7:57:d5:ef:15:23:28:61:ff:fa:4b:cf:69:
         8d:30:f4:e8:39:1e:5f:d7:02:f7:ae:21:8a:01:7c:e5:f7:36:
         a0:33:55:6f:6c:76:69:ca:29:f3:2e:d2:c2:31:2f:a7:1f:04:
         2b:b7:5d:f0:1d:85:2f:58:d0:6f:24:6b:0f:0e:b9:7b:62:f2:
         86:f1:89:c7:6a:73:96:88:0c:d8:89:ab:b6:2f:90:f0:36:fc:
         6d:52:84:ad:06:df:38:24:69:c5:62:e3:5b:c3:68:26:94:c6:
         87:f9:d2:93:81:69:d8:f1:25:94:7d:80:91:99:38:1a:b8:42:
         1b:55:4e:3d:37:3f:1e:6c:b0:06:5e:11:4e:10:e3:c4:93:05:
         4f:e6:2b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:12:22 2025 by rpki-client