Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ea4ae0b4-c85b-3b1f-bdc1-452f97927a44.roa
File:                     ea4ae0b4-c85b-3b1f-bdc1-452f97927a44.roa (raw, json)
Hash identifier:          B5d+Coc3Wk7b+dVXmZFuntzgjUvUrBNjeRn9nreqilg=
Subject key identifier:   52:21:9E:5B:0F:A1:7A:4D:5F:17:6E:A8:36:76:E9:E7:ED:70:4F:CF
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285848CE485C805DD57F6BB1F90B80
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ea4ae0b4-c85b-3b1f-bdc1-452f97927a44.roa
Signing time:             Fri 07 Feb 2025 17:29:12 +0000
ROA not before:           Fri 07 Feb 2025 17:29:12 +0000
ROA not after:            Thu 08 May 2025 16:29:12 +0000
asID:                     206150
IP address blocks:        2606:f18a::/32 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ce:48:5c:80:5d:d5:7f:6b:b1:f9:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Feb  7 17:29:12 2025 GMT
            Not After : May  8 16:29:12 2025 GMT
        Subject: CN=53976d9e-a680-4f36-bbe3-a1a763d93c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:7a:5b:bb:f9:09:a8:05:76:96:97:93:cf:
                    a3:9e:f4:66:de:bd:6f:dc:ce:34:c1:e9:72:74:d8:
                    95:d9:05:e9:dc:a4:0e:8c:8d:00:6a:d8:63:0b:cc:
                    ff:48:3c:c7:9f:67:b3:67:82:eb:16:9a:7e:90:ce:
                    80:57:f6:4f:68:57:e3:8a:7e:27:cb:62:29:d9:c0:
                    b0:3c:6f:63:94:41:4a:d6:8f:33:ea:41:23:c8:f2:
                    e5:0f:b7:9b:be:89:43:1a:ac:da:e6:43:61:c6:2e:
                    9e:4a:87:b6:0b:33:1e:cd:2c:d7:73:15:84:08:e5:
                    07:12:f7:f3:e7:23:c3:1c:b2:3a:de:3d:88:94:d2:
                    7e:a8:41:ee:11:34:a0:65:e8:9e:bc:f9:d7:c8:11:
                    88:99:3f:87:15:4d:15:4a:d2:0e:b0:48:bd:5f:a7:
                    ce:20:76:d3:30:2b:8f:83:7b:ae:d7:ea:70:4d:42:
                    6d:67:f6:bf:07:9e:a9:49:40:dc:d3:d3:56:84:e8:
                    57:6c:36:04:04:53:5e:a8:54:e4:ac:67:8a:43:c5:
                    20:9a:b8:b2:68:3c:4c:e4:14:9b:9d:96:0a:7f:bf:
                    38:f3:67:84:f2:c0:1e:cc:9e:31:f6:4a:28:ce:bc:
                    59:44:db:1f:0d:4d:53:c9:dd:35:62:bd:ec:ff:33:
                    21:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:21:9E:5B:0F:A1:7A:4D:5F:17:6E:A8:36:76:E9:E7:ED:70:4F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/ea4ae0b4-c85b-3b1f-bdc1-452f97927a44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:f18a::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ea:15:f5:42:d2:d0:85:ed:6b:db:42:05:2f:39:d6:c7:17:
         29:04:8b:fa:53:ef:59:af:ea:f2:90:77:43:d7:2e:1d:5c:60:
         1e:5c:56:aa:2a:1d:98:9e:7b:83:03:83:0a:c5:d6:a8:20:f9:
         27:ee:5c:85:0e:11:e6:61:e6:34:06:6c:aa:1c:98:29:07:37:
         29:5a:42:99:26:4a:8c:f2:ed:5e:9c:81:94:27:6d:e4:28:cc:
         3b:84:f1:0e:d9:cc:00:07:10:d1:fe:9c:06:69:8f:ef:17:5e:
         d7:01:88:33:a4:70:76:e5:e2:80:03:16:32:4f:20:be:61:d0:
         30:be:42:c1:d0:22:5b:7d:49:5d:00:b0:20:99:36:a4:7a:46:
         08:41:ce:f9:6f:f8:32:a4:d0:21:f0:23:ed:6f:a3:51:84:10:
         4a:6d:2e:92:3b:7d:40:80:b5:61:14:0e:93:8b:0b:72:8b:e1:
         7c:91:64:4d:6b:7c:9e:08:06:3c:3d:61:68:4e:fe:67:14:eb:
         2d:d3:88:f2:93:80:51:47:c3:c0:50:22:ed:eb:f8:50:66:a6:
         dd:0d:25:d9:0f:9b:77:f8:7e:c8:bd:46:a9:c2:b5:3c:4c:fa:
         72:45:77:ca:36:be:6a:cf:3b:36:20:22:31:26:f6:fd:77:92:
         9c:b2:dc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:31:24 2025 by rpki-client