Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7a9e8721-b5c9-3a6d-accb-c452cfd5f2d2.roa
File:                     7a9e8721-b5c9-3a6d-accb-c452cfd5f2d2.roa (raw, json)
Hash identifier:          Y/iqUtFMGgoFGrAP4bNPHlBdHeAFz2Z3uI45DJzo41I=
Subject key identifier:   41:C2:99:F7:D0:82:09:06:2F:78:94:94:BE:B8:D8:A3:91:40:F1:B6
Certificate issuer:       /CN=7e90c2d3-d2e4-443e-b44e-d530fc7f3315
Certificate serial:       010D0C9F43285848CE2F8CAB50C8579632FFB900
Authority key identifier: 4B:45:01:89:08:C1:8E:27:8C:3D:C9:E1:68:0F:80:AB:F0:E4:6B:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7a9e8721-b5c9-3a6d-accb-c452cfd5f2d2.roa
Signing time:             Fri 07 Feb 2025 16:39:13 +0000
ROA not before:           Fri 07 Feb 2025 16:39:13 +0000
ROA not after:            Thu 08 May 2025 15:39:13 +0000
asID:                     27284
IP address blocks:        2602:f6f6::/40 maxlen: 40
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ce:2f:8c:ab:50:c8:57:96:32:ff:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e90c2d3-d2e4-443e-b44e-d530fc7f3315
        Validity
            Not Before: Feb  7 16:39:13 2025 GMT
            Not After : May  8 15:39:13 2025 GMT
        Subject: CN=d39de544-be82-4516-8662-60c7800ffec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e7:00:fe:68:e5:d0:f7:04:8f:0f:16:a2:52:
                    99:84:29:2f:4d:01:80:1b:af:41:16:3a:30:07:9a:
                    7d:30:43:b6:90:e8:6e:30:17:7f:e6:7a:a6:df:2c:
                    c6:14:cf:6a:17:81:81:db:15:d7:a8:62:1a:ac:e7:
                    6e:08:28:27:44:02:93:fc:76:52:35:ff:3a:b1:fa:
                    b8:87:98:c8:67:90:a9:4d:5a:28:2c:65:74:62:e1:
                    9d:91:71:25:c5:31:72:35:32:87:49:62:20:c2:47:
                    1b:ad:b6:68:3d:d0:44:ec:13:e9:7f:38:28:ce:7f:
                    64:06:35:b0:4b:c3:fd:d5:b4:e8:6d:4b:3e:31:44:
                    08:6d:cf:d2:0d:59:45:98:22:7f:96:c2:6b:74:c6:
                    00:0e:db:7f:74:c2:8d:07:30:73:ca:41:9e:c7:4c:
                    fc:30:73:a1:2c:dc:af:b0:e8:d0:88:a3:f3:4c:55:
                    e5:25:80:87:21:fb:66:fb:6c:83:e8:77:93:37:b7:
                    82:57:9c:0a:e9:ca:da:4a:cc:62:2d:ea:f0:09:af:
                    fd:5b:bd:d7:cb:e8:63:ac:2c:ca:9b:0c:5a:f4:a0:
                    14:c5:6f:4b:a6:42:0f:da:35:90:b8:1a:e6:db:77:
                    d2:92:65:98:7b:21:96:82:8c:32:46:06:a9:08:2e:
                    a6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C2:99:F7:D0:82:09:06:2F:78:94:94:BE:B8:D8:A3:91:40:F1:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7a9e8721-b5c9-3a6d-accb-c452cfd5f2d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.crl

            X509v3 Authority Key Identifier:
                keyid:4B:45:01:89:08:C1:8E:27:8C:3D:C9:E1:68:0F:80:AB:F0:E4:6B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7e90c2d3-d2e4-443e-b44e-d530fc7f3315.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f6f6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:07:0f:e1:7a:75:ee:af:e7:7c:5c:62:93:30:19:c2:a7:b4:
         f5:ea:56:28:1f:cd:ef:51:5a:c6:0e:b7:e1:0b:3b:78:87:6c:
         ea:7c:f7:b9:d3:e2:0a:65:41:ad:d2:d1:21:03:6e:6b:9b:98:
         fe:e6:87:bf:d1:e8:65:0c:29:4a:56:02:94:2d:26:33:a3:03:
         23:8e:db:2e:df:9b:83:6d:4a:14:5f:8c:c4:c8:e5:c8:0b:c3:
         30:83:39:dd:e7:9c:af:69:5d:07:34:18:2a:a6:3a:24:56:c4:
         2f:42:64:69:63:cf:c2:39:8a:ff:bc:4f:e9:a5:db:dd:17:98:
         3a:76:16:4d:29:ad:f0:7a:db:69:39:5a:e8:62:37:3c:63:41:
         6a:d3:de:97:38:71:06:f8:24:e2:06:03:e8:b4:01:88:b4:26:
         ef:49:2c:67:73:6b:d0:b6:10:e0:c3:b7:9f:cd:f8:4a:d4:0a:
         d6:b4:1c:4a:0b:82:41:63:a7:a1:25:40:ff:6e:e1:b7:7e:5b:
         1d:24:08:53:e5:f8:f6:70:d8:f6:b6:5d:dc:97:ae:1c:ef:2f:
         12:e2:31:0e:9c:69:63:df:63:20:77:16:9d:01:76:00:f3:0e:
         c5:d0:e6:2f:ec:3c:fb:64:a2:a5:44:74:81:ce:be:e9:e7:69:
         65:ed:25:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:49:08 2025 by rpki-client