Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca922758-3e9f-33fb-b853-6209c42a84c0.roa
File:                     ca922758-3e9f-33fb-b853-6209c42a84c0.roa (raw, json)
Hash identifier:          bhX5TTkJi+33bJs0GakHXnbag7uCGkzXyASDVKAMOMM=
Subject key identifier:   A6:6D:64:6C:FF:C7:99:91:ED:FF:33:4F:3E:CE:E5:42:D5:BA:74:E8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285847485F4919FAAED6B160B4E360
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca922758-3e9f-33fb-b853-6209c42a84c0.roa
Signing time:             Sat 21 Sep 2024 01:30:08 +0000
ROA not before:           Sat 21 Sep 2024 01:30:08 +0000
ROA not after:            Fri 20 Dec 2024 02:30:08 +0000
asID:                     394367
IP address blocks:        2001:470:31a::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:5f:49:19:fa:ae:d6:b1:60:b4:e3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 21 01:30:08 2024 GMT
            Not After : Dec 20 02:30:08 2024 GMT
        Subject: CN=fd2672bb-896d-45f6-b870-e3b60446e547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e5:33:2c:99:66:81:0d:18:6f:e1:23:85:57:
                    f4:f9:09:a2:36:74:65:b8:db:18:85:9d:da:bc:9e:
                    74:fd:c4:59:39:d7:22:2a:31:c3:e8:75:a5:32:d5:
                    f6:43:48:aa:47:36:8b:5e:a6:aa:15:ff:c9:a8:7c:
                    c2:c3:fa:de:45:f4:53:dc:49:e3:8a:32:b2:11:63:
                    7a:eb:7d:5b:0f:68:9a:0d:ab:1c:50:ef:44:c8:f4:
                    47:ae:0b:84:6d:ab:0a:1a:f1:1b:83:d6:7c:c2:39:
                    81:4d:2a:55:f5:7f:b2:d8:db:98:2f:c0:92:53:48:
                    5e:9a:a6:c9:85:eb:6e:1d:98:e6:c5:66:c5:25:99:
                    6e:54:b6:9b:e2:15:40:8f:3d:36:dd:b0:22:98:33:
                    f5:4b:4c:53:a0:73:23:67:b6:4a:59:cd:ba:0a:6e:
                    14:a5:e0:be:cc:4d:07:d3:29:a3:b3:50:68:e2:9b:
                    8f:9b:03:29:b6:f9:5c:b7:30:a6:13:39:f8:7d:66:
                    8a:e7:31:5b:7e:09:e8:35:14:c6:6e:a8:42:ed:53:
                    33:e3:ce:08:41:6d:8e:6f:ea:04:e1:23:a3:cf:31:
                    05:6c:a6:26:9e:16:46:c8:94:59:e9:1a:28:0b:bc:
                    7a:18:96:81:6c:23:9c:24:4e:04:f4:a1:3d:1c:11:
                    77:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6D:64:6C:FF:C7:99:91:ED:FF:33:4F:3E:CE:E5:42:D5:BA:74:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ca922758-3e9f-33fb-b853-6209c42a84c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f3:f1:42:07:af:99:74:09:fe:fc:2b:24:82:e4:d5:52:be:
         7e:25:bd:9b:88:58:25:1b:ff:3d:29:2f:23:ae:fa:cd:8d:1f:
         c2:c8:58:e3:02:b7:b1:34:65:ab:0f:00:3c:7c:b5:cd:e3:4d:
         fd:7f:73:7a:a2:0f:4b:68:11:ac:9e:4e:a4:1e:d1:ff:b1:b6:
         69:f3:6d:5d:86:91:50:28:9c:89:19:03:f8:3d:cb:2a:34:e0:
         86:2f:02:2b:49:6e:26:3b:7c:eb:d1:71:80:73:f5:da:cf:41:
         8e:31:d3:3c:49:95:59:ff:1e:5d:a1:9e:aa:d0:a1:d0:70:b0:
         4f:c0:5e:2e:99:6e:64:46:f6:94:c3:84:33:e6:b4:88:d0:ca:
         9e:82:5f:ec:29:75:c2:f5:19:15:22:c1:de:37:58:a4:60:e7:
         89:6a:16:51:ac:4d:d1:b3:eb:99:b6:70:e7:3c:77:40:0c:1f:
         12:51:e7:2b:51:80:4a:fa:fa:b9:9c:a6:63:ef:03:7b:13:2d:
         1a:f7:0e:63:5c:16:fc:54:2b:a8:98:4f:e7:7d:de:8d:06:5c:
         63:04:9c:8b:51:c7:ce:fc:f1:19:64:69:fd:1d:9c:f4:f1:e9:
         9b:18:50:3e:7f:d3:6c:37:7f:64:cd:42:69:3e:62:ae:cb:bb:
         35:91:15:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:57 2025 by rpki-client