Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05ef6c61-8722-3f52-8031-ace3f205f16d.roa
File:                     05ef6c61-8722-3f52-8031-ace3f205f16d.roa (raw, json)
Hash identifier:          IwvhDcQtVWZGRyUgu4GqVxf7i8YjwyOPgfbqxU6LThw=
Subject key identifier:   DC:45:1A:AA:7B:0F:53:8B:09:6C:15:CE:43:5B:1E:23:4C:AC:29:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73E9032F07DB8B04844A66
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05ef6c61-8722-3f52-8031-ace3f205f16d.roa
Signing time:             Fri 29 Nov 2024 13:58:31 +0000
ROA not before:           Fri 29 Nov 2024 13:58:31 +0000
ROA not after:            Thu 27 Feb 2025 13:58:31 +0000
asID:                     396597
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:e9:03:2f:07:db:8b:04:84:4a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:31 2024 GMT
            Not After : Feb 27 13:58:31 2025 GMT
        Subject: CN=a87a83a0-d2b3-46eb-b398-7e438e9c8215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:12:94:64:28:2c:f1:9f:37:49:80:85:a9:0a:
                    fc:ba:62:49:47:83:35:1e:60:5e:68:d6:2f:2d:da:
                    25:26:5a:87:c1:f1:d3:a5:bf:93:a1:7c:c5:27:ff:
                    c0:3f:22:c5:18:b1:26:91:03:6e:34:fe:65:16:d9:
                    d5:2d:fa:dc:1c:ff:a5:b5:f7:91:6d:2d:1b:b1:18:
                    b0:8f:b8:73:16:bd:4a:8a:1f:06:41:00:c3:28:8b:
                    79:c3:c2:e5:a5:4a:7f:61:8f:fc:85:11:94:44:d6:
                    81:af:57:a3:9b:16:34:42:7d:10:99:12:9a:1f:43:
                    81:7a:29:d0:61:2b:a6:d2:f9:4e:17:57:8c:03:68:
                    3d:2e:45:03:67:4d:05:2c:63:0a:72:df:36:3c:fb:
                    9f:d5:d5:63:5b:7b:f2:47:ba:b2:20:92:2b:fb:20:
                    29:2f:fb:d7:e1:34:0e:70:f0:e3:a6:e4:08:bb:58:
                    7d:ad:f8:24:f7:1f:0f:00:ff:7c:2a:38:16:89:77:
                    c1:b6:b8:ba:55:35:8c:8e:ec:7e:e1:44:04:92:f7:
                    7f:63:0a:8e:8f:5a:85:c9:c3:62:59:22:cc:bd:65:
                    e3:d2:19:60:ad:67:06:af:e1:f9:b1:cd:b8:94:ef:
                    f7:6d:40:32:a5:0c:b8:05:8d:85:4e:7c:c4:a7:30:
                    e7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:45:1A:AA:7B:0F:53:8B:09:6C:15:CE:43:5B:1E:23:4C:AC:29:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/05ef6c61-8722-3f52-8031-ace3f205f16d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:46:89:57:17:23:2f:f7:52:d4:53:01:2e:c7:b6:24:4a:c5:
         76:2e:ea:2b:78:86:bf:d7:26:48:88:78:6e:36:7e:4d:0b:0d:
         04:1f:d6:fe:aa:c6:da:15:57:97:3e:76:d8:b4:59:21:65:8b:
         60:59:f2:d4:bf:f3:08:7d:30:16:79:54:a0:1f:99:18:5a:0e:
         0a:b7:42:76:45:f0:0d:61:2b:89:4f:4e:19:63:7c:23:f7:c7:
         49:9e:52:02:6f:31:74:1e:3c:f8:a8:53:94:f3:41:7d:df:a6:
         23:e4:2a:b3:ed:df:db:10:48:71:e3:62:eb:f7:34:61:64:89:
         c3:22:84:a2:b2:ea:6f:3e:c9:55:17:15:f2:c9:92:ab:fc:00:
         59:73:b2:93:ab:52:0f:a8:91:dd:15:f1:09:d9:08:d3:70:d2:
         a3:1f:97:23:dc:65:e4:f5:72:89:ae:7c:4c:be:f9:54:c8:e3:
         ad:d5:dd:f3:7e:b7:ce:f1:fa:15:d1:e8:fd:11:62:63:03:7a:
         a6:dc:c0:97:28:c9:8d:19:62:0b:c9:3e:76:52:ae:32:b3:a1:
         64:c8:ea:c2:52:d4:8c:2f:d4:45:60:00:d7:5d:81:1c:f7:81:
         56:80:19:18:04:c2:72:94:63:e1:e2:f1:15:f5:dc:2c:36:cc:
         16:a2:19:87
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgKc+kDLwfbiwSESmYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTgzMVoXDTI1MDIyNzEzNTgzMVowLzEtMCsGA1UEAxMk
YTg3YTgzYTAtZDJiMy00NmViLWIzOTgtN2U0MzhlOWM4MjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hKUZCgs8Z83SYCFqQr8umJJR4M1HmBeaNYv
LdolJlqHwfHTpb+ToXzFJ//APyLFGLEmkQNuNP5lFtnVLfrcHP+ltfeRbS0bsRiw
j7hzFr1Kih8GQQDDKIt5w8LlpUp/YY/8hRGURNaBr1ejmxY0Qn0QmRKaH0OBeinQ
YSum0vlOF1eMA2g9LkUDZ00FLGMKct82PPuf1dVjW3vyR7qyIJIr+yApL/vX4TQO
cPDjpuQIu1h9rfgk9x8PAP98KjgWiXfBtri6VTWMjux+4UQEkvd/YwqOj1qFycNi
WSLMvWXj0hlgrWcGr+H5sc24lO/3bUAypQy4BY2FTnzEpzDnowIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNxFGqp7D1OLCWwVzkNbHiNMrCk4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDVlZjZjNjEtODcyMi0z
ZjUyLTgwMzEtYWNlM2YyMDVmMTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALtGiVcXIy/3UtRTAS7HtiRKxXYu6it4hr/XJkiIeG42fk0LDQQf
1v6qxtoVV5c+dti0WSFli2BZ8tS/8wh9MBZ5VKAfmRhaDgq3QnZF8A1hK4lPThlj
fCP3x0meUgJvMXQePPioU5TzQX3fpiPkKrPt39sQSHHjYuv3NGFkicMihKKy6m8+
yVUXFfLJkqv8AFlzspOrUg+okd0V8QnZCNNw0qMflyPcZeT1comufEy++VTI463V
3fN+t87x+hXR6P0RYmMDeqbcwJcoyY0ZYgvJPnZSrjKzoWTI6sJS1Iwv1EVgANdd
gRz3gVaAGRgEwnKUY+Hi8RX13Cw2zBaiGYc=
-----END CERTIFICATE-----