Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3646ce55-3956-3ca5-8da4-7e2733ba6bae.roa
File:                     3646ce55-3956-3ca5-8da4-7e2733ba6bae.roa (raw, json)
Hash identifier:          fmcNidcveICvhbdaf241m0xUtGuxwSDO/pRf8Hye584=
Subject key identifier:   4F:9A:E0:1C:6C:32:AC:11:A2:CC:6D:79:8E:D5:21:FB:E0:C9:6F:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73F5A55C7C21E7FB59B680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3646ce55-3956-3ca5-8da4-7e2733ba6bae.roa
Signing time:             Fri 29 Nov 2024 13:58:37 +0000
ROA not before:           Fri 29 Nov 2024 13:58:37 +0000
ROA not after:            Thu 27 Feb 2025 13:58:37 +0000
asID:                     396581
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:f5:a5:5c:7c:21:e7:fb:59:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:37 2024 GMT
            Not After : Feb 27 13:58:37 2025 GMT
        Subject: CN=b22f6ed2-a2e8-4858-8246-e95714c8d405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7f:22:f1:00:f3:35:d8:45:3f:26:8d:8a:24:
                    9d:6b:07:af:3c:3a:05:92:96:02:18:a5:5b:6f:1c:
                    03:55:df:98:cf:7b:79:16:7a:4a:a6:49:df:0c:23:
                    86:68:2e:90:69:f1:47:d2:9a:80:4f:5e:82:53:d3:
                    31:6e:f8:a5:38:f2:16:fe:56:c7:80:35:67:1a:52:
                    64:6c:8d:2a:8b:a1:f4:de:47:66:26:a6:8e:4b:96:
                    20:37:5f:bc:5c:3f:04:35:83:a3:18:34:53:75:b6:
                    fc:2b:5a:1f:b0:90:09:d4:7b:d6:c3:fd:03:07:84:
                    84:6d:88:aa:dd:64:27:ea:d7:45:97:18:d5:90:a6:
                    34:20:9f:1f:eb:fc:a8:a5:3f:a0:22:dd:91:cc:59:
                    c3:9e:19:66:c8:c4:f2:07:c4:0b:c9:6f:9c:29:ba:
                    ba:ee:4b:72:9a:11:78:52:da:b7:c9:cb:50:ca:06:
                    30:10:a9:e5:02:4c:d5:aa:00:4c:c0:4b:5a:0a:5b:
                    32:0e:9a:63:0b:98:15:34:31:41:81:d7:fd:e4:ae:
                    92:84:6b:90:15:c8:62:97:a9:6b:8d:5b:9c:b3:a7:
                    26:c5:3a:0a:78:e6:ff:01:59:f9:f9:56:84:6b:58:
                    66:d6:a5:ce:db:4a:6e:83:e4:12:5c:ba:21:76:5c:
                    2b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9A:E0:1C:6C:32:AC:11:A2:CC:6D:79:8E:D5:21:FB:E0:C9:6F:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3646ce55-3956-3ca5-8da4-7e2733ba6bae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:77:d6:82:71:4f:32:71:bc:cd:00:12:45:d8:23:35:6a:f8:
         25:17:e7:9e:57:e9:64:13:7e:28:1f:d9:7e:67:46:03:c9:cc:
         c5:c4:ea:ed:af:fe:d0:d8:b3:94:47:6d:ae:ca:f9:79:ca:e5:
         a0:23:49:da:5d:09:24:69:d4:c4:38:a8:a2:50:fb:c1:d5:2d:
         be:14:eb:53:ab:b6:f1:92:93:52:ae:e1:f0:bd:c9:b0:3e:2c:
         d4:59:de:94:54:06:0d:a0:a0:12:3f:12:2a:19:c6:9e:5d:91:
         95:58:43:f4:74:2d:24:3a:4b:5f:8d:e9:da:c7:1a:5e:79:b0:
         eb:ce:d9:47:52:6c:40:d0:cc:5c:70:d4:e0:11:c1:a4:59:d3:
         32:4b:72:5b:a9:31:cd:4a:40:98:0c:26:75:9e:e2:be:4a:b5:
         0b:fb:85:a5:77:4a:45:9d:51:1b:99:66:6a:be:05:8f:1e:0e:
         46:03:25:82:49:4c:fd:13:b2:2b:24:b7:d0:95:70:cb:91:94:
         1f:1e:3f:f7:e3:dc:61:25:89:72:01:e4:77:6c:58:e4:8b:7b:
         18:a6:dd:1b:c7:71:c8:98:73:b2:a5:e9:bb:b9:db:23:9e:b5:
         cd:c3:d4:a9:02:9e:67:63:d2:36:e4:4c:01:ab:82:ee:09:ab:
         e9:c6:5e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:53 2025 by rpki-client