Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e38c368-c703-3bba-a51d-7e2883f54b11.roa
File:                     4e38c368-c703-3bba-a51d-7e2883f54b11.roa (raw, json)
Hash identifier:          idYrpeh90v7hmcED45e9TPBCw9teprzNQsaVQqqrXj4=
Subject key identifier:   B3:11:FC:63:88:02:C0:40:BE:38:CB:29:39:1C:3D:F0:CB:2A:0B:DD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73FA8F1459F7A59BBE2400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e38c368-c703-3bba-a51d-7e2883f54b11.roa
Signing time:             Fri 29 Nov 2024 13:58:39 +0000
ROA not before:           Fri 29 Nov 2024 13:58:39 +0000
ROA not after:            Thu 27 Feb 2025 13:58:39 +0000
asID:                     397196
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:fa:8f:14:59:f7:a5:9b:be:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:39 2024 GMT
            Not After : Feb 27 13:58:39 2025 GMT
        Subject: CN=dc252ea2-72ae-400c-a397-02b4f9d8dbb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:37:08:bd:ff:d2:66:aa:d7:48:b8:35:40:
                    aa:a0:aa:bc:6b:42:63:21:97:e1:21:96:f0:87:9a:
                    cd:f6:c3:82:8d:33:7b:c3:c3:c0:9b:51:99:bf:bb:
                    6d:db:0c:fc:70:d2:51:18:0e:4a:72:ff:af:dc:ac:
                    ab:a5:67:01:d5:d4:6e:61:f6:67:bb:f4:ce:51:03:
                    bb:16:32:88:39:bb:c5:a9:d1:7d:74:51:d9:2c:e4:
                    43:74:5d:06:a6:6f:49:ab:38:de:26:45:81:c0:6a:
                    a3:c1:11:19:76:5e:90:2f:3e:94:ae:28:9e:82:93:
                    d2:3c:6f:be:1f:71:48:e0:73:be:20:98:1c:7d:4a:
                    fc:c6:39:32:14:b1:ed:b0:9f:87:49:98:66:15:62:
                    e8:2f:d9:9d:57:a3:ba:9b:5b:1c:2c:c7:8c:91:5a:
                    f1:d5:ae:fb:86:4b:2d:4a:28:69:cb:7c:35:da:09:
                    b6:2d:d0:31:3b:27:82:f7:d8:6a:e4:2f:66:97:44:
                    6e:bc:fb:7d:57:09:eb:8d:6d:06:04:f2:10:79:6f:
                    ae:a1:55:6e:0b:05:2a:54:ae:48:7b:96:db:a0:82:
                    2e:41:c1:e5:68:57:5f:cb:40:0a:2f:e7:5d:95:55:
                    19:54:d3:24:20:3d:50:15:6a:5a:05:36:6a:99:4a:
                    65:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:11:FC:63:88:02:C0:40:BE:38:CB:29:39:1C:3D:F0:CB:2A:0B:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e38c368-c703-3bba-a51d-7e2883f54b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e4:b8:f2:89:1c:97:db:2b:27:53:d4:ab:50:37:f2:84:e2:
         9e:4f:76:0f:e3:4b:93:b2:00:66:ff:b6:26:d8:91:f7:3c:54:
         4d:48:0c:45:d6:77:30:29:71:a0:06:7c:6e:b6:44:dc:22:dd:
         61:35:4c:10:02:43:1f:7f:06:8e:34:96:86:77:43:cc:6b:15:
         14:64:82:5c:c5:e4:db:76:5e:cd:8f:35:7f:4a:6f:e3:eb:f8:
         bf:f8:fb:e6:48:31:cf:de:ba:a0:88:24:32:c3:f7:52:b5:ee:
         e7:3b:29:2e:35:be:d7:52:0a:5c:73:9d:a6:d7:c9:cb:69:45:
         2c:4f:10:52:3b:30:fd:ee:ae:e2:dd:80:e4:b4:6c:be:60:0e:
         38:55:e0:02:1c:fe:3f:c5:07:9d:04:82:16:9b:83:57:e4:ed:
         49:e6:fc:28:a1:ef:7c:cb:81:96:72:18:04:05:7b:7e:e3:d9:
         87:54:e0:e1:6f:d6:16:85:31:a0:52:95:9f:5f:a7:77:74:4e:
         0f:95:f6:d2:f7:3c:16:4d:5a:0d:f6:5f:70:a9:e0:5f:fa:db:
         9b:c4:88:ca:cb:5f:d4:48:88:18:19:31:6c:4a:4c:04:bc:22:
         88:cc:93:e8:82:14:bd:0b:c0:b3:c2:a9:ee:20:54:e6:3c:41:
         3c:63:51:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----