Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53ec31dc-f310-3a75-845a-55e289fb81b7.roa
File:                     53ec31dc-f310-3a75-845a-55e289fb81b7.roa (raw, json)
Hash identifier:          GtQVg0azNPVOzw3PJwfUBepL1iKtQQVURvTQrFMjTFQ=
Subject key identifier:   85:E6:21:6A:D7:F3:59:50:07:EB:D0:F0:37:A0:0A:32:EB:67:8E:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A740014D98B68D52C5437C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53ec31dc-f310-3a75-845a-55e289fb81b7.roa
Signing time:             Fri 29 Nov 2024 13:58:42 +0000
ROA not before:           Fri 29 Nov 2024 13:58:42 +0000
ROA not after:            Thu 27 Feb 2025 13:58:42 +0000
asID:                     397212
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:74:00:14:d9:8b:68:d5:2c:54:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:42 2024 GMT
            Not After : Feb 27 13:58:42 2025 GMT
        Subject: CN=c4d1ea05-4b8f-47fd-9797-126e22fb4453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d0:10:49:31:a0:58:9c:43:49:8c:20:cf:ab:
                    b7:7e:19:63:e6:02:81:2e:ce:f8:08:66:d1:cb:67:
                    bb:8d:a7:85:8d:46:25:af:c7:a0:c1:5a:78:cd:02:
                    6e:ed:8d:8c:03:fe:ac:c7:d7:f6:26:3f:0f:8a:72:
                    26:4b:c8:da:ab:a3:7b:ec:b9:a6:11:b7:db:08:15:
                    3d:e5:ab:96:58:ff:ce:d3:b7:2c:16:5e:6a:b9:b7:
                    7c:91:53:df:cb:0a:82:c8:af:56:2e:ef:ad:b3:13:
                    cc:bc:93:cf:4c:bd:4a:9f:62:5c:fc:d6:6c:e2:2a:
                    51:5f:d2:62:ac:15:24:83:16:78:3e:e7:c8:66:98:
                    3f:bc:4a:5d:f0:25:f5:3b:23:22:f3:af:83:ce:f6:
                    45:28:fd:41:9b:1f:d1:b7:b2:87:c9:c1:c0:6a:3d:
                    d8:af:c7:30:98:de:44:5f:f2:aa:1d:2e:0e:b2:7a:
                    93:b3:ed:b1:ee:38:49:c8:c6:c4:e9:4e:58:dd:7b:
                    b8:c4:a2:fd:13:9b:b9:e5:81:d1:e6:28:c2:fc:3e:
                    c6:33:56:e6:23:70:c1:32:06:83:5a:05:54:93:e5:
                    32:b2:71:12:c2:49:8f:f5:4c:0e:26:41:56:a6:e4:
                    b2:b2:22:61:52:2b:00:3b:5d:cb:bb:c7:8d:f1:36:
                    98:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E6:21:6A:D7:F3:59:50:07:EB:D0:F0:37:A0:0A:32:EB:67:8E:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53ec31dc-f310-3a75-845a-55e289fb81b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:87:8a:4d:7a:fc:fb:7c:9c:54:15:60:42:f5:ee:56:19:13:
         a6:7a:6a:a7:97:c0:dd:65:e2:05:89:9c:ba:81:1c:e3:42:21:
         03:95:b9:1c:99:b7:df:c6:c8:0b:6f:ad:08:3c:ad:23:a9:98:
         75:bd:a4:bd:1f:30:16:b2:2a:39:68:98:d2:8c:8d:82:77:d2:
         3d:06:e3:49:8d:0b:35:02:65:7f:35:46:73:24:42:c9:b6:2f:
         e0:84:8b:78:be:30:88:91:96:de:a0:ed:42:9f:93:a6:af:bc:
         1c:e0:77:4d:e5:5e:2e:36:0e:55:f6:57:ad:86:6e:e6:00:bd:
         df:5e:65:07:d7:93:05:6e:89:4a:23:70:92:90:42:f2:fc:a4:
         46:9d:a2:c9:10:f6:9d:47:e4:93:e8:ae:6b:eb:29:46:9d:fb:
         fe:ee:95:a5:e5:96:32:2f:46:b5:70:f4:a0:20:cf:2c:99:c9:
         58:28:9d:d4:24:24:90:01:4b:95:99:4e:c6:9f:4f:9a:48:f5:
         e1:46:db:29:1a:d4:3e:17:84:9d:6b:be:16:a4:b7:b5:5c:bd:
         ef:8f:c7:b3:95:72:ca:0d:db:8d:eb:9a:cd:59:ff:a8:9b:ac:
         47:36:75:62:1f:4a:85:e3:ed:b9:1d:e2:69:7a:51:cb:e9:62:
         c4:8b:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:09 2025 by rpki-client