Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9065cb0e-08d6-31a1-a469-752bc1c6075e.roa
File:                     9065cb0e-08d6-31a1-a469-752bc1c6075e.roa (raw, json)
Hash identifier:          loKcLSj7Y4m7FO5CfETo1uA9BjTcpbWGuQgFLD/dCs8=
Subject key identifier:   9B:A7:88:5D:15:3B:9E:3D:77:30:28:AC:85:47:BD:32:E2:78:93:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A7409306C88F259895F2340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9065cb0e-08d6-31a1-a469-752bc1c6075e.roa
Signing time:             Fri 29 Nov 2024 13:58:46 +0000
ROA not before:           Fri 29 Nov 2024 13:58:46 +0000
ROA not after:            Thu 27 Feb 2025 13:58:46 +0000
asID:                     396568
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:74:09:30:6c:88:f2:59:89:5f:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:46 2024 GMT
            Not After : Feb 27 13:58:46 2025 GMT
        Subject: CN=4fb2e5be-4df4-421e-a3c9-461dcf80fd04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:eb:78:f2:35:37:74:e1:f5:a5:6a:e2:f9:64:
                    aa:94:1e:d5:3e:8c:03:9b:8c:cc:1a:c5:67:e5:43:
                    22:c8:d1:62:ca:2e:7d:1b:76:d0:21:2c:53:83:bf:
                    59:cf:fc:18:f5:51:d7:d8:68:61:52:77:4b:92:64:
                    65:65:0d:27:25:fe:57:ce:5c:2f:b0:72:f0:3e:77:
                    f6:ec:b2:25:52:e7:99:08:f5:75:63:b8:54:21:db:
                    98:ef:d0:e2:ba:ae:e9:c9:6e:41:f4:e1:68:d2:37:
                    ca:1f:cd:ba:3e:aa:5d:7c:be:9c:3c:51:bd:02:09:
                    67:c4:66:1e:80:6d:5f:21:d5:5f:9d:94:29:dd:93:
                    15:67:f2:a3:67:00:c7:9b:d0:93:21:a7:58:79:b5:
                    b1:fc:dc:ff:04:d0:a0:cb:b3:f5:ab:5a:b3:bd:38:
                    92:58:95:48:e2:33:19:d5:40:fd:1a:20:1e:60:4e:
                    ce:f8:24:9a:8b:d4:d8:31:a3:ee:81:ee:63:66:df:
                    88:f8:35:77:7a:ee:36:7e:91:09:b2:8c:11:e9:ae:
                    93:19:0c:95:bb:3c:46:97:db:6d:a3:4e:af:60:5a:
                    b5:ba:61:a2:bc:da:c1:f2:8b:e7:85:5e:6a:0a:f5:
                    e7:6d:1d:d4:f8:7f:47:98:96:c5:e3:cb:f0:5a:b8:
                    4f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A7:88:5D:15:3B:9E:3D:77:30:28:AC:85:47:BD:32:E2:78:93:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9065cb0e-08d6-31a1-a469-752bc1c6075e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:99:c2:46:74:cf:b0:dc:69:9b:16:ea:26:d5:f9:f3:4e:
         df:19:8d:4a:3e:9c:c7:18:e1:bd:9b:83:37:04:d1:93:a8:3f:
         85:65:af:7f:be:8f:3c:b3:76:16:77:dd:a6:38:be:44:65:e3:
         28:ef:d0:39:70:77:6d:70:a0:76:09:b6:a2:25:e9:65:0a:c4:
         30:2f:17:1c:29:0c:7d:ef:33:1f:dd:6c:da:b9:75:fe:65:48:
         7a:46:77:80:6b:28:3a:11:ec:a4:af:f2:12:c1:12:93:c4:cc:
         db:4e:d6:3b:a4:0e:fd:ca:48:97:f6:cd:e7:5d:44:d2:4e:5d:
         82:e7:82:fc:b6:fe:f7:5a:cb:2a:e5:25:ff:01:34:33:13:c8:
         cc:c8:47:33:ea:80:a5:a1:ae:4c:39:b6:71:e5:39:ea:1a:11:
         09:73:ec:91:c9:ec:ca:db:15:0b:a6:25:e1:6a:bd:40:f9:78:
         bf:b5:8b:24:ce:34:c1:31:5f:13:4c:3f:b6:f8:6e:26:aa:ba:
         5b:ce:0f:d4:a0:03:3f:06:77:8f:d2:b0:60:c5:f7:5e:4c:95:
         30:19:cf:57:9d:1e:7f:81:e9:cd:6f:e6:ee:b1:a1:b7:65:48:
         c2:28:73:57:5e:5c:47:08:3c:b1:37:99:c3:62:65:3a:2c:e0:
         9f:ef:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:20:48 2025 by rpki-client