Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e230a9c7-713f-3c08-80f4-fc06f10d282c.roa
File:                     e230a9c7-713f-3c08-80f4-fc06f10d282c.roa (raw, json)
Hash identifier:          mqcFIH3hiPR9C2wx3re/4gOPsKheYWOKh4hWmVKT/dc=
Subject key identifier:   3A:40:D9:B2:34:7B:59:8A:77:6C:DC:7A:54:6F:02:83:E7:35:0C:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73E72F630FFF513449C380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e230a9c7-713f-3c08-80f4-fc06f10d282c.roa
Signing time:             Fri 29 Nov 2024 13:58:30 +0000
ROA not before:           Fri 29 Nov 2024 13:58:30 +0000
ROA not after:            Thu 27 Feb 2025 13:58:30 +0000
asID:                     36622
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:e7:2f:63:0f:ff:51:34:49:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:30 2024 GMT
            Not After : Feb 27 13:58:30 2025 GMT
        Subject: CN=7ffa0109-0e0b-42c0-824d-79a5958d0463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cc:fb:6e:be:bc:bc:6f:9e:03:5d:c9:20:b3:
                    dd:ba:ad:8c:92:81:8a:8d:f0:7c:c5:06:f3:0d:65:
                    dd:25:8f:a1:6e:0c:d0:9a:19:3e:41:f7:86:d7:73:
                    8b:17:f2:f2:b8:a6:d5:a7:41:17:1b:79:44:af:d1:
                    fb:69:02:b8:75:e5:06:2e:e0:7b:b3:0f:41:a4:c8:
                    f2:09:9a:08:75:98:77:85:f0:58:b2:7e:54:15:10:
                    7c:60:0a:de:c3:23:13:c4:54:6a:90:62:b3:38:bb:
                    50:63:73:0e:49:ae:d6:34:cb:b0:5f:84:97:05:21:
                    c7:3a:4f:5e:95:aa:50:51:52:5c:e7:37:93:0e:e5:
                    8f:4b:4a:b3:2f:e4:1b:7b:b3:15:09:57:ea:f3:95:
                    3b:2f:d9:fa:13:50:0a:82:cc:be:f4:68:54:1d:85:
                    81:ab:de:69:6b:f1:e5:a9:2e:48:94:fd:6c:55:47:
                    89:62:2b:c7:41:aa:cb:8c:84:8a:65:09:4b:bd:aa:
                    b6:d9:9f:e3:8b:e7:a7:7c:a8:e6:cd:b4:50:f5:b7:
                    10:c8:b7:ef:4b:d3:9a:d0:55:0b:17:b4:61:e9:5c:
                    8e:7d:3d:fa:23:f7:bd:67:28:48:b0:8b:4c:30:fd:
                    f1:2e:37:7f:9f:e0:7a:e5:20:54:79:ef:67:60:c7:
                    5d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:40:D9:B2:34:7B:59:8A:77:6C:DC:7A:54:6F:02:83:E7:35:0C:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e230a9c7-713f-3c08-80f4-fc06f10d282c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:6c:50:55:60:ca:84:e6:59:59:8e:0e:12:3d:8c:d3:48:5e:
         f5:15:47:33:99:4b:03:83:78:6b:bd:ba:60:f0:8a:41:fa:c0:
         6b:57:b3:09:d1:7b:c8:d2:60:64:48:b2:38:2b:fd:4a:4e:41:
         bb:d1:bb:58:b8:2d:e2:86:cb:55:e2:c1:84:2e:d0:37:d5:94:
         ed:d1:36:63:63:8b:28:e1:ee:3b:ec:41:b6:38:e9:10:95:e1:
         ed:81:92:c8:a6:73:df:73:b5:90:c2:72:ab:d9:cf:f5:f8:57:
         fb:0a:f7:e6:3f:98:2a:ba:b9:40:27:c5:fb:13:b1:8c:91:f0:
         37:c7:c2:cb:e9:84:f7:91:b6:ec:eb:0d:a8:59:49:b5:65:a4:
         fc:54:28:a2:27:04:28:b9:97:61:4b:ee:86:18:16:71:d5:c9:
         fb:f2:a1:46:5e:ed:f2:71:2d:6f:21:6c:1a:fb:56:0f:00:6c:
         18:0d:c7:8a:a4:5a:0c:40:d7:d7:a9:33:e4:c9:ef:d7:3f:19:
         5b:61:43:f9:e8:c2:b0:9e:5d:08:43:e3:67:ae:5d:d1:af:fb:
         f3:37:42:46:6e:82:12:e4:c8:72:c5:5e:81:80:6e:eb:30:49:
         e0:aa:3b:12:68:31:62:1e:3e:bf:16:28:52:2b:10:f2:53:56:
         bf:59:89:38
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEgKc+cvYw//UTRJw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI0MTEyOTEzNTgzMFoXDTI1MDIyNzEzNTgzMFowLzEtMCsGA1UEAxMk
N2ZmYTAxMDktMGUwYi00MmMwLTgyNGQtNzlhNTk1OGQwNDYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksz7br68vG+eA13JILPduq2MkoGKjfB8xQbz
DWXdJY+hbgzQmhk+QfeG13OLF/LyuKbVp0EXG3lEr9H7aQK4deUGLuB7sw9BpMjy
CZoIdZh3hfBYsn5UFRB8YArewyMTxFRqkGKzOLtQY3MOSa7WNMuwX4SXBSHHOk9e
lapQUVJc5zeTDuWPS0qzL+Qbe7MVCVfq85U7L9n6E1AKgsy+9GhUHYWBq95pa/Hl
qS5IlP1sVUeJYivHQarLjISKZQlLvaq22Z/ji+enfKjmzbRQ9bcQyLfvS9Oa0FUL
F7Rh6VyOfT36I/e9ZyhIsItMMP3xLjd/n+B65SBUee9nYMddEQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDpA2bI0e1mKd2zcelRvAoPnNQwgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTIzMGE5YzctNzEzZi0z
YzA4LTgwZjQtZmMwNmYxMGQyODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABBsUFVgyoTmWVmODhI9jNNIXvUVRzOZSwODeGu9umDwikH6wGtX
swnRe8jSYGRIsjgr/UpOQbvRu1i4LeKGy1XiwYQu0DfVlO3RNmNjiyjh7jvsQbY4
6RCV4e2Bksimc99ztZDCcqvZz/X4V/sK9+Y/mCq6uUAnxfsTsYyR8DfHwsvphPeR
tuzrDahZSbVlpPxUKKInBCi5l2FL7oYYFnHVyfvyoUZe7fJxLW8hbBr7Vg8AbBgN
x4qkWgxA19epM+TJ79c/GVthQ/nowrCeXQhD42euXdGv+/M3QkZughLkyHLFXoGA
buswSeCqOxJoMWIePr8WKFIrEPJTVr9ZiTg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:21 2025 by rpki-client