Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e798a13b-c850-3f6d-a440-31228ccb5c5d.roa
File:                     e798a13b-c850-3f6d-a440-31228ccb5c5d.roa (raw, json)
Hash identifier:          psHn7ZN2SZdR5IB5djY5snnLQBxoOr9r1kp46Oei66k=
Subject key identifier:   A2:36:4E:0E:12:39:51:44:69:55:B7:7E:4D:7B:1A:E8:4E:E9:C0:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73DF4025F7FA770ACA4F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e798a13b-c850-3f6d-a440-31228ccb5c5d.roa
Signing time:             Fri 29 Nov 2024 13:58:26 +0000
ROA not before:           Fri 29 Nov 2024 13:58:26 +0000
ROA not after:            Thu 27 Feb 2025 13:58:26 +0000
asID:                     397203
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:df:40:25:f7:fa:77:0a:ca:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:26 2024 GMT
            Not After : Feb 27 13:58:26 2025 GMT
        Subject: CN=658cdb33-5252-4317-8d87-ba59a8a251fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5b:01:05:de:38:7e:f5:cb:72:56:32:f9:bd:
                    eb:2c:e7:ab:ab:ec:88:65:60:6e:a5:94:34:22:7b:
                    c7:60:a8:bd:8d:c4:c8:e0:30:1d:1c:0d:81:5a:43:
                    38:d4:0c:3d:38:a9:41:6e:a1:04:63:e8:c5:98:4f:
                    e1:1c:ee:8b:98:51:7b:8e:57:df:16:47:be:76:9b:
                    6d:db:86:a8:1b:41:db:9a:53:a2:ec:d9:92:0f:27:
                    45:5b:16:b0:5a:21:bc:c1:f2:23:22:e5:78:18:fd:
                    14:2e:d6:a9:61:65:60:5a:99:ac:a7:aa:90:0a:68:
                    1f:be:e3:fb:b2:63:49:ba:cd:ba:af:f6:c6:2d:af:
                    90:cc:3d:cd:4a:d5:a7:58:03:12:af:cf:79:44:b2:
                    0f:02:d1:a5:67:0e:5c:09:7c:05:ef:c6:7c:e3:39:
                    83:0a:f9:30:53:10:ae:79:40:44:b5:dc:d3:75:ed:
                    98:11:04:91:5f:c4:e7:dc:cf:b4:08:95:92:f3:dc:
                    79:c7:00:f4:26:62:c7:15:d9:0b:1a:49:99:45:d5:
                    a9:ac:ef:fa:f0:79:5d:48:a1:1a:80:b7:ee:dd:ec:
                    ac:ec:62:1a:3e:36:7c:fc:00:90:a9:5a:fc:75:0f:
                    09:49:f6:e8:87:dc:aa:f1:fb:44:05:a8:3c:5a:b0:
                    3d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:36:4E:0E:12:39:51:44:69:55:B7:7E:4D:7B:1A:E8:4E:E9:C0:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e798a13b-c850-3f6d-a440-31228ccb5c5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ec:85:56:7c:78:ac:b6:18:fb:50:6d:e4:9a:cc:3f:c6:92:
         5a:1b:94:e6:4f:28:c1:c1:bb:5d:dc:04:f1:d2:20:6e:6e:9b:
         04:d3:60:4b:a7:eb:a5:4c:85:92:54:c2:09:43:7f:16:83:91:
         b7:32:02:19:0e:bb:67:b6:b9:14:4e:15:77:92:04:99:57:d0:
         53:c7:48:83:d5:b0:75:70:b0:fd:db:9d:9e:88:5b:5b:a4:c9:
         28:8d:4b:c7:53:e3:63:2f:43:7c:25:50:43:14:2d:4d:68:11:
         8d:81:ac:48:20:ed:77:61:f6:c4:cb:13:ba:19:79:bb:65:d4:
         c2:95:a7:3b:5f:eb:bd:6c:6e:da:4b:00:c2:64:27:24:7b:fe:
         78:1c:be:e5:39:d5:ba:d7:b1:3d:6c:c8:29:72:a4:99:24:78:
         76:03:bd:94:2d:c3:a8:37:07:2e:f1:7f:68:a4:a8:fd:9b:ce:
         ec:77:58:0f:ac:de:9f:41:61:b3:fe:35:d8:ff:91:0d:57:1c:
         eb:99:38:09:a7:17:80:1c:5a:69:c6:53:b9:bb:bb:08:28:69:
         21:f3:4e:53:5d:06:0c:39:48:43:3b:49:06:86:f1:bd:a4:c2:
         d4:08:47:a8:7a:fd:98:d7:77:1a:0f:fa:14:4b:cd:40:22:fb:
         56:85:64:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:37 2025 by rpki-client