Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0de40398-7429-3dbd-8f4b-0ddf0d9fcfa1.roa
File:                     0de40398-7429-3dbd-8f4b-0ddf0d9fcfa1.roa (raw, json)
Hash identifier:          yzlCEwjO62AhSCzAj5+p5GaChlQjDyZ57FvEk2ueqU8=
Subject key identifier:   58:8D:95:6E:21:CB:C7:E5:3E:CF:2A:89:45:2E:3D:D2:E2:C5:2C:FE
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328583E4D8585E147535080248B75C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0de40398-7429-3dbd-8f4b-0ddf0d9fcfa1.roa
Signing time:             Sun 19 Jun 2022 12:00:00 +0000
ROA not before:           Sun 19 Jun 2022 12:00:00 +0000
ROA not after:            Tue 20 Jun 2023 04:00:00 +0000
asID:                     0
IP address blocks:        2620:74:ef::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:4d:85:85:e1:47:53:50:80:24:8b:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun 19 12:00:00 2022 GMT
            Not After : Jun 20 04:00:00 2023 GMT
        Subject: CN=2b6878da-5edb-4029-ad7d-f018ca1ba3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b5:42:ce:81:b5:71:8c:18:c3:ea:c2:77:c6:
                    c3:78:cf:06:bb:0e:33:8b:8d:5f:3b:83:58:6e:75:
                    5d:44:91:e8:de:97:40:54:67:68:c6:0d:2b:58:2b:
                    08:ef:0d:11:84:f7:16:7a:49:4d:e8:e4:b7:87:45:
                    e6:13:30:f4:12:74:db:01:d0:07:61:09:c0:73:34:
                    6e:dd:40:21:66:80:c2:51:88:2b:f9:90:64:ee:e2:
                    34:4c:06:e8:91:c2:ac:af:23:88:bd:26:a0:b0:d7:
                    95:86:03:9e:32:3a:35:12:49:47:49:11:d9:fc:2d:
                    56:27:b1:08:31:31:8f:af:09:e5:6a:9d:54:97:40:
                    20:6b:a0:aa:2f:ea:eb:51:45:1c:eb:b4:5e:1a:c8:
                    97:59:bb:4c:8d:e5:d1:20:5c:c3:dd:a7:c8:28:34:
                    28:2c:a4:0c:9e:c2:d7:f6:4c:8e:c8:1c:e4:98:85:
                    cb:87:3a:bc:81:2d:32:3f:23:2f:b7:d1:6f:bb:2e:
                    42:d3:e3:ff:88:81:ea:bb:25:7f:4d:a6:0c:b1:c2:
                    a1:40:0f:60:19:89:aa:b4:cd:de:3f:01:15:9a:29:
                    b5:dd:39:ec:60:43:27:38:81:4e:38:e2:be:fe:b4:
                    50:3a:7e:fb:94:db:b9:4b:6b:f2:28:2d:95:bf:d8:
                    0e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8D:95:6E:21:CB:C7:E5:3E:CF:2A:89:45:2E:3D:D2:E2:C5:2C:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/0de40398-7429-3dbd-8f4b-0ddf0d9fcfa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:ef::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:03:2b:f3:5f:d9:82:c1:e0:77:23:dd:ed:03:b8:ec:9f:fb:
         38:a0:79:89:2b:0b:40:36:33:09:90:66:1f:35:a0:c1:83:4c:
         6f:36:db:20:d7:d0:e0:c3:56:c9:16:12:90:ac:1b:06:50:e6:
         18:2d:60:60:78:fc:f9:b1:70:ca:bc:9a:36:20:f3:aa:2a:4a:
         7b:50:24:7a:82:e6:b0:b9:48:35:cf:75:d7:44:ca:44:5f:bb:
         cc:a6:27:9a:53:5d:9d:4b:a9:01:81:66:f8:2a:fa:a2:c4:53:
         3a:a1:11:b8:11:b7:12:94:d6:23:b8:d0:a9:cd:f3:45:88:5d:
         2f:31:3f:c7:0a:5a:3a:ba:fc:b6:75:a3:b4:c3:28:eb:9a:5f:
         40:df:b2:51:b1:f2:29:e8:aa:50:de:e3:40:3c:c5:30:c4:54:
         8d:8a:c8:37:48:7e:df:1e:38:4d:29:f3:ff:f4:2a:57:58:d1:
         20:af:90:cb:b7:8a:f2:69:91:da:9f:4b:09:98:79:ec:9c:49:
         8b:58:4e:86:94:4d:04:b9:e4:57:d0:e5:4a:72:7e:47:fa:eb:
         4e:a6:e7:d8:b4:d0:76:c0:98:00:a8:8c:ca:32:6a:05:38:db:
         b4:31:5c:4c:cf:38:ea:bb:e9:b7:7c:b6:67:5b:e3:52:33:a4:
         8a:e0:42:08
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD5NhYXhR1NQgCSLdcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTIyMDYxOTEyMDAwMFoXDTIzMDYyMDA0MDAwMFowLzEtMCsGA1UEAxMk
MmI2ODc4ZGEtNWVkYi00MDI5LWFkN2QtZjAxOGNhMWJhM2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrVCzoG1cYwYw+rCd8bDeM8Guw4zi41fO4NY
bnVdRJHo3pdAVGdoxg0rWCsI7w0RhPcWeklN6OS3h0XmEzD0EnTbAdAHYQnAczRu
3UAhZoDCUYgr+ZBk7uI0TAbokcKsryOIvSagsNeVhgOeMjo1EklHSRHZ/C1WJ7EI
MTGPrwnlap1Ul0Aga6CqL+rrUUUc67ReGsiXWbtMjeXRIFzD3afIKDQoLKQMnsLX
9kyOyBzkmIXLhzq8gS0yPyMvt9Fvuy5C0+P/iIHquyV/TaYMscKhQA9gGYmqtM3e
PwEVmim13TnsYEMnOIFOOOK+/rRQOn77lNu5S2vyKC2Vv9gOZQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFiNlW4hy8flPs8qiUUuPdLixSz+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMGRlNDAzOTgtNzQyOS0z
ZGJkLThmNGItMGRkZjBkOWZjZmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdADv
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAUDK/Nf2YLB4Hcj3e0DuOyf+zigeYkrC0A2MwmQZh81oMGDTG82
2yDX0ODDVskWEpCsGwZQ5hgtYGB4/PmxcMq8mjYg86oqSntQJHqC5rC5SDXPdddE
ykRfu8ymJ5pTXZ1LqQGBZvgq+qLEUzqhEbgRtxKU1iO40KnN80WIXS8xP8cKWjq6
/LZ1o7TDKOuaX0DfslGx8inoqlDe40A8xTDEVI2KyDdIft8eOE0p8//0KldY0SCv
kMu3ivJpkdqfSwmYeeycSYtYToaUTQS55FfQ5Upyfkf6606m59i00HbAmACojMoy
agU427QxXEzPOOq76bd8tmdb41IzpIrgQgg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:56 2024 by rpki-client on console-fra.rpki-client.org