Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/d923bf7c-04f5-3165-bb32-8607dd57df5c.roa
File:                     d923bf7c-04f5-3165-bb32-8607dd57df5c.roa (raw, json)
Hash identifier:          E0KbE/JSjd5YS2vJBHmlVVDekuuhEi2vqptkp3LbJ/I=
Subject key identifier:   2E:D1:2D:B7:22:C9:C8:F9:72:EE:A3:80:D3:E4:FB:95:0A:EC:8E:AF
Certificate issuer:       /CN=dd7b3d8a-c070-4037-aed5-19b7f0828ef6
Certificate serial:       010D0C9F43285845A58DF3CB002C4AF7736F4F40
Authority key identifier: 52:4E:4C:8E:17:6F:9C:C5:8D:1C:22:04:A9:6B:AD:0B:40:E2:2D:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/d923bf7c-04f5-3165-bb32-8607dd57df5c.roa
Signing time:             Wed 24 Apr 2024 01:00:28 +0000
ROA not before:           Wed 24 Apr 2024 01:00:28 +0000
ROA not after:            Tue 23 Jul 2024 01:00:28 +0000
asID:                     16509
IP address blocks:        2620:c7:6000::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a5:8d:f3:cb:00:2c:4a:f7:73:6f:4f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd7b3d8a-c070-4037-aed5-19b7f0828ef6
        Validity
            Not Before: Apr 24 01:00:28 2024 GMT
            Not After : Jul 23 01:00:28 2024 GMT
        Subject: CN=17dc7076-9e64-48fe-9e32-d66474363ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:4a:39:dd:26:85:50:4d:37:35:67:8b:16:
                    3b:07:b7:36:df:ac:40:16:ac:bd:d6:f0:9e:ea:d9:
                    5b:72:cc:59:b3:59:d2:88:de:c0:55:34:54:97:b1:
                    41:a2:e4:9c:bc:bc:6d:2c:91:0a:df:da:85:42:24:
                    15:cc:e3:3d:4b:6c:fb:ac:5a:6e:ea:48:08:d3:99:
                    80:ef:96:ac:83:db:8d:00:c0:82:82:f3:d4:0b:8a:
                    b4:60:e3:ca:88:9f:2b:a1:d0:fb:ea:11:bb:d5:3f:
                    1c:a9:33:dc:4d:85:a2:9e:ff:c8:cf:bc:18:a4:4c:
                    12:6c:89:a9:b9:73:5b:fb:b2:f5:0b:e9:a7:22:5f:
                    c1:71:63:95:8c:71:69:ff:d6:a6:4a:12:16:e4:90:
                    42:75:8a:1e:9c:6d:37:4a:66:cf:b0:ce:6c:f4:80:
                    07:17:33:5e:80:63:eb:6f:39:ef:db:7c:c7:f7:fd:
                    ec:15:1c:8f:2e:9b:b2:65:72:93:13:5e:88:96:7a:
                    a0:e0:70:0f:39:ba:bc:8c:1c:96:43:b2:df:b4:bc:
                    dc:1d:e7:73:59:7a:fc:30:f3:0f:a3:ba:4a:0a:34:
                    83:b6:99:47:2d:c2:28:0e:e3:32:ab:82:fa:94:63:
                    ac:8f:dd:d8:37:77:8a:43:31:bf:98:ca:18:08:40:
                    5a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D1:2D:B7:22:C9:C8:F9:72:EE:A3:80:D3:E4:FB:95:0A:EC:8E:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/d923bf7c-04f5-3165-bb32-8607dd57df5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.crl

            X509v3 Authority Key Identifier:
                keyid:52:4E:4C:8E:17:6F:9C:C5:8D:1C:22:04:A9:6B:AD:0B:40:E2:2D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dd7b3d8a-c070-4037-aed5-19b7f0828ef6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c7:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:fe:2f:a9:53:68:d0:f7:5e:65:75:01:74:28:8f:ee:9c:6d:
         82:b4:ca:92:75:01:9f:0f:9d:11:43:a5:37:87:db:f6:3d:06:
         91:52:d7:cc:65:3c:ae:59:30:c0:9f:ea:79:05:0a:1b:11:fe:
         36:3f:e7:47:94:eb:8e:e6:fe:38:75:30:55:0f:6e:9e:f6:ce:
         ec:85:5c:b6:ea:62:ae:74:56:be:50:ad:87:78:3f:46:bc:2f:
         83:2d:c1:71:83:f3:71:e3:ad:11:6e:94:7b:8d:22:d7:e4:ad:
         ae:02:85:d4:f5:50:8f:d5:42:52:f9:37:20:66:74:6e:62:7e:
         1b:e6:b4:05:61:e3:18:f4:2a:ef:6f:c9:44:b6:f1:79:c0:be:
         54:cd:a3:72:30:aa:57:1a:8d:ac:e7:66:b8:91:2e:86:3f:cf:
         ff:47:31:3a:c9:89:5d:88:ce:3e:61:92:dd:61:2e:db:56:4b:
         2b:18:79:60:e2:a0:1d:6b:6e:b0:d8:eb:9d:a9:5f:61:4c:e0:
         f2:13:bd:3c:6a:e1:7d:e0:f0:33:04:ab:ba:43:ce:12:3b:7b:
         95:05:fd:4f:df:74:35:52:9a:af:5f:44:d5:2c:12:35:18:da:
         99:b3:43:12:9c:49:38:39:b4:43:e9:d6:4a:8d:8b:5b:9f:66:
         ee:fe:f3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:12 2025 by rpki-client