Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/974122b3-b213-3c00-a851-950ced436df5.roa
File:                     974122b3-b213-3c00-a851-950ced436df5.roa (raw, json)
Hash identifier:          LF3kZBT5mPj+lZhplxKs23oKIzOl4jPZO5Mi/HDQKi4=
Subject key identifier:   A9:EA:4F:34:F9:3B:DE:53:B3:F4:1E:D4:06:8E:2A:6F:5D:A5:03:1D
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328583986395E57EB46817E707E4540
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/974122b3-b213-3c00-a851-950ced436df5.roa
Signing time:             Thu 08 Apr 2021 04:00:00 +0000
ROA not before:           Thu 08 Apr 2021 04:00:00 +0000
ROA not after:            Tue 12 Jul 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2605:dd40:8880::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:86:39:5e:57:eb:46:81:7e:70:7e:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Apr  8 04:00:00 2021 GMT
            Not After : Jul 12 04:00:00 2022 GMT
        Subject: CN=c6f9aaf6-6c98-48c4-abe1-7dd2de94f7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:22:55:74:1d:d0:ec:d0:0d:87:20:9a:76:82:
                    65:d9:be:23:d4:5d:9b:96:72:7f:ae:ad:7e:1d:47:
                    72:54:4b:39:e4:be:04:2c:fe:9e:f8:31:e5:3d:83:
                    42:61:d2:7f:d7:d9:72:43:e8:f1:5f:93:c8:2c:fb:
                    ee:69:5b:24:32:93:73:06:07:23:9f:50:bb:b1:f8:
                    2e:27:3a:ce:40:b2:33:fd:a9:74:3e:21:56:c3:67:
                    f7:73:72:e1:ac:d1:37:04:8a:cb:ed:11:96:a0:c3:
                    c2:fc:ca:6d:39:15:f6:21:f1:8f:ab:93:ec:a9:f3:
                    1f:09:9f:bf:e7:6b:be:db:8d:64:cf:45:c1:81:b9:
                    c5:e3:5d:8a:e6:6e:d3:94:3f:e2:7f:e7:c8:fa:d3:
                    12:3e:52:97:12:1e:a2:ec:15:75:2f:22:b4:c9:69:
                    ea:c9:32:78:20:19:53:e8:f6:ab:c8:93:aa:39:58:
                    c9:14:09:83:0e:74:db:88:6e:c9:e1:db:00:9b:dc:
                    cb:01:b0:69:2d:16:cf:99:d1:c0:f9:e3:07:88:1b:
                    86:08:0d:9b:fb:17:ee:c3:1d:23:f2:fd:c3:3b:29:
                    ad:0c:ac:be:73:30:e3:1e:13:d5:2a:4c:55:41:c5:
                    d4:17:41:b6:e5:83:82:58:4d:76:86:85:f2:04:61:
                    a7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EA:4F:34:F9:3B:DE:53:B3:F4:1E:D4:06:8E:2A:6F:5D:A5:03:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/974122b3-b213-3c00-a851-950ced436df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8880::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:36:23:43:1f:64:69:ee:c5:a5:30:b8:26:b5:f9:aa:42:8e:
         4f:2b:18:42:4b:1a:93:02:a7:66:2f:60:24:7a:9e:97:5c:7a:
         24:9e:47:23:ba:e8:96:23:14:d6:4d:34:c4:a6:f3:77:db:71:
         3d:9a:74:ca:72:c4:71:f2:f5:05:91:14:50:18:fd:35:c4:9a:
         6e:e4:12:04:e5:bf:a1:42:d9:c2:24:71:17:b0:06:c2:dd:d7:
         75:42:0f:36:11:64:2a:7d:1b:5e:ab:e3:b7:4e:c5:b0:0a:26:
         7d:9a:84:01:2f:2f:69:c0:64:4b:11:77:af:ab:fc:57:8f:f2:
         c0:e0:ea:ab:33:8c:88:be:b4:a4:ed:88:84:f0:f5:c4:e8:bc:
         1c:b3:30:75:cc:c5:9e:c5:af:a1:88:ec:70:41:8d:c7:d6:83:
         73:9b:34:e4:7b:5b:1b:5d:66:8c:f6:2b:15:73:48:6e:ad:fa:
         84:3d:d4:81:b3:9a:f3:e8:15:42:30:8a:16:62:74:62:d3:90:
         1b:3b:c1:7f:c7:24:5d:dd:50:d3:25:83:c0:df:ec:70:6e:e1:
         09:c0:2a:42:0a:c1:18:ba:48:a1:d8:2d:e1:7d:c1:27:00:36:
         33:70:d3:e2:7e:c7:e7:4e:1d:8e:d2:d0:7d:cf:62:19:e8:b7:
         9f:b2:56:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:09:40 2025 by rpki-client