Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/66a0e823-cc28-3318-94f7-96d856fdaead.roa
File:                     66a0e823-cc28-3318-94f7-96d856fdaead.roa (raw, json)
Hash identifier:          FZtLr67ErlSUEkSgyQ22TcZNVLKGT+2amsUgGFBVFsI=
Subject key identifier:   59:D1:6D:0A:F2:09:CA:52:A6:FF:E2:7A:85:A0:BD:39:2D:A5:C7:0E
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584625FAC8A4861294FC1E2FD540
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/66a0e823-cc28-3318-94f7-96d856fdaead.roa
Signing time:             Sun 09 Jun 2024 01:00:24 +0000
ROA not before:           Sun 09 Jun 2024 01:00:24 +0000
ROA not after:            Sat 07 Sep 2024 01:00:24 +0000
asID:                     36040
IP address blocks:        2620:11a:a037::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:25:fa:c8:a4:86:12:94:fc:1e:2f:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jun  9 01:00:24 2024 GMT
            Not After : Sep  7 01:00:24 2024 GMT
        Subject: CN=1cc93760-488d-4a40-8819-22b7ba6b9810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4c:88:2b:30:fa:e8:c8:db:8f:b1:cf:45:e7:
                    29:7a:00:58:c6:95:b8:46:52:01:26:1c:37:1c:1b:
                    31:c8:01:30:d2:ba:ea:c2:7e:09:73:d3:24:fb:84:
                    71:39:1c:b8:76:7f:2b:d2:6b:37:f9:55:fd:d2:fb:
                    23:bb:11:56:81:49:52:f4:57:92:e2:9a:ee:41:b2:
                    ec:95:e2:66:f6:e8:78:2a:97:80:6a:b1:24:b7:82:
                    7c:23:d2:ff:34:ab:23:f4:95:4d:d6:eb:fb:7d:97:
                    1f:87:ef:c3:13:ec:7b:98:02:16:97:62:3f:64:81:
                    10:88:60:d2:83:49:5c:6a:c9:94:ef:5b:45:5e:ab:
                    5a:e6:e7:f3:71:17:86:a1:5f:b0:6b:4e:ee:c1:dd:
                    c3:24:d7:2d:ee:e4:c0:59:22:0f:14:5b:b6:61:bf:
                    59:1c:d9:34:22:0c:d8:b6:e4:1f:30:7d:9d:51:4c:
                    00:2a:28:65:a7:da:ad:04:d4:df:93:80:cd:4c:6b:
                    c2:60:b3:8e:81:6c:97:a4:5a:a2:ff:96:1e:e4:08:
                    53:7a:3d:dc:5b:8f:24:3e:2a:ca:5f:72:93:75:33:
                    f0:17:24:5f:22:89:66:a2:67:59:65:dc:f0:40:b6:
                    1c:13:d4:2c:3a:3c:a6:44:ff:dc:ac:d0:65:9e:5c:
                    33:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D1:6D:0A:F2:09:CA:52:A6:FF:E2:7A:85:A0:BD:39:2D:A5:C7:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/66a0e823-cc28-3318-94f7-96d856fdaead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:a037::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:82:34:43:1d:99:db:be:77:44:4b:74:c7:9f:94:f2:c1:0f:
         3b:1c:4c:39:cd:5f:69:30:40:74:9e:ca:28:6c:73:3e:59:8b:
         db:5a:f4:57:97:ab:a6:4f:17:dc:6b:20:a1:51:c3:03:5c:6d:
         cb:27:26:df:b4:d1:7b:09:a9:62:e3:e0:f7:4e:c6:64:9b:b1:
         e1:70:c3:f3:04:d0:aa:eb:c0:74:02:bc:76:0d:24:af:2d:19:
         be:e7:a0:13:17:9e:92:a4:b0:cf:05:75:0a:29:2c:18:b2:78:
         bd:79:1a:f5:d4:cc:92:13:f7:86:9f:4b:e5:30:92:be:43:27:
         07:f8:68:4d:e2:20:db:08:c9:e3:b6:7a:a5:35:40:84:39:9f:
         af:7e:b2:0f:37:04:3d:f0:dc:94:61:de:27:db:a2:74:68:bb:
         e4:d5:ff:cd:58:61:28:4a:9d:fc:7e:b8:92:b8:5c:d2:b4:16:
         40:a9:74:ca:39:c2:eb:90:ef:48:3b:ac:71:3a:57:09:ea:2d:
         40:5d:08:3e:53:0a:be:a4:39:26:86:06:70:bc:c3:5a:b7:af:
         c3:c0:91:0f:1d:aa:3a:32:f0:07:83:8f:d5:68:9b:01:56:04:
         eb:b8:a3:ff:c8:19:02:75:e0:cb:50:1b:93:ac:6e:ee:93:13:
         74:d8:55:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:55 2025 by rpki-client