Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/a9e62ab8-35eb-33e3-b286-6fc0823cf157.roa
File:                     a9e62ab8-35eb-33e3-b286-6fc0823cf157.roa (raw, json)
Hash identifier:          X1z9mXR07BSvaoQ8oguj0IHi5sILh+63U4zQJaVrXf0=
Subject key identifier:   A5:EA:01:62:62:F8:99:54:4F:5A:07:06:FC:D1:96:C3:9C:83:2C:81
Certificate issuer:       /CN=611dbbed-256e-489b-8656-320fdaca032f
Certificate serial:       010D0C9F43285837ACDE4310D87E66600BF93A80
Authority key identifier: 34:01:17:47:F4:DB:06:E2:96:FB:D7:3F:F5:17:E1:AF:C6:1C:D6:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/a9e62ab8-35eb-33e3-b286-6fc0823cf157.roa
Signing time:             Tue 20 Oct 2020 04:00:00 +0000
ROA not before:           Tue 20 Oct 2020 04:00:00 +0000
ROA not after:            Mon 23 Jan 2023 05:00:00 +0000
asID:                     11796
IP address blocks:        2603:b0e0:cafe::/48 maxlen: 48
                          2603:b0e0:efac::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:37:ac:de:43:10:d8:7e:66:60:0b:f9:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611dbbed-256e-489b-8656-320fdaca032f
        Validity
            Not Before: Oct 20 04:00:00 2020 GMT
            Not After : Jan 23 05:00:00 2023 GMT
        Subject: CN=5bdc1d2f-399f-4fcb-a032-8a267d22d23c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:78:dd:a0:da:48:23:b8:c1:9a:58:01:cb:1a:
                    79:73:7f:48:2b:b7:a7:37:8d:fb:1a:ba:2e:90:89:
                    87:87:cd:73:c5:26:bd:8f:19:ba:8f:54:3a:e9:ae:
                    3b:f3:ed:9e:fb:95:6e:77:5c:23:eb:55:34:16:44:
                    8a:40:3d:28:c2:4c:7d:e9:fb:9c:7e:4d:10:c8:02:
                    5f:0e:9e:96:e5:a5:dd:d6:20:91:31:94:be:ad:36:
                    25:f1:f4:f6:8e:bb:24:ce:ef:a5:ad:09:f8:f8:d5:
                    1d:6f:89:1c:01:aa:b4:16:ad:68:b9:27:f4:c6:5f:
                    2a:cf:92:0c:68:a3:31:a8:4c:d7:0f:99:0c:d2:e5:
                    c0:10:cc:09:38:e7:33:52:34:1f:77:74:e0:eb:51:
                    1f:ff:a0:dc:c4:5a:d5:79:5e:ce:1b:b8:8a:bf:9c:
                    84:7b:a7:7f:33:41:58:ad:7b:85:92:76:19:ff:2a:
                    2c:d1:0a:1c:58:3e:a7:2b:ca:10:d6:cd:4f:a2:27:
                    e3:b7:41:d7:cc:d6:c7:63:27:7a:1f:25:1f:02:49:
                    2c:ca:2a:ee:22:76:de:bc:11:42:40:28:50:32:76:
                    fd:70:c6:ad:c2:b4:92:1a:32:2c:77:65:c4:91:da:
                    04:75:6f:6b:42:40:63:22:aa:66:90:d7:fe:21:0f:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EA:01:62:62:F8:99:54:4F:5A:07:06:FC:D1:96:C3:9C:83:2C:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/a9e62ab8-35eb-33e3-b286-6fc0823cf157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.crl

            X509v3 Authority Key Identifier:
                keyid:34:01:17:47:F4:DB:06:E2:96:FB:D7:3F:F5:17:E1:AF:C6:1C:D6:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:b0e0:cafe::/48
                  2603:b0e0:efac::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1b:be:1a:a9:81:01:fa:f7:de:1f:0b:4a:8f:22:5f:e9:2b:
         2b:7f:1f:c6:3c:4f:aa:11:87:50:72:2e:a1:27:c5:a6:46:76:
         a6:eb:e6:b4:5a:79:36:10:6c:d9:25:ad:78:59:e2:a6:8a:a2:
         a8:6b:ca:52:66:0e:79:f2:bf:22:5a:60:56:c7:06:5a:69:20:
         bb:13:70:44:76:d6:e5:0f:86:b0:48:f5:6d:25:3d:5b:fe:c9:
         bd:39:20:dc:a9:3f:2b:24:a7:74:0a:0d:bb:66:b1:19:c0:7a:
         ed:fe:88:7f:b6:65:5b:95:3d:35:1b:ef:67:92:25:c5:68:a9:
         ac:29:b4:86:52:05:16:60:c6:bc:fe:f3:29:80:e8:8a:0a:82:
         68:60:8f:34:1b:d1:f6:7e:8f:55:bb:98:f0:20:60:79:a8:52:
         9c:b3:db:cc:27:9f:cb:3f:1a:73:4d:e5:bf:64:0f:0d:fb:e2:
         80:06:fb:47:8a:01:65:99:9e:3e:05:c2:32:19:06:e6:bf:a3:
         53:cb:2d:7d:fa:fb:b5:bd:db:ba:ab:dc:76:0c:fc:bc:54:eb:
         e1:1b:1c:d3:1b:57:f7:5b:31:ad:a8:97:f0:fe:4b:33:f9:41:
         2e:47:a7:b0:85:fc:16:eb:2d:b9:e8:64:fa:80:de:17:f0:a9:
         ad:56:b6:b5
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWDes3kMQ2H5mYAv5OoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjExZGJiZWQtMjU2ZS00ODliLTg2NTYtMzIwZmRhY2Ew
MzJmMB4XDTIwMTAyMDA0MDAwMFoXDTIzMDEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
NWJkYzFkMmYtMzk5Zi00ZmNiLWEwMzItOGEyNjdkMjJkMjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXjdoNpII7jBmlgByxp5c39IK7enN437Grou
kImHh81zxSa9jxm6j1Q66a478+2e+5Vud1wj61U0FkSKQD0owkx96fucfk0QyAJf
Dp6W5aXd1iCRMZS+rTYl8fT2jrskzu+lrQn4+NUdb4kcAaq0Fq1ouSf0xl8qz5IM
aKMxqEzXD5kM0uXAEMwJOOczUjQfd3Tg61Ef/6DcxFrVeV7OG7iKv5yEe6d/M0FY
rXuFknYZ/yos0QocWD6nK8oQ1s1Poifjt0HXzNbHYyd6HyUfAkksyiruInbevBFC
QChQMnb9cMatwrSSGjIsd2XEkdoEdW9rQkBjIqpmkNf+IQ9brwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFKXqAWJi+JlUT1oHBvzRlsOcgyyBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MTFk
YmJlZC0yNTZlLTQ4OWItODY1Ni0zMjBmZGFjYTAzMmYvYTllNjJhYjgtMzVlYi0z
M2UzLWIyODYtNmZjMDgyM2NmMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjExZGJiZWQtMjU2ZS00ODliLTg2
NTYtMzIwZmRhY2EwMzJmLzYxMWRiYmVkLTI1NmUtNDg5Yi04NjU2LTMyMGZkYWNh
MDMyZi5jcmwwHwYDVR0jBBgwFoAUNAEXR/TbBuKW+9c/9Rfhr8Yc1pQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82MTFkYmJlZC0yNTZlLTQ4OWItODY1Ni0zMjBm
ZGFjYTAzMmYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAJgOw4Mr+
AwcAJgOw4O+sMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAFwbvhqpgQH6994fC0qPIl/pKyt/H8Y8T6oRh1By
LqEnxaZGdqbr5rRaeTYQbNklrXhZ4qaKoqhrylJmDnnyvyJaYFbHBlppILsTcER2
1uUPhrBI9W0lPVv+yb05INypPyskp3QKDbtmsRnAeu3+iH+2ZVuVPTUb72eSJcVo
qawptIZSBRZgxrz+8ymA6IoKgmhgjzQb0fZ+j1W7mPAgYHmoUpyz28wnn8s/GnNN
5b9kDw374oAG+0eKAWWZnj4FwjIZBua/o1PLLX36+7W927qr3HYM/LxU6+EbHNMb
V/dbMa2ol/D+SzP5QS5Hp7CF/BbrLbnoZPqA3hfwqa1WtrU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:53 2025 by rpki-client