Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/dcd956c6-554a-3cbe-be6a-bd180207dbed.roa
File:                     dcd956c6-554a-3cbe-be6a-bd180207dbed.roa (raw, json)
Hash identifier:          nOB6Fdr1+WmGhIQplNWcCj+0hEF+CZsI4eja9d+UQ3E=
Subject key identifier:   6D:72:97:72:93:41:1F:7F:C7:21:A4:5D:1D:2A:69:BD:DB:AA:28:F0
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858480D3FCB9CD32AF3DFEE70AAF8
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/dcd956c6-554a-3cbe-be6a-bd180207dbed.roa
Signing time:             Sat 30 Nov 2024 14:00:50 +0000
ROA not before:           Sat 30 Nov 2024 14:00:50 +0000
ROA not after:            Fri 28 Feb 2025 14:00:50 +0000
asID:                     15169
IP address blocks:        2605:ef80:c050::/45 maxlen: 45
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0d:3f:cb:9c:d3:2a:f3:df:ee:70:aa:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Nov 30 14:00:50 2024 GMT
            Not After : Feb 28 14:00:50 2025 GMT
        Subject: CN=fddb6fc4-3723-462a-81fd-4d25da788af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:84:13:6f:4b:0c:2b:89:cd:42:a3:06:3b:4f:
                    89:df:f4:c6:c1:e9:dd:48:21:6a:58:a1:a4:20:d2:
                    34:a0:f8:9e:75:24:eb:3b:33:59:3a:0f:ca:db:ab:
                    97:20:03:7d:22:dc:d8:a4:e4:44:ce:08:ee:54:09:
                    46:dd:a6:7b:1c:08:41:ed:05:ef:f3:63:96:52:7e:
                    bf:8d:c8:0f:32:31:5b:1d:a6:0c:c5:cc:e3:16:0e:
                    95:fc:6a:d9:29:9d:53:76:e4:91:bd:f6:a8:29:a2:
                    d1:47:1c:04:0b:87:ef:b1:b0:dd:35:d2:56:05:4d:
                    78:fb:9a:ec:14:b3:dd:5b:5f:ec:ec:fd:a1:18:0d:
                    e9:a7:87:b8:8e:cc:5d:d7:5c:25:51:ba:c1:80:5f:
                    bb:14:70:60:b6:43:e6:35:86:1b:02:65:fb:78:90:
                    a3:fb:60:15:bf:4f:81:fd:69:79:f6:8d:92:d8:76:
                    0b:a0:fe:2b:1d:06:e5:b7:4b:6e:ed:c7:5a:9c:66:
                    bd:4e:1a:31:e2:8e:5f:87:cb:78:2f:a5:0e:cf:44:
                    35:e2:e7:d2:49:84:64:0e:73:84:2a:02:e3:91:e6:
                    8d:9d:28:9f:23:d1:f4:42:e5:a3:a6:7a:7f:63:74:
                    57:d1:3b:e0:9b:1c:67:86:b6:3a:f9:79:59:64:82:
                    cd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:72:97:72:93:41:1F:7F:C7:21:A4:5D:1D:2A:69:BD:DB:AA:28:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/dcd956c6-554a-3cbe-be6a-bd180207dbed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ef80:c050::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:67:36:03:47:a9:54:b6:11:b0:22:64:87:82:98:db:9a:65:
         6f:d4:42:74:db:12:01:c4:8e:56:00:ba:94:75:93:9b:89:7f:
         27:80:70:5a:9d:c3:7e:68:5e:63:2e:ec:fc:f1:a6:a6:f5:72:
         79:f5:2d:75:9a:0c:34:0b:1a:c2:4f:a1:54:2a:1b:04:09:02:
         3b:ca:c0:43:90:e5:94:97:01:f5:7b:d8:3d:4b:5e:7e:ae:fe:
         76:c2:5b:32:14:17:23:21:d1:35:eb:07:b8:7b:a5:33:e7:05:
         76:3c:f2:84:a4:ba:80:93:76:6a:42:ad:0b:23:88:37:19:d3:
         f7:8b:ed:f2:3a:f8:f9:56:b1:13:ef:e1:81:49:d4:52:08:e8:
         a4:af:53:36:97:6d:22:8a:90:64:d6:48:aa:ac:ed:bd:6e:da:
         e6:47:b3:65:4c:4e:37:9f:b9:5d:c2:ba:3d:a4:82:1a:84:56:
         be:06:ca:74:20:a2:6e:90:68:db:18:16:c9:10:3e:e5:96:d0:
         70:62:d5:5f:ca:77:26:1e:4e:dd:cf:8c:68:68:db:56:1e:09:
         1d:17:6a:43:52:8a:24:7a:f7:72:a4:7f:c6:b1:ab:92:d8:75:
         26:f5:d5:44:5e:16:a6:13:99:95:c4:71:8f:65:39:33:0b:34:
         86:42:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:02:36 2025 by rpki-client