Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/aa240747-f28b-3778-ba8c-395c527ed9dd.roa
File:                     aa240747-f28b-3778-ba8c-395c527ed9dd.roa (raw, json)
Hash identifier:          t609zpoBJba2cYJyoZN8HNWM4NeK+wogwp8Fp0tPQDM=
Subject key identifier:   25:2F:4C:D6:AE:00:78:BB:19:F7:F6:97:49:2A:AC:C0:F4:85:7F:A1
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328583A35A2CDCBCA0043C3FEC61D40
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/aa240747-f28b-3778-ba8c-395c527ed9dd.roa
Signing time:             Wed 06 Jan 2021 05:00:00 +0000
ROA not before:           Wed 06 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Sep 2023 04:00:00 +0000
asID:                     399448
IP address blocks:        2606:18c0:4::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:35:a2:cd:cb:ca:00:43:c3:fe:c6:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jan  6 05:00:00 2021 GMT
            Not After : Sep 13 04:00:00 2023 GMT
        Subject: CN=98989efb-3778-4d76-9a1c-902398067fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:d2:77:d5:85:69:18:bf:a3:09:02:0f:49:
                    9d:21:de:d9:3e:bb:9b:42:53:48:54:40:e2:a9:cb:
                    9f:27:44:98:53:95:9a:52:69:5f:71:b6:e3:01:72:
                    16:27:5d:64:ee:74:4b:f6:5f:d4:64:4f:75:99:7c:
                    58:dd:01:f4:9c:99:ba:72:cc:ca:ba:d9:16:4b:6c:
                    f2:77:66:bc:c7:98:cf:50:99:d7:34:0c:c9:0a:21:
                    bc:af:46:5e:13:94:c9:05:f9:27:4c:37:95:a8:53:
                    4a:b8:42:61:ac:1a:d6:41:09:ff:f4:8f:43:a8:fc:
                    52:b4:ee:60:a3:43:45:fd:4b:52:e7:d9:83:3c:58:
                    1e:29:8d:4e:12:0b:b2:ef:b6:b2:87:bc:22:14:51:
                    15:b3:1f:6b:54:fe:1d:4e:e8:4b:51:63:87:e8:dc:
                    88:96:54:2e:58:7d:ff:4c:a7:ab:8b:af:f2:6c:e3:
                    52:ea:52:59:55:e2:29:06:c8:ea:80:76:fd:a3:ae:
                    b9:e6:69:87:a0:85:39:a0:6b:ab:e7:39:80:d3:f2:
                    ff:52:b2:43:47:bc:b8:48:be:54:2d:e0:6e:65:4f:
                    71:e9:5a:b4:da:d1:f6:f3:23:0d:de:d4:26:ce:a9:
                    14:8e:46:ad:d6:56:86:f3:6d:9d:b4:18:e8:b1:23:
                    b4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2F:4C:D6:AE:00:78:BB:19:F7:F6:97:49:2A:AC:C0:F4:85:7F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/aa240747-f28b-3778-ba8c-395c527ed9dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:18c0:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b6:cd:69:bd:86:16:2c:08:07:35:ed:5b:43:c9:49:93:31:
         b3:80:57:6c:fc:ce:1b:08:1b:1c:15:a5:51:ad:94:50:19:42:
         78:6d:8d:d9:e0:06:b4:b4:39:9a:6e:9e:bb:18:36:81:7b:9c:
         9d:51:59:5c:99:4b:6e:00:ca:4f:84:27:5f:9e:52:3e:93:c3:
         c5:52:b8:0e:d8:5d:a2:fa:a5:28:90:3c:66:7c:4c:97:33:dc:
         68:55:0a:ef:f1:03:6e:91:02:89:ab:53:31:27:73:c9:35:52:
         ab:46:49:a0:1f:8c:54:3c:3c:d6:0c:e7:26:98:0a:e6:83:23:
         34:9d:ed:90:5d:3e:a1:a4:29:3a:29:fd:a2:f2:9e:c7:24:b7:
         e7:f7:fc:9c:05:ee:de:2d:24:87:a2:b6:c6:6e:94:6e:4c:0a:
         cc:9d:2e:65:79:94:77:24:ef:0a:66:d4:47:c2:6d:6b:85:0e:
         33:dd:85:52:98:39:9f:3c:53:d3:2e:02:e0:70:e8:7a:10:e7:
         8d:4c:f2:e6:9e:cd:01:be:90:00:d5:87:3d:bb:30:83:13:70:
         b1:bf:db:40:ee:c0:31:b7:3a:2c:1a:54:20:1c:e7:d6:a8:ac:
         db:81:af:48:b7:26:87:b1:c6:77:eb:1c:5f:13:c4:73:21:61:
         e5:d1:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:05 2024 by rpki-client on console-fra.rpki-client.org