Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/ab2f76a8-fb0a-3d52-a875-92431f0a6e46.roa
File:                     ab2f76a8-fb0a-3d52-a875-92431f0a6e46.roa (raw, json)
Hash identifier:          gK7Z0L1qQxUmd9m4aZTasup78iq/W600sgiCr7c/kk8=
Subject key identifier:   CD:20:C0:A0:A0:BB:27:B9:A2:B4:34:54:DF:C2:09:F4:68:02:04:A2
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328583A35A59CA424CA8D6F2078A380
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/ab2f76a8-fb0a-3d52-a875-92431f0a6e46.roa
Signing time:             Wed 06 Jan 2021 05:00:00 +0000
ROA not before:           Wed 06 Jan 2021 05:00:00 +0000
ROA not after:            Wed 13 Sep 2023 04:00:00 +0000
asID:                     399448
IP address blocks:        2606:18c0:9::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:35:a5:9c:a4:24:ca:8d:6f:20:78:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jan  6 05:00:00 2021 GMT
            Not After : Sep 13 04:00:00 2023 GMT
        Subject: CN=13dcfb0a-4c5c-488d-a6ca-9be9e28809d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:11:3f:03:f4:f8:dd:f8:27:44:06:13:b0:02:
                    0b:0f:b2:93:e2:bf:2e:c4:4d:5a:6a:5f:3a:d0:69:
                    12:9a:68:cc:ba:86:98:93:f3:f4:61:ac:03:52:59:
                    77:9b:f5:ff:28:1d:02:a1:ff:f0:9f:83:99:49:cf:
                    58:7b:84:20:a2:cc:0a:0f:cb:fe:18:4d:89:0e:a8:
                    a7:76:5f:25:ad:b3:e7:4f:09:0a:9d:b3:71:55:1f:
                    8c:2a:ae:9d:28:b1:d4:64:f8:0e:c8:0d:a5:76:c1:
                    5f:c4:da:cf:0b:5d:db:91:fb:9a:ea:8c:99:4a:d5:
                    88:83:c0:4b:78:f4:2c:72:7e:81:30:53:ba:07:b3:
                    ef:f6:df:96:9d:40:e2:43:b9:39:37:8b:ad:36:f8:
                    ab:28:41:c9:06:3b:89:27:6b:d3:59:c1:47:75:03:
                    c7:07:dd:a7:69:6b:20:aa:73:94:49:58:ee:d2:ec:
                    4b:e3:ce:0c:1b:e5:a5:78:0d:b4:1e:35:dd:24:67:
                    8e:d3:8f:7c:c3:4f:f3:fe:5f:a4:6f:7d:00:0c:7d:
                    14:b1:e7:a4:62:4b:41:b8:59:6f:0a:86:de:00:7b:
                    0f:b5:44:d1:ea:73:83:0a:03:73:48:c1:00:f5:f0:
                    cf:f0:1f:86:64:74:a8:82:d6:b9:fc:8e:57:b5:b8:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:20:C0:A0:A0:BB:27:B9:A2:B4:34:54:DF:C2:09:F4:68:02:04:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/ab2f76a8-fb0a-3d52-a875-92431f0a6e46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:18c0:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a9:b2:db:ec:7c:5c:fc:39:0a:ee:03:4a:2f:b3:31:a7:2b:
         d4:b8:68:d7:e2:44:15:48:6a:44:66:70:f9:02:30:11:cf:e1:
         2a:84:06:42:94:c1:71:0a:55:f1:6a:52:49:ac:0b:70:07:8b:
         07:5f:2a:a8:5c:18:e3:23:7f:26:a0:dc:77:91:06:f1:94:4d:
         05:ca:af:32:2f:4c:6b:64:f3:f6:fc:8f:0b:36:80:21:05:e0:
         96:12:b1:e3:33:bc:28:70:5f:88:7f:d2:db:02:b5:8f:35:6d:
         d1:53:74:af:bd:0a:6b:c3:02:c2:02:71:dc:74:a3:71:11:27:
         16:e6:4c:3a:2c:45:1b:fb:da:4b:5e:c0:5d:05:eb:01:02:81:
         8f:2b:b8:18:14:fc:ba:92:a8:f5:83:a8:0f:76:1d:99:76:46:
         f3:c2:b4:66:7b:d7:88:8d:c2:12:83:78:97:3c:23:19:d3:f0:
         a9:01:5c:99:f6:0b:75:7f:06:5e:71:50:48:28:a1:bb:26:1e:
         1c:1f:e9:cf:eb:f7:36:f9:fb:6c:f8:7b:60:8d:16:f0:a5:bb:
         1b:8b:9b:8e:51:4d:5f:89:4e:4c:b3:e8:32:85:99:01:35:b1:
         ee:55:1e:fb:7f:ef:fd:ae:13:21:38:00:4e:f0:a0:48:c8:da:
         89:56:43:fb
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDo1pZykJMqNbyB4o4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4
OGRmMB4XDTIxMDEwNjA1MDAwMFoXDTIzMDkxMzA0MDAwMFowLzEtMCsGA1UEAxMk
MTNkY2ZiMGEtNGM1Yy00ODhkLWE2Y2EtOWJlOWUyODgwOWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxE/A/T43fgnRAYTsAILD7KT4r8uxE1aal86
0GkSmmjMuoaYk/P0YawDUll3m/X/KB0Cof/wn4OZSc9Ye4QgoswKD8v+GE2JDqin
dl8lrbPnTwkKnbNxVR+MKq6dKLHUZPgOyA2ldsFfxNrPC13bkfua6oyZStWIg8BL
ePQscn6BMFO6B7Pv9t+WnUDiQ7k5N4utNvirKEHJBjuJJ2vTWcFHdQPHB92naWsg
qnOUSVju0uxL484MG+WleA20HjXdJGeO0498w0/z/l+kb30ADH0UseekYktBuFlv
CobeAHsPtUTR6nODCgNzSMEA9fDP8B+GZHSogta5/I5Xtbi2KwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFM0gwKCguye5orQ0VN/CCfRoAgSiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5
NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvYWIyZjc2YTgtZmIwYS0z
ZDUyLWE4NzUtOTI0MzFmMGE2ZTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4
OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl
ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2
YmJkZTg4ZGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgYYwAAJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAG2pstvsfFz8OQruA0ovszGnK9S4aNfiRBVIakRmcPkCMBHP4SqE
BkKUwXEKVfFqUkmsC3AHiwdfKqhcGOMjfyag3HeRBvGUTQXKrzIvTGtk8/b8jws2
gCEF4JYSseMzvChwX4h/0tsCtY81bdFTdK+9CmvDAsICcdx0o3ERJxbmTDosRRv7
2ktewF0F6wECgY8ruBgU/LqSqPWDqA92HZl2RvPCtGZ714iNwhKDeJc8IxnT8KkB
XJn2C3V/Bl5xUEgoobsmHhwf6c/r9zb5+2z4e2CNFvCluxuLm45RTV+JTkyz6DKF
mQE1se5VHvt/7/2uEyE4AE7woEjI2olWQ/s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:24 2024 by rpki-client on console-ams.rpki-client.org