Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3761951f-ac97-4bc3-b32b-5cd038cca268/f7b71c47-9689-3a12-be82-921af4d036bd.roa
File:                     f7b71c47-9689-3a12-be82-921af4d036bd.roa (raw, json)
Hash identifier:          wd/eYWDXgshirbQrxO6CnDSC5fz7FWKe+R8V7n2wXSY=
Subject key identifier:   CD:B6:80:74:B4:09:E8:0A:B7:C3:29:05:CB:47:20:64:AB:53:0B:FA
Certificate issuer:       /CN=3761951f-ac97-4bc3-b32b-5cd038cca268
Certificate serial:       010D0C9F4328576D51CC73C042CFC17302977D94
Authority key identifier: 20:AF:26:7A:A6:E7:80:F8:04:F6:28:A6:27:76:D8:68:63:7B:FE:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3761951f-ac97-4bc3-b32b-5cd038cca268.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3761951f-ac97-4bc3-b32b-5cd038cca268/f7b71c47-9689-3a12-be82-921af4d036bd.roa
Signing time:             Tue 30 Jun 2020 00:19:09 +0000
ROA not before:           Mon 04 May 2020 04:00:00 +0000
ROA not after:            Sun 02 Oct 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2620:131:1065::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:02:97:7d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3761951f-ac97-4bc3-b32b-5cd038cca268
        Validity
            Not Before: May  4 04:00:00 2020 GMT
            Not After : Oct  2 04:00:00 2022 GMT
        Subject: CN=bfe0b33b-0e34-439e-b882-e1622b43a75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ef:0c:bf:f0:cd:37:79:a2:c7:78:38:76:81:
                    d9:a4:72:ca:7a:fd:fc:3f:6c:2a:4d:1d:3d:c5:c7:
                    57:22:4f:5c:2c:7e:d5:bc:a5:d9:cc:c5:c8:aa:a1:
                    bc:ee:a6:4d:0c:79:70:dc:07:4c:85:3f:41:c4:7c:
                    5e:31:64:5e:64:37:49:9f:f7:00:b9:4a:03:a1:60:
                    70:0a:30:d7:de:b3:66:65:f2:0d:7d:90:b6:3e:7d:
                    bf:5d:2c:17:35:c4:c6:07:27:59:d7:24:c6:e8:fe:
                    b3:c3:65:f5:35:7c:59:ba:dc:2a:68:d8:71:b6:44:
                    b4:04:39:9f:21:09:f4:59:8b:eb:aa:8f:82:13:4a:
                    00:ed:be:2b:de:32:cb:a6:62:10:64:16:f8:4b:78:
                    36:21:51:b4:32:c0:e6:02:de:c4:1c:6f:09:a5:e7:
                    19:5c:00:4e:1e:5f:7f:2a:1a:27:3b:e7:69:78:c2:
                    89:0c:1e:eb:27:be:f7:1b:a2:f9:38:39:68:bb:ff:
                    fb:23:ce:89:f5:7d:ba:48:96:e8:92:0e:a3:25:08:
                    ed:27:93:af:cc:d7:3c:9c:f7:a0:2b:62:85:77:0c:
                    b3:b2:d0:f4:a4:42:5a:93:cf:50:90:1e:5d:9c:3d:
                    3d:90:14:22:8e:4f:96:58:4e:9d:73:0c:a1:68:7c:
                    6f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B6:80:74:B4:09:E8:0A:B7:C3:29:05:CB:47:20:64:AB:53:0B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3761951f-ac97-4bc3-b32b-5cd038cca268/f7b71c47-9689-3a12-be82-921af4d036bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3761951f-ac97-4bc3-b32b-5cd038cca268/3761951f-ac97-4bc3-b32b-5cd038cca268.crl

            X509v3 Authority Key Identifier:
                keyid:20:AF:26:7A:A6:E7:80:F8:04:F6:28:A6:27:76:D8:68:63:7B:FE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3761951f-ac97-4bc3-b32b-5cd038cca268.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:131:1065::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:64:f5:fb:3d:43:ff:b1:0d:71:51:54:c4:2c:ce:06:ac:a7:
         0c:b4:a6:1c:29:2d:65:c7:f5:1a:86:a8:41:b1:5e:dd:72:06:
         29:f1:88:da:f8:42:28:36:99:eb:26:58:22:7e:15:9d:25:bc:
         a7:ee:d5:70:e2:c2:1f:c1:66:81:89:96:e5:06:96:5f:33:8c:
         66:36:2f:e2:55:d6:f1:c8:f7:8e:99:4f:58:8c:ba:e4:00:7b:
         a9:f5:51:e2:b5:c8:ae:dc:51:24:23:bd:c2:28:18:28:de:aa:
         95:7a:0d:fb:6c:10:2c:63:f0:36:3a:76:b9:b7:2a:04:c1:6b:
         4f:67:5b:be:69:8e:00:45:e4:f6:37:f7:15:e9:51:75:f7:7e:
         23:5c:7e:d3:95:c8:83:65:77:81:fb:fd:70:3e:49:d2:34:2c:
         8a:93:21:26:8e:4b:e9:d4:03:a2:3c:68:30:1a:3b:52:40:1f:
         d1:1a:2a:ad:a2:89:90:87:7b:d1:16:92:a2:9a:47:c0:b3:8a:
         6b:f0:19:e4:6a:70:ee:bc:65:94:5c:3d:68:89:de:ee:20:db:
         fb:17:c9:2b:1c:ea:21:c0:70:57:ea:ab:d9:5b:51:71:68:a3:
         e8:b9:6c:26:e3:05:db:85:3b:08:22:94:21:af:69:c0:02:5b:
         f5:db:a1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:17 2025 by rpki-client