Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d3a97c34-bff1-3f94-8797-1862faf02221.roa
File:                     d3a97c34-bff1-3f94-8797-1862faf02221.roa (raw, json)
Hash identifier:          LCh71cL07eRAdyPOe7EjaQYw3CrwOEizGIrZsx3JaMs=
Subject key identifier:   57:42:E1:1B:C5:6E:61:6B:F0:52:41:34:0B:36:7B:C4:91:94:82:98
Certificate issuer:       /CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
Certificate serial:       010D0C9F4328576D51CC73C042CFC1701BCDF635
Authority key identifier: E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d3a97c34-bff1-3f94-8797-1862faf02221.roa
Signing time:             Thu 06 Feb 2020 18:40:47 +0000
ROA not before:           Thu 06 Feb 2020 05:00:00 +0000
ROA not after:            Wed 11 May 2022 04:00:00 +0000
asID:                     63037
IP address blocks:        2605:bb80::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:70:1b:cd:f6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4adc9f42-8201-4af2-a3c2-223d1e2687a2
        Validity
            Not Before: Feb  6 05:00:00 2020 GMT
            Not After : May 11 04:00:00 2022 GMT
        Subject: CN=d7cf2c7f-3190-4ee6-a2db-5e51ef5caed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:28:af:39:28:cb:5f:28:4b:aa:90:44:a8:
                    ba:66:e1:21:8a:1e:d4:6d:92:26:83:97:2d:c4:3d:
                    a5:fe:39:ef:ef:4e:38:9d:45:a4:49:4b:24:ec:90:
                    43:c9:d2:25:e2:18:57:c1:5b:ac:a8:97:b7:ec:13:
                    71:5a:d4:e3:5d:30:0c:ba:7c:8a:21:bb:3a:9c:ad:
                    cc:fa:4d:3a:e3:86:ec:4b:2f:5b:34:17:e0:2c:39:
                    8c:7d:35:24:01:53:0c:f5:8b:2c:34:61:d8:f0:01:
                    3c:b7:53:16:ca:c8:ed:15:71:eb:ee:02:6f:70:05:
                    90:91:da:3f:bc:4b:19:3b:e3:24:dd:70:0b:87:0c:
                    3d:e8:86:42:b2:0d:52:dd:10:1b:03:87:f2:b9:e9:
                    bc:15:7b:0f:e6:a9:9a:db:16:3d:26:71:5d:08:74:
                    cb:8b:de:0d:fe:d4:3f:9c:1c:52:fb:f9:b0:95:fa:
                    ca:8c:e7:22:0e:17:df:72:4e:20:78:9e:24:15:68:
                    fc:46:67:0b:67:e8:9d:e6:79:67:31:ea:b8:47:99:
                    7d:58:ab:a6:91:b5:02:99:f4:c3:41:15:08:6a:58:
                    6c:4a:85:34:4d:97:4f:55:ce:74:5f:af:c2:5d:5b:
                    5c:3f:51:f2:12:0c:ce:a9:f2:c3:10:8b:16:3f:cb:
                    b2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:42:E1:1B:C5:6E:61:6B:F0:52:41:34:0B:36:7B:C4:91:94:82:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/d3a97c34-bff1-3f94-8797-1862faf02221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2/4adc9f42-8201-4af2-a3c2-223d1e2687a2.crl

            X509v3 Authority Key Identifier:
                keyid:E1:BB:68:98:83:73:DF:25:58:58:CF:EB:46:41:A0:01:FC:61:3D:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4adc9f42-8201-4af2-a3c2-223d1e2687a2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:bb80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:e9:de:d0:2f:cd:eb:4a:2f:03:4b:c6:6e:e3:cb:5f:d3:0d:
         19:b6:0c:7c:b8:a9:83:14:70:47:54:64:ce:4e:0e:2f:95:ad:
         4d:bf:a7:ea:ec:41:f7:36:45:61:ce:11:bd:6e:39:61:b8:89:
         0f:34:e6:b0:e0:d4:4b:89:cb:4e:81:38:cc:fc:da:9f:97:ee:
         d1:41:dc:6e:c1:50:1b:b5:c5:47:08:d5:43:f9:c5:87:35:9d:
         19:67:ba:30:bf:15:6f:3e:74:c6:e9:dc:f9:8d:16:ec:31:2c:
         bb:de:2c:dc:e0:46:6d:2f:b9:2c:51:c8:7a:03:ee:0a:24:a5:
         91:cc:46:e6:68:e6:ad:e3:e7:d5:8f:8d:3a:91:fa:4b:8d:91:
         a0:64:68:0f:fd:dc:94:c9:8d:f0:91:b5:13:8c:99:ab:00:6e:
         ee:43:0b:fb:80:29:38:36:12:ac:a0:06:16:67:09:d6:59:2c:
         d8:34:94:01:92:f7:85:77:e2:48:62:6a:4f:0c:b4:13:be:fd:
         31:dd:f4:fb:0c:af:54:4c:33:0f:9e:62:aa:d9:cb:19:f5:e6:
         ee:0f:0d:b6:f4:5b:50:40:b9:f3:26:c9:06:a5:c8:af:1e:44:
         c0:cd:de:6e:e4:9a:18:32:09:46:1b:a4:ef:8a:fe:fb:b8:22:
         17:35:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:32:12 2025 by rpki-client