Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/255bf648-14cc-3419-ad19-a4da97c01f70.roa
File:                     255bf648-14cc-3419-ad19-a4da97c01f70.roa (raw, json)
Hash identifier:          MrSZlvl+f61coIZp51ZH0TmP6iKGBKJxk4Uk630oNY0=
Subject key identifier:   BA:1D:37:3B:93:8C:8F:73:64:58:3A:A5:2C:D3:90:97:44:E8:19:E0
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328576D51CC73C042CFC17276CEEC47
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/255bf648-14cc-3419-ad19-a4da97c01f70.roa
Signing time:             Tue 02 Jun 2020 20:52:51 +0000
ROA not before:           Wed 22 Apr 2020 04:00:00 +0000
ROA not after:            Mon 05 Sep 2022 04:00:00 +0000
asID:                     5662
IP address blocks:        2620:100:e000::/47 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:76:ce:ec:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Apr 22 04:00:00 2020 GMT
            Not After : Sep  5 04:00:00 2022 GMT
        Subject: CN=d58166fb-7555-4369-b906-9e4b3aa50cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d8:1c:e0:4a:0e:92:ce:c3:a9:d4:92:31:38:
                    25:ae:03:de:ec:20:4c:d0:83:20:79:ef:06:e9:e2:
                    65:62:98:31:25:83:1c:17:b1:4e:fa:f0:0c:8c:9d:
                    a4:8a:c6:24:65:f7:e7:16:d0:42:31:f8:04:67:a3:
                    48:68:18:cc:e3:a0:1e:cb:b3:f8:ac:00:68:64:2d:
                    2a:11:0d:2b:5d:64:46:b6:7c:00:01:40:73:25:c5:
                    35:96:5d:d2:99:71:57:2a:7a:ad:57:58:8d:b3:6f:
                    02:a2:14:7c:1d:38:83:d7:bf:34:45:c4:d1:41:04:
                    6e:1d:93:dc:45:da:2b:a8:00:91:28:ac:62:3f:b8:
                    5c:db:66:99:61:82:75:b4:65:dc:c4:49:42:c9:e2:
                    17:11:12:4d:5b:da:7a:18:31:69:77:15:cc:e4:80:
                    59:d5:cb:0c:dc:d7:97:25:33:10:28:76:62:63:eb:
                    f7:a6:74:b5:60:e7:7a:43:3b:b9:2e:34:14:a5:5d:
                    b3:7f:b2:88:41:65:74:72:bd:eb:40:86:42:ca:6f:
                    e1:9b:59:2e:cd:6b:6b:c1:ff:8f:53:ff:fc:ba:8a:
                    93:22:c9:25:24:3b:87:f0:d1:c8:a7:01:1b:ca:9b:
                    77:78:c6:a0:6e:ae:9a:d7:fe:6a:06:ba:3a:b3:0f:
                    d9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1D:37:3B:93:8C:8F:73:64:58:3A:A5:2C:D3:90:97:44:E8:19:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/255bf648-14cc-3419-ad19-a4da97c01f70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:100:e000::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:34:55:20:d7:23:77:5e:53:5d:36:8c:1b:ef:df:39:58:c9:
         10:87:c5:96:e1:2f:4c:e5:4c:d1:3c:5d:0e:9e:50:34:24:d4:
         1d:87:95:82:26:09:c0:8e:0b:fc:08:57:c8:00:93:bc:d2:8f:
         6f:88:7f:3c:1a:f8:e9:e9:4a:59:ea:d5:29:a6:ee:2b:8a:04:
         56:e8:11:b4:6b:fa:2d:3d:54:d3:8f:17:7d:b4:ec:6a:3b:9e:
         69:f7:20:aa:1a:c6:ed:35:84:9b:f3:7a:d0:a6:50:ed:ad:b3:
         a1:23:85:f4:d1:28:9f:04:70:42:70:ef:21:dd:0e:89:c6:a0:
         1f:39:90:25:f1:51:bd:8d:2e:69:2a:d8:b2:ae:7f:e3:bc:86:
         e9:c5:43:88:0d:05:ea:17:f3:8c:39:66:3d:13:64:d7:a3:5c:
         83:23:3f:52:5e:28:1c:2f:5e:33:b0:d5:8a:8f:6e:a8:82:cb:
         98:02:c2:d2:c7:66:ec:e0:77:9e:7a:bb:d8:54:d7:14:66:4d:
         e8:73:c7:78:41:a3:59:7c:d0:15:91:57:a0:70:09:7c:9d:65:
         4a:c7:ba:f2:47:58:1a:b1:fd:58:78:c1:2d:01:cf:24:8a:16:
         c7:52:8a:4f:34:a2:f6:0c:cb:1b:c0:57:c0:02:bb:1a:28:fa:
         a3:5f:1a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:31 2025 by rpki-client