Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/0d615e82-191f-3f8f-91a9-db69e6560d63.roa
File:                     0d615e82-191f-3f8f-91a9-db69e6560d63.roa (raw, json)
Hash identifier:          6OCyKg7kN/8YDvs8dCnWwOxQz/8jfWgV4JRPx44LSNk=
Subject key identifier:   88:66:D7:79:30:88:CA:B8:03:E0:E7:EC:00:7E:5D:AC:63:72:97:1E
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328583A4981A2DB5AF53A4026E9A920
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/0d615e82-191f-3f8f-91a9-db69e6560d63.roa
Signing time:             Thu 17 Jun 2021 04:00:00 +0000
ROA not before:           Thu 17 Jun 2021 04:00:00 +0000
ROA not after:            Fri 17 Jun 2022 04:00:00 +0000
asID:                     36692
IP address blocks:        2620:0:cc7::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:49:81:a2:db:5a:f5:3a:40:26:e9:a9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jun 17 04:00:00 2021 GMT
            Not After : Jun 17 04:00:00 2022 GMT
        Subject: CN=d7533924-ae80-4763-8616-fb63b79cb6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ef:47:2d:53:6a:71:ec:fc:bf:a5:ff:64:17:
                    25:75:8f:b8:e0:35:28:d0:c9:bf:59:52:55:f3:58:
                    1b:e6:60:01:93:67:05:16:9d:e1:53:9b:ac:f2:ac:
                    5f:7e:34:2b:ab:9d:e7:b5:8a:d0:e7:d5:93:dc:75:
                    ba:6f:aa:6d:cf:50:1f:5a:ff:d4:66:31:8a:b8:5a:
                    19:95:1b:f8:14:e6:e0:34:e2:43:d8:ea:8f:a9:f4:
                    4b:3e:3f:e3:a9:7b:54:26:56:23:5a:4d:3d:8c:2d:
                    cf:79:45:51:70:ae:57:6e:96:6d:90:e3:12:70:f2:
                    45:44:92:b7:de:51:34:1c:12:f7:b0:36:a6:78:98:
                    83:77:8d:62:39:4b:13:91:06:c3:2f:a1:2d:39:15:
                    e9:15:ec:31:f1:6b:28:95:ad:f8:af:37:17:1a:ab:
                    89:6d:ea:a0:1f:0c:fd:06:40:77:0a:7e:f5:72:a9:
                    e4:45:0c:06:d4:7d:4f:d7:c0:78:0e:0b:56:c4:09:
                    57:c6:c7:a9:0e:5e:ef:23:df:b8:1a:d5:6b:6c:47:
                    bd:3b:7b:f1:59:10:a8:bf:27:dc:03:cd:1d:dd:97:
                    e2:6d:69:6d:21:38:88:bc:46:28:43:cd:cb:f7:c1:
                    82:df:e6:20:b2:4d:c4:e2:da:13:8f:b2:fc:63:13:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:66:D7:79:30:88:CA:B8:03:E0:E7:EC:00:7E:5D:AC:63:72:97:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/0d615e82-191f-3f8f-91a9-db69e6560d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:cc7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:e0:8b:f4:04:26:2e:55:d9:29:80:69:d8:65:64:75:44:2a:
         a5:47:e5:34:40:74:0f:ea:e8:8f:30:a7:0d:c8:fc:c3:22:b4:
         42:b4:c7:78:a2:c1:31:58:54:c5:7d:2d:50:db:45:05:4d:e4:
         dc:33:41:94:4f:c5:76:63:c3:37:ce:4e:b2:a4:4d:85:1d:68:
         94:cc:4f:45:e5:cb:36:99:59:d2:73:ab:66:6c:a1:c3:80:63:
         62:90:cc:fd:df:85:76:35:b5:46:7c:cc:27:66:59:5d:d8:42:
         5a:4c:eb:d9:25:d0:d0:04:47:46:85:7b:f8:50:66:9f:b1:df:
         36:7d:16:c5:58:1a:df:e2:c9:e7:ee:a5:08:87:4b:62:8f:fa:
         74:46:e6:a3:5a:ba:1a:89:29:87:e2:b1:81:39:84:12:62:0b:
         76:5b:c9:f2:85:a2:fc:34:b9:d9:07:58:60:cf:31:ec:ed:5a:
         3d:74:dd:1d:65:5f:7a:50:9c:d2:a7:93:03:ca:0f:7f:5a:56:
         94:4e:ac:f5:97:dd:5f:c9:27:4d:46:e1:bc:fc:fd:4f:4a:b5:
         77:43:d8:87:2a:f1:7a:ff:99:7e:3d:a2:ea:e3:99:fb:97:8d:
         06:03:89:76:04:c4:89:28:78:d5:43:26:df:18:09:56:8a:c3:
         8b:97:ee:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org