Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/5010c27a-e64f-3852-9496-b54f7e42c9ce.roa
File:                     5010c27a-e64f-3852-9496-b54f7e42c9ce.roa (raw, json)
Hash identifier:          9GrHspyvi4uidb0HQff5o1Piin3qr+uz+oS2VQSve+s=
Subject key identifier:   DC:07:FA:99:03:A2:DB:2B:AC:EC:AA:33:C2:40:1F:DE:84:B3:6D:D7
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328576D51CC73C042CFC1735299CFE5
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/5010c27a-e64f-3852-9496-b54f7e42c9ce.roa
Signing time:             Wed 15 Jul 2020 13:11:18 +0000
ROA not before:           Fri 14 Feb 2020 05:00:00 +0000
ROA not after:            Tue 18 Oct 2022 04:00:00 +0000
asID:                     20150
IP address blocks:        2604:4ac0::/32 maxlen: 48
                          2604:4cc0::/32 maxlen: 48
                          2604:4fc0::/32 maxlen: 48
                          2604:5040::/32 maxlen: 48
                          2604:50c0::/32 maxlen: 48
                          2604:6a40::/32 maxlen: 48
                          2605:7980::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:52:99:cf:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Feb 14 05:00:00 2020 GMT
            Not After : Oct 18 04:00:00 2022 GMT
        Subject: CN=cd565605-419d-4c27-adae-08d12b07c1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c6:a0:e4:06:12:4c:1b:da:ac:38:4c:e8:af:
                    d8:96:62:3f:d3:91:dc:5f:92:44:3d:f9:0e:98:2e:
                    23:a7:97:e8:2e:5a:b1:d0:1c:32:0c:26:60:98:6e:
                    40:8c:3c:40:23:cb:c1:24:61:72:85:87:ec:1f:10:
                    4c:dd:6e:33:54:c8:3f:cb:25:3a:44:4d:de:8e:f4:
                    2d:67:cb:2b:bc:b2:02:5c:5b:23:cb:04:9f:39:c6:
                    b8:cf:a0:71:1a:55:e4:22:30:c7:f4:8b:96:c4:ce:
                    61:d8:dc:14:85:a1:05:fd:73:eb:8c:32:ca:a1:7b:
                    b3:bb:2d:a2:b5:43:f9:8e:a2:88:15:c7:91:45:d3:
                    fb:b1:38:51:bb:7e:d8:78:8a:09:16:53:e0:d7:89:
                    f1:e8:a4:f3:56:eb:d0:8f:03:e6:b2:51:6d:de:15:
                    6b:56:86:e6:4d:36:37:80:69:ef:f1:51:af:7c:1f:
                    84:db:17:7e:b6:5e:ac:c9:29:07:59:a9:af:2b:8f:
                    c3:02:95:31:5b:04:fd:67:4f:a5:27:03:88:0e:d4:
                    a6:4a:68:30:5b:95:08:25:8c:97:de:b2:b7:34:8d:
                    3a:86:3f:99:15:5d:92:4f:34:35:99:ea:b6:2f:30:
                    ed:dc:e0:53:52:f8:bb:c9:15:23:53:c8:a4:52:64:
                    35:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:07:FA:99:03:A2:DB:2B:AC:EC:AA:33:C2:40:1F:DE:84:B3:6D:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/5010c27a-e64f-3852-9496-b54f7e42c9ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:4ac0::/32
                  2604:4cc0::/32
                  2604:4fc0::/32
                  2604:5040::/32
                  2604:50c0::/32
                  2604:6a40::/32
                  2605:7980::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:18:40:3a:01:da:70:7e:04:9b:a9:15:7f:cb:6c:7a:ab:4e:
         49:97:c7:a3:f8:78:b8:cc:59:02:e7:bb:68:dc:b0:fe:d5:29:
         91:4e:19:f9:57:48:37:56:4b:15:0f:cd:8b:5b:b2:e4:89:1e:
         6c:63:87:19:b0:25:ce:36:b2:cb:b1:88:c2:86:23:b6:fc:12:
         52:4a:f7:a7:7e:0b:b3:8c:7f:e3:34:5a:75:c0:87:84:24:35:
         52:c9:29:b8:f9:31:09:dd:32:f0:2b:a9:c6:ac:dd:3f:67:75:
         dc:b3:da:f5:78:4e:a7:1a:31:de:15:fb:8b:74:71:4e:8c:1f:
         6d:28:40:aa:39:99:44:53:06:b2:d5:7d:6d:ac:28:c0:d3:47:
         31:24:2d:a8:c8:9a:20:03:c7:e3:da:52:7a:f0:79:be:57:82:
         be:b0:2e:9a:be:b7:83:ee:e2:b2:80:86:64:c2:81:91:a3:77:
         2f:11:d8:4a:9f:bd:9f:76:1f:4a:6d:17:2b:27:07:28:25:09:
         63:ac:25:6b:b1:bb:ed:1d:e6:4a:0a:86:a0:ab:be:c1:b6:f1:
         ac:0e:85:94:54:d3:69:4d:a3:f6:cb:15:e8:7b:cc:a8:df:28:
         b7:27:48:ae:71:4e:32:6e:ac:4b:d9:bd:be:86:b7:5d:06:ba:
         fd:d8:a1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org