Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/292c3739-257b-315f-93b4-b243cfbcf593.roa
File:                     292c3739-257b-315f-93b4-b243cfbcf593.roa (raw, json)
Hash identifier:          YEFcwl1Z10VANuE+21UQopNKZRCAPbxM6aFQe102UCw=
Subject key identifier:   27:E4:16:B7:82:E6:FB:9C:3D:32:C2:3F:99:7D:A3:30:0E:FD:8E:AE
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328576D51CC73C042CFC1720FEFF6C8
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/292c3739-257b-315f-93b4-b243cfbcf593.roa
Signing time:             Wed 13 May 2020 21:28:04 +0000
ROA not before:           Fri 13 Dec 2019 05:00:00 +0000
ROA not after:            Tue 16 Aug 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        2620:116:800c::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:0f:ef:f6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Dec 13 05:00:00 2019 GMT
            Not After : Aug 16 04:00:00 2022 GMT
        Subject: CN=ef51d0ce-8a00-4464-b12e-e43747a2add1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:bc:a0:9a:19:a1:e2:5c:86:55:f8:e7:14:
                    0c:74:cd:fc:5c:90:35:20:3d:fe:70:39:7f:82:44:
                    35:06:0d:0c:99:d0:d2:c8:04:85:6d:c3:62:8c:05:
                    bd:b0:0c:6b:57:1e:ca:e1:d3:7e:53:6e:b7:bf:6d:
                    3e:94:80:0f:6d:c7:52:90:56:b8:b9:e5:8a:ec:5b:
                    48:b9:6c:13:bc:f2:41:02:bf:7b:b5:66:06:ab:67:
                    b2:a4:09:8c:e2:40:94:21:8b:66:e2:6a:42:52:85:
                    f9:14:a8:19:f5:4d:42:37:87:8e:dc:4f:1b:87:be:
                    55:92:c0:02:f1:e3:6e:bf:d0:5e:fc:70:7b:5d:35:
                    cf:a2:5e:34:6d:9f:22:fc:28:d3:98:ba:a8:fe:04:
                    ff:32:e3:7f:4b:dc:71:73:82:cc:65:b4:f4:39:d0:
                    c9:f9:80:27:72:1d:3e:79:18:81:10:30:12:f9:ef:
                    82:f5:ff:4e:ed:8e:0a:a2:25:9c:b5:53:66:d9:b6:
                    f1:85:2c:02:60:00:b9:b7:d0:19:6a:a6:a1:fd:11:
                    15:da:0b:5d:da:6f:21:28:62:10:de:d5:9d:de:45:
                    d6:65:61:a2:94:12:90:be:c3:ec:b1:a9:14:05:b8:
                    02:38:6e:83:4c:f9:26:e8:c0:ad:b2:81:90:bf:55:
                    be:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E4:16:B7:82:E6:FB:9C:3D:32:C2:3F:99:7D:A3:30:0E:FD:8E:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/292c3739-257b-315f-93b4-b243cfbcf593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:de:3d:8d:c0:3d:40:32:d9:11:d5:16:4c:2e:d5:d9:dd:e6:
         a0:30:5a:08:5e:c2:84:67:56:4e:84:5e:a1:dc:6e:17:cb:bc:
         61:c1:c9:f8:90:b0:0e:da:cd:cc:d7:02:f2:eb:ec:b9:5b:cd:
         f0:40:7e:33:5f:6c:47:2d:4b:36:44:60:56:f5:00:89:ee:c8:
         f5:a0:43:a7:e3:e2:34:69:67:fc:aa:ab:3b:58:f3:f9:d0:07:
         95:85:42:4c:7b:d2:ce:9b:5c:89:d9:61:b3:59:6d:be:e8:f1:
         d6:e3:30:2e:32:f5:b9:2e:dc:71:e6:50:f7:b2:d5:74:d4:a5:
         89:ce:90:8e:59:7d:56:4d:08:28:b6:22:39:b0:b2:68:81:55:
         ef:20:0c:d3:86:01:e8:c9:90:1c:0a:39:57:01:96:a5:39:f9:
         67:5c:cf:d0:c6:8b:81:14:74:96:ea:9e:9b:d8:51:7a:3d:a9:
         ab:ec:a3:35:e0:d6:a0:3a:c4:62:c7:6e:05:86:05:e2:2e:88:
         8b:a2:40:28:8d:a3:39:35:d8:fe:80:d8:21:8c:0d:15:6a:76:
         29:e1:68:00:a7:a9:35:3a:d7:a0:20:d0:d9:ac:dc:47:a6:27:
         47:fa:7f:b6:80:d7:60:a2:7f:5d:13:dd:3f:29:4e:cd:59:3d:
         fd:25:41:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:18 2025 by rpki-client