Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/63b33bd1-8603-3efc-9cca-de59650e1dcc.roa
File:                     63b33bd1-8603-3efc-9cca-de59650e1dcc.roa (raw, json)
Hash identifier:          oAF2ClNfROrSUtDivoSGqQiY0YUuEd270Sw1qoCc4Sg=
Subject key identifier:   65:48:26:F5:7D:A8:61:BB:E2:EE:4E:DB:7F:45:4B:B2:5C:49:F3:20
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328576D51CC73C042CFC1720FF073E4
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/63b33bd1-8603-3efc-9cca-de59650e1dcc.roa
Signing time:             Wed 13 May 2020 21:28:36 +0000
ROA not before:           Fri 13 Dec 2019 05:00:00 +0000
ROA not after:            Tue 16 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2620:116:800d::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:0f:f0:73:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Dec 13 05:00:00 2019 GMT
            Not After : Aug 16 04:00:00 2022 GMT
        Subject: CN=f6a80f1a-2bbf-4f6e-8d03-440fd3bca342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c9:52:86:df:25:d1:3d:d5:65:ec:2c:0c:f7:
                    a8:35:62:c9:eb:bb:8c:17:04:56:ed:84:e1:a8:f0:
                    ce:01:c3:2d:a9:ee:4d:80:07:41:ec:e9:f9:82:a1:
                    5b:88:43:1b:e1:94:95:4d:de:c4:e6:58:90:83:e7:
                    fd:f7:67:d7:5e:9d:a1:2d:c5:cf:99:c3:5d:f9:36:
                    7a:09:22:e6:ef:59:cb:b5:0c:8b:14:f5:de:e0:6c:
                    7e:15:4f:90:a8:93:2e:f4:0e:5c:a3:df:8e:1e:8b:
                    bb:68:6f:52:c6:9b:b7:7b:5f:bd:09:af:3c:bf:ec:
                    e1:cb:db:ac:e5:43:5a:bc:51:71:e5:6d:c3:30:de:
                    27:f2:ce:ba:05:7f:8c:fd:0c:42:d3:3a:64:8a:65:
                    be:49:dc:a5:e1:93:cd:de:93:56:a0:10:90:88:f9:
                    ee:e0:11:7c:f4:59:44:42:37:db:d5:6f:5c:38:fe:
                    66:3f:ac:7c:8b:8a:85:27:1a:33:76:b1:3c:69:ca:
                    1b:bd:20:57:8a:db:43:b3:a7:32:fc:94:8c:39:09:
                    78:d6:8e:f2:22:4f:9d:ec:ce:77:92:fe:ce:ac:8c:
                    1f:dd:5a:2a:48:5c:0a:af:30:c6:ba:5c:a0:e8:fa:
                    ba:1f:f9:57:09:31:7c:2a:15:f7:48:b4:10:99:85:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:48:26:F5:7D:A8:61:BB:E2:EE:4E:DB:7F:45:4B:B2:5C:49:F3:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/63b33bd1-8603-3efc-9cca-de59650e1dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:c7:e9:af:b7:90:00:82:2a:71:54:ed:00:1e:8b:92:13:92:
         76:43:34:d3:46:90:00:87:fa:03:00:8c:f8:60:24:55:8b:4e:
         fd:c0:79:3f:fd:a0:fc:2f:e0:e5:73:2a:e6:5c:43:cb:0d:08:
         d4:fb:b0:0a:eb:88:78:4c:7f:45:0a:fd:6e:6c:7f:14:af:eb:
         d2:5d:3a:ae:e0:89:c4:62:4b:91:e9:94:6b:79:17:64:61:1d:
         d8:44:c2:5e:f5:06:fc:9b:a7:84:0a:13:65:26:7b:5a:88:2e:
         5b:b6:51:3c:48:4c:23:e0:29:f1:0d:45:91:e1:9d:29:78:e7:
         19:64:50:40:ad:a4:5b:4c:c0:ee:5e:b0:ab:28:ac:df:17:46:
         01:01:b4:5c:e1:ad:b9:2b:38:5d:d3:a0:26:74:33:65:d8:c7:
         62:41:f4:d6:df:47:63:22:0d:92:ce:dd:7c:bd:ef:ae:d0:0c:
         4b:f2:57:57:5f:fc:de:66:c3:aa:bb:4c:7e:e4:45:86:dd:da:
         e4:02:c5:06:6b:97:fd:f9:3e:62:ac:5b:b6:f6:f7:a1:90:13:
         ea:2a:ce:80:a1:dd:b8:20:4d:13:5e:a1:84:ce:64:6e:c0:c7:
         63:ae:3f:4f:c8:59:5f:12:c3:a6:fa:41:f5:85:59:31:97:68:
         20:c2:15:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:39 2025 by rpki-client