Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/7bf14133-1c6b-3b3c-a940-25f32dee3a22.roa
File:                     7bf14133-1c6b-3b3c-a940-25f32dee3a22.roa (raw, json)
Hash identifier:          kXQqul1bpeU/CdCyHEsL47rRY01/p5v9j1yh3/y18Lo=
Subject key identifier:   A9:8E:3C:8D:9D:BA:46:BD:EA:EF:D0:8D:02:7E:FE:AC:FE:1A:AA:FD
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328576D51CC73C042CFC1720FEF5CD7
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/7bf14133-1c6b-3b3c-a940-25f32dee3a22.roa
Signing time:             Wed 13 May 2020 21:27:24 +0000
ROA not before:           Fri 13 Dec 2019 05:00:00 +0000
ROA not after:            Tue 16 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2620:116:800c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:0f:ef:5c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Dec 13 05:00:00 2019 GMT
            Not After : Aug 16 04:00:00 2022 GMT
        Subject: CN=88232eeb-14cb-4779-bb2b-da7e4a622350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b0:6c:0b:75:6f:1f:5b:b0:27:a3:0f:92:ad:
                    c1:1f:54:d2:3c:cf:7a:e3:59:d6:c3:e0:e4:ec:50:
                    92:9f:0e:43:fa:a1:af:5b:5d:3e:41:4b:22:a6:94:
                    bd:75:ab:4d:89:3f:17:14:54:8f:0c:68:d1:94:ef:
                    9c:78:23:8d:d2:5d:42:ed:53:10:3e:74:f2:be:30:
                    f1:8f:8e:8c:03:9d:fa:48:d0:14:c9:28:16:46:52:
                    e8:52:39:6e:43:3f:7a:1e:ec:16:78:ba:00:33:7c:
                    2b:73:74:24:ac:f0:41:60:2c:ce:76:25:69:64:f8:
                    7a:d7:c4:1f:b5:d1:43:1b:12:05:13:74:4a:bd:c4:
                    31:4e:72:8c:33:a5:e6:69:e7:55:51:c5:85:f5:40:
                    74:4f:28:fb:6c:ad:7f:27:29:ec:b6:fe:d5:d9:6a:
                    d2:67:d4:3c:d3:6e:c2:cd:4f:5a:05:26:ee:c6:91:
                    b1:ee:ff:5e:c1:a8:6d:f7:95:e2:56:d5:91:cd:db:
                    e4:59:58:a8:1e:99:a6:58:1e:b2:bc:b0:ca:34:a5:
                    31:ee:21:6f:62:09:2d:34:85:84:09:ab:c1:d9:a8:
                    26:ad:d4:f8:7f:0f:00:64:3a:7d:00:8d:be:eb:f7:
                    85:82:dc:51:99:b4:2e:f2:de:97:4d:11:e8:b1:1a:
                    8c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8E:3C:8D:9D:BA:46:BD:EA:EF:D0:8D:02:7E:FE:AC:FE:1A:AA:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/7bf14133-1c6b-3b3c-a940-25f32dee3a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:5b:ef:72:1c:01:7d:34:55:c1:d2:cf:21:d6:99:b6:de:91:
         ce:3a:24:d1:f1:ce:0e:3b:af:64:7a:99:20:a5:ff:21:f1:d9:
         42:89:87:08:2d:5a:81:a8:31:41:13:01:5a:01:6e:bc:a7:07:
         23:88:6d:64:21:d3:be:a5:b8:ce:27:1a:f0:38:68:93:bf:13:
         16:5c:6b:42:62:3e:cd:2f:b0:e9:ad:4c:37:b4:f8:ac:54:80:
         5c:24:23:83:29:c6:9d:a7:6d:44:d1:28:4f:80:32:eb:d1:c3:
         95:25:71:2b:52:e8:19:b6:c1:61:65:cd:f0:02:1f:47:81:2c:
         07:80:6a:42:d8:b9:ac:0e:d1:fb:4d:23:f1:d2:d4:b6:b2:61:
         ba:85:f5:c8:4d:58:8d:da:2b:b9:af:aa:2c:97:a4:05:f4:c1:
         25:c3:4d:1f:2f:9e:dc:fd:cb:3b:c9:fc:67:57:eb:a3:b1:37:
         8b:71:38:c9:71:a6:ca:97:b1:af:26:e0:27:37:6b:36:57:3f:
         ea:3b:b1:14:41:8e:0b:03:67:06:9f:1a:25:51:fc:36:45:18:
         7d:98:ac:d2:78:14:31:71:ab:34:96:63:9e:c9:6f:9a:07:90:
         a9:81:79:3b:d3:93:d4:e0:40:3c:d9:95:06:0b:8e:05:ae:76:
         f4:fb:92:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:47 2024 by rpki-client on console-fra.rpki-client.org