Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/8472280b-3fca-327d-b501-8f02d6d84959.roa
File:                     8472280b-3fca-327d-b501-8f02d6d84959.roa (raw, json)
Hash identifier:          MoF1WbzECjbVne/7M6qkxL925rkLEWBmNW8LVRO+aeY=
Subject key identifier:   6A:03:20:CF:CA:9B:91:F6:FD:A4:CF:AF:C3:93:C2:BB:17:34:F7:79
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328576D51CC73C042CFC1720FEAE794
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/8472280b-3fca-327d-b501-8f02d6d84959.roa
Signing time:             Wed 13 May 2020 21:22:32 +0000
ROA not before:           Fri 13 Dec 2019 05:00:00 +0000
ROA not after:            Tue 16 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2620:116:800a::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:0f:ea:e7:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Dec 13 05:00:00 2019 GMT
            Not After : Aug 16 04:00:00 2022 GMT
        Subject: CN=b387c17b-6dca-48db-af5e-081aa46bd16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:f2:3b:3a:cc:df:58:e7:1d:5e:0b:e2:0d:
                    5b:f9:b4:b8:a8:25:c6:be:02:a6:9e:89:e6:95:15:
                    bb:30:f4:0a:24:65:68:51:da:92:26:da:a7:8b:f0:
                    f7:c2:57:36:8c:8e:66:ac:17:4f:cc:36:33:61:c7:
                    f3:b8:17:2b:1b:6a:21:4f:4a:21:e3:30:92:4e:62:
                    74:58:36:50:74:d7:64:2c:c9:57:a6:77:77:fe:06:
                    68:d3:bd:35:48:85:4b:a7:63:8e:39:3a:4a:23:e1:
                    3c:39:d7:8d:2b:dc:8c:7c:7e:10:5a:29:eb:d4:1a:
                    54:77:b9:05:6f:75:cc:f0:b3:ab:2a:72:89:26:ea:
                    b8:c8:00:49:52:17:bd:bb:1e:54:e0:2a:2b:61:52:
                    02:d4:75:6c:67:22:c1:68:96:f8:23:6e:80:c9:b3:
                    2b:f1:88:58:c9:71:d1:88:dc:ce:bf:ba:26:3e:70:
                    5d:ff:6e:34:0a:9f:30:d3:ad:4a:b8:ca:9c:49:e6:
                    7d:16:20:f6:c6:4f:d2:48:51:bd:84:a0:4d:19:9c:
                    38:fa:01:6e:ff:00:24:4d:74:15:25:cc:bd:19:95:
                    0f:f3:88:7b:90:6b:fe:c7:d3:f7:64:14:bd:55:82:
                    3a:f3:91:b1:7b:69:a3:f3:0e:b2:04:38:16:89:49:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:03:20:CF:CA:9B:91:F6:FD:A4:CF:AF:C3:93:C2:BB:17:34:F7:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/8472280b-3fca-327d-b501-8f02d6d84959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:2f:ee:2a:63:85:2d:ed:27:8e:fb:38:4a:c9:0c:9b:06:98:
         24:26:07:99:49:9a:a9:09:81:77:d1:6e:88:c2:d7:7a:11:01:
         1a:a1:f7:2d:4b:4e:15:3f:b5:15:2f:e2:e2:0c:0c:3d:ab:c0:
         75:fa:bc:14:7e:58:85:be:e0:53:47:28:41:f3:48:2f:71:9d:
         d3:38:21:b8:b1:aa:80:88:17:a2:14:75:ea:76:33:81:d3:54:
         86:75:97:57:c1:62:11:eb:88:32:06:7e:49:44:dd:bc:67:cc:
         46:cc:b0:38:38:5e:7b:5c:4a:b4:88:95:de:d5:01:53:0f:0e:
         8e:89:37:fd:87:86:f0:f8:ce:c1:15:ac:e8:1d:b8:b3:f8:b3:
         fe:c1:d8:14:87:26:1c:80:7d:9d:55:5f:30:ca:2b:05:e4:3a:
         87:41:d0:86:c0:52:77:7f:e0:8a:69:27:30:67:50:ac:c2:ac:
         33:06:3b:51:c8:0d:c7:84:a7:5f:66:38:4b:4c:c5:c9:91:b6:
         74:aa:dc:bc:8e:a8:64:c0:38:ef:c5:66:3d:b9:fe:f6:0d:c4:
         1d:31:7a:12:97:d9:98:a3:3a:70:fa:3a:9c:ac:99:8e:01:17:
         e3:ba:ac:50:d9:f1:0e:68:cd:aa:fe:c8:f8:2a:7f:e7:5c:e3:
         31:2d:87:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:12 2025 by rpki-client