Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/9dbc8d4c-89b3-35dd-b966-857eac9b9728.roa
File:                     9dbc8d4c-89b3-35dd-b966-857eac9b9728.roa (raw, json)
Hash identifier:          AntlI+9/IcOQ5y1Et5NCVxQUzSnPlPjkztjo18u7YtI=
Subject key identifier:   41:B8:C1:C1:98:F1:71:A2:64:A6:46:AB:C4:1C:9E:CA:9E:CB:B2:86
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328576D51CC73C042CFC1720FF1EAE0
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/9dbc8d4c-89b3-35dd-b966-857eac9b9728.roa
Signing time:             Wed 13 May 2020 21:30:12 +0000
ROA not before:           Fri 13 Dec 2019 05:00:00 +0000
ROA not after:            Tue 16 Aug 2022 04:00:00 +0000
asID:                     16509
IP address blocks:        2620:116:800e::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:0f:f1:ea:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Dec 13 05:00:00 2019 GMT
            Not After : Aug 16 04:00:00 2022 GMT
        Subject: CN=745d5c16-c68e-412d-9e9e-166bcb3b1038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e2:a3:e3:34:2b:72:a2:5a:89:67:75:ac:be:
                    a4:7b:9f:dc:85:34:df:f3:52:55:b6:17:9b:1a:1f:
                    f5:a9:d8:0c:a4:93:a4:07:5a:2c:91:8b:8b:ee:05:
                    c7:2e:50:0a:70:52:b2:8e:19:d9:eb:6a:3b:3a:55:
                    e9:6d:2f:34:e3:c0:f1:4b:4c:b6:0a:8f:2f:59:59:
                    2f:be:34:16:f0:27:d5:fc:bd:52:44:db:a4:b1:f7:
                    09:87:d8:ce:04:f5:2c:32:0e:b2:87:e6:49:3b:49:
                    49:ff:e7:d0:47:8f:3d:79:98:40:ca:99:2a:ac:7b:
                    71:9d:01:10:e9:50:8c:8f:9f:ea:72:07:70:05:fd:
                    ce:8c:1e:43:88:47:a7:90:96:a2:0c:fc:be:cf:34:
                    52:b7:bc:13:ab:75:78:3c:c7:a9:da:50:69:7d:3f:
                    ec:4f:8d:ef:30:0e:9e:c0:bd:02:46:04:a8:ad:95:
                    43:b4:0e:5c:5d:29:eb:b2:16:5a:04:31:d2:dd:9d:
                    72:bc:54:99:b9:aa:52:b0:3f:03:a3:5c:68:9d:69:
                    2b:af:d9:ed:b1:5d:8c:da:9b:a6:94:8b:f8:8a:fc:
                    25:10:69:e6:f5:90:50:af:86:71:ab:67:b2:0c:69:
                    70:34:8b:41:7c:39:d2:74:5e:84:e6:41:46:f6:d7:
                    5e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B8:C1:C1:98:F1:71:A2:64:A6:46:AB:C4:1C:9E:CA:9E:CB:B2:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/9dbc8d4c-89b3-35dd-b966-857eac9b9728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:116:800e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:7b:51:6b:ed:0b:b4:42:bf:1c:88:2c:14:3c:6f:45:54:42:
         80:9d:d9:c9:7f:81:dc:ab:d1:ba:4a:10:07:66:76:aa:23:73:
         b8:3a:b8:93:6b:9f:d7:11:8d:0c:00:42:92:ec:97:8a:87:cf:
         b8:6f:59:ec:18:1b:c3:d9:ec:9d:c7:cb:a7:11:02:a8:20:e6:
         1b:89:ad:ca:df:ad:2e:86:43:b2:ba:81:e7:d2:e8:e8:0e:96:
         66:80:c6:f2:e7:1d:60:36:8b:06:d1:d8:dd:94:ec:13:64:0f:
         cb:59:eb:08:e2:c9:54:1f:a5:48:67:86:f3:16:2d:54:d9:28:
         14:15:c8:da:05:ca:52:fc:e9:65:70:32:37:94:2c:d5:2f:75:
         1b:e2:06:3c:49:b8:2c:79:c2:99:d6:28:0b:07:24:0b:34:a3:
         76:dd:bd:f6:eb:a2:29:6e:7e:e0:77:e1:35:c0:ae:08:c5:23:
         a7:a1:65:1a:8d:0a:b1:e9:9c:41:a7:0d:26:15:38:40:6d:d4:
         05:21:77:db:6c:d3:a3:e3:f7:62:18:a7:4f:4e:aa:ea:32:40:
         60:24:3f:aa:71:4a:55:aa:ed:33:0a:0e:f7:08:13:26:a3:a4:
         65:14:88:22:fe:03:64:0d:15:44:dd:ef:ca:11:68:94:01:b0:
         33:71:7e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:58 2025 by rpki-client