Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a31303a3a2f34382d3438203d3e203236393330.roa
File:                     323630323a666336383a31303a3a2f34382d3438203d3e203236393330.roa (raw, json)
Hash identifier:          e3T9wrJAuzM1pXVfwcO/GLwDdKxKUg/CI/BMRLOx/0k=
Subject key identifier:   BA:22:9F:30:EF:2C:06:29:14:79:79:34:44:13:13:42:CE:26:11:F3
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       35A09E196589609041CD389ADD805D333BE890B1
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a31303a3a2f34382d3438203d3e203236393330.roa
Signing time:             Thu 02 Mar 2023 06:21:13 +0000
ROA not before:           Thu 02 Mar 2023 06:16:13 +0000
ROA not after:            Thu 29 Feb 2024 06:21:13 +0000
asID:                     26930
IP address blocks:        2602:fc68:10::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a0:9e:19:65:89:60:90:41:cd:38:9a:dd:80:5d:33:3b:e8:90:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Mar  2 06:16:13 2023 GMT
            Not After : Feb 29 06:21:13 2024 GMT
        Subject: CN=BA229F30EF2C06291479793444131342CE2611F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c0:71:69:af:44:77:c3:ea:7c:5a:4b:11:55:
                    03:b6:cd:00:ed:ba:af:ca:42:04:4a:b6:43:7e:99:
                    b7:f7:d8:e2:27:3f:0f:17:be:fd:0f:c9:d8:6b:85:
                    86:dc:f1:b2:fc:17:2f:98:47:e3:61:98:57:f7:ba:
                    3f:c9:d7:07:e1:a1:1c:ed:61:ed:69:23:18:13:fc:
                    58:72:48:71:25:c0:c0:17:c5:1d:18:dc:ca:1c:30:
                    15:7d:e3:ff:aa:7d:a9:dc:8d:48:6c:a8:57:74:d1:
                    98:26:9f:b4:5f:5c:ff:1c:97:4b:54:58:eb:63:94:
                    a7:44:37:4c:08:7b:68:2a:e4:c4:76:e6:c1:31:af:
                    86:59:9e:61:46:8f:a2:a7:d8:16:bf:1d:cd:5b:0b:
                    59:5c:aa:52:76:1e:c4:42:ba:bd:cc:9c:2e:1c:e4:
                    46:54:b3:e4:9d:ca:8e:3d:1b:dd:61:f6:e8:97:5a:
                    17:97:06:8b:39:0a:fa:c8:14:6e:a3:8c:c4:5f:28:
                    de:67:6a:12:32:e5:cb:a9:20:46:14:7d:f8:ea:7a:
                    2d:b7:15:89:e9:9d:7e:66:39:9f:7d:15:09:bc:ae:
                    28:fa:03:d5:ac:db:75:f9:4d:6a:5f:3d:6f:94:02:
                    66:b7:01:f1:60:a8:5f:7a:fa:89:9e:8a:7d:dc:19:
                    3c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:22:9F:30:EF:2C:06:29:14:79:79:34:44:13:13:42:CE:26:11:F3
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a31303a3a2f34382d3438203d3e203236393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc68:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:8a:8d:1a:83:7e:0f:57:66:40:cc:af:46:9f:2f:c7:fb:e3:
         14:9b:d4:c9:4a:ec:38:cf:15:b0:05:34:ca:f3:6c:62:4e:10:
         d6:e6:d2:11:ad:dc:ae:fd:e4:37:3d:d2:75:a7:89:06:61:e2:
         09:ca:50:70:3c:71:36:74:ea:df:ac:db:d4:e6:8a:67:7b:34:
         79:21:38:37:90:53:b0:5c:d3:6d:7a:76:47:53:63:18:85:b7:
         39:3b:27:72:0b:a9:b3:19:89:b8:fa:77:12:2d:50:f8:31:6e:
         49:85:f6:0f:ce:fc:cf:e3:b9:ad:13:95:2f:fc:34:47:4d:64:
         5e:5a:1e:ae:13:a7:7f:9e:ed:db:27:46:d2:d5:34:3f:98:3d:
         37:9f:84:56:8e:e3:61:69:93:4e:08:31:b4:e2:fa:1d:07:7b:
         aa:02:53:78:cd:1b:1c:50:76:6f:20:a8:1e:4a:2c:a5:fc:5f:
         78:be:19:47:63:11:9e:89:f7:b6:b8:c9:b0:66:b0:0c:2c:b0:
         2e:a0:8e:a8:27:9b:2d:21:5b:f5:5d:f3:25:c0:37:74:e6:b8:
         66:98:d9:41:05:f1:3f:0a:0c:1f:ec:8c:21:27:ce:e8:8d:43:
         92:c7:c6:cc:19:9a:aa:cd:69:21:fa:0a:16:ab:26:6e:89:f1:
         65:2a:0a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org