Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7903dc2b-85c5-37c6-8fd3-2103935b5411.roa
File:                     7903dc2b-85c5-37c6-8fd3-2103935b5411.roa (raw, json)
Hash identifier:          embsGFmAykmS/BUwcaOXCMoCvlzdOqc2EHxe2FrgsB4=
Subject key identifier:   4B:81:BD:88:00:5C:6E:CD:57:97:5F:7B:E8:2D:48:C2:38:38:9D:43
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584499AA1A3421F49EEE36D3D9C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7903dc2b-85c5-37c6-8fd3-2103935b5411.roa
Signing time:             Fri 19 Jan 2024 02:00:25 +0000
ROA not before:           Fri 19 Jan 2024 02:00:25 +0000
ROA not after:            Thu 18 Apr 2024 01:00:25 +0000
asID:                     33905
IP address blocks:        2600:14e0:4::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:99:aa:1a:34:21:f4:9e:ee:36:d3:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 19 02:00:25 2024 GMT
            Not After : Apr 18 01:00:25 2024 GMT
        Subject: CN=268696b7-aceb-4a69-b4c6-d7fb5dd1ada7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7b:e7:72:4d:d2:79:87:6e:6c:80:06:1f:b2:
                    73:13:bf:85:44:37:3e:f4:cc:57:9d:76:7e:8c:49:
                    7d:85:5c:ee:de:c1:f8:9e:86:b2:3c:87:5e:67:ba:
                    62:64:12:31:25:e1:7d:9b:f9:e2:ca:eb:68:bc:8a:
                    a2:be:9f:d2:c3:82:93:bc:e4:b5:a9:11:ba:a3:1a:
                    84:6c:38:8a:31:0f:f3:14:a2:e7:3b:32:c6:37:f6:
                    48:26:00:30:13:30:35:d8:c7:74:a7:0d:98:00:92:
                    88:f9:fa:ae:a1:55:52:e1:a7:8c:22:ff:be:12:a6:
                    98:66:5e:2d:50:7a:8f:a3:59:71:c4:00:3c:a7:f6:
                    c9:7e:61:08:b7:9f:ad:87:c8:29:ce:05:4f:0c:b5:
                    9a:2f:9a:fb:87:ba:f4:cf:52:8b:77:be:5a:c0:75:
                    2f:9a:65:8d:4d:e1:fc:b0:2a:92:52:d2:dd:fe:3c:
                    e2:7f:30:57:85:16:99:ba:b7:37:7f:c2:d2:64:98:
                    5d:d1:af:c8:68:50:54:84:5f:1c:0c:a1:b4:3a:76:
                    2f:e4:f2:9b:69:e9:5c:a3:ab:5c:f2:64:13:0a:0a:
                    6a:6c:f0:39:a3:71:ca:7d:3c:cf:64:d0:db:b4:d8:
                    c8:5e:c7:5d:1a:3c:08:dc:9b:09:c8:c6:96:e6:45:
                    9e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:81:BD:88:00:5C:6E:CD:57:97:5F:7B:E8:2D:48:C2:38:38:9D:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7903dc2b-85c5-37c6-8fd3-2103935b5411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:14e0:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:72:45:19:0c:2c:23:32:f8:96:49:7a:32:f9:44:c6:2c:b4:
         7b:d2:ed:74:3f:cf:87:ab:b4:68:fa:03:b9:86:05:83:c8:12:
         87:ea:20:9f:c1:6d:a7:18:f9:c0:29:2a:5f:cc:dc:19:f1:ee:
         2e:cb:b4:5d:05:4f:d0:f4:21:46:47:e0:fd:a5:04:20:5b:4a:
         60:30:06:a2:d2:2f:f0:9c:46:a8:26:da:cf:1b:14:03:d8:1b:
         ec:1a:4b:ed:8b:b8:53:30:98:8f:cc:02:fd:cc:5b:4f:10:80:
         0b:3f:d5:ed:97:e8:63:44:8b:97:e1:90:9d:1c:fb:86:d1:b6:
         0e:99:da:eb:8a:6c:90:64:12:9c:d8:6c:b9:13:44:b7:5d:1e:
         1c:13:47:ce:b5:38:d5:63:5f:eb:6f:cc:ca:b6:f9:fc:b8:4c:
         ee:93:12:78:8e:c0:a6:1b:85:c8:cc:85:98:ad:25:d5:a0:3f:
         09:1b:b6:3c:e7:7e:70:a1:26:ff:13:5f:b3:e2:62:c3:f2:94:
         26:e4:4c:2e:f9:fd:57:de:8f:3e:8c:32:86:b0:4c:6e:f6:35:
         4e:59:58:0b:22:5b:c7:5f:75:dd:e4:6f:85:89:26:c2:96:e7:
         9e:75:fa:f9:87:4e:fb:ec:2e:ee:48:ba:a7:eb:05:dc:8e:21:
         29:ea:90:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----