Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbae2cb9-3e00-360c-a7ec-1043015cc98c.roa
File:                     bbae2cb9-3e00-360c-a7ec-1043015cc98c.roa (raw, json)
Hash identifier:          Zwar/XoS0gkCMS3xqflA5/jHOz24FAWw6IDzHr4yg/8=
Subject key identifier:   15:8F:9B:EA:D4:37:A1:EF:20:21:DD:9A:23:85:26:7D:96:D5:54:5B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F432858449F3F7BE3FEB1201232A4D940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbae2cb9-3e00-360c-a7ec-1043015cc98c.roa
Signing time:             Sun 21 Jan 2024 02:00:26 +0000
ROA not before:           Sun 21 Jan 2024 02:00:26 +0000
ROA not after:            Sat 20 Apr 2024 01:00:26 +0000
asID:                     35204
IP address blocks:        2600:1419:c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:9f:3f:7b:e3:fe:b1:20:12:32:a4:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 21 02:00:26 2024 GMT
            Not After : Apr 20 01:00:26 2024 GMT
        Subject: CN=374a7de7-7623-4f1d-8b21-8376ea48b6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dc:af:3e:ed:1b:52:70:76:94:16:b2:c5:05:
                    9d:9e:53:27:80:cd:1c:02:7b:a8:b7:0a:9d:d1:a9:
                    67:90:ed:98:b1:32:24:08:5a:b6:8f:68:53:f0:4a:
                    fa:57:bd:8d:e8:3f:15:82:cc:9b:45:7d:f2:7d:9f:
                    dd:83:16:7c:20:cd:19:9e:35:34:5f:20:fa:e5:30:
                    0f:8e:3d:4b:b2:88:0e:1a:50:ab:cb:55:47:85:e9:
                    67:ed:25:22:c4:ea:f0:2a:ae:c4:39:de:9e:17:0b:
                    38:c8:35:c0:50:92:57:05:26:98:e5:07:06:4a:6f:
                    84:1c:2c:f8:b6:cf:43:4a:35:7a:1e:78:1a:1d:bf:
                    b0:ea:35:82:aa:c9:ba:6d:78:35:5a:a3:bc:c8:d5:
                    f3:19:8e:c2:7b:64:17:ad:01:32:74:2f:2d:fe:ca:
                    d1:1d:8b:22:e7:36:0d:94:14:dd:69:41:b9:39:a2:
                    7d:d5:9d:10:fb:f0:78:4f:46:01:94:33:4f:3d:c3:
                    95:a6:87:04:36:c0:13:11:be:00:df:ad:48:e9:66:
                    c3:5d:cc:b9:b4:d9:53:1d:cc:8a:ea:4f:96:76:44:
                    9e:4d:b2:ac:cb:a0:49:16:d2:af:9e:d1:53:1c:4b:
                    51:b0:45:8a:c1:1d:3f:e5:01:2f:94:b7:a3:c7:cc:
                    cb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8F:9B:EA:D4:37:A1:EF:20:21:DD:9A:23:85:26:7D:96:D5:54:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbae2cb9-3e00-360c-a7ec-1043015cc98c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1419:c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:11:24:0c:c1:1a:06:5e:4e:af:1e:a2:21:8c:2e:72:a8:ee:
         ec:05:d2:21:4a:cc:1c:fa:e0:8b:a2:e3:02:05:41:b3:e6:1f:
         da:51:06:e0:ab:ea:24:91:38:a6:fc:15:1b:07:d3:71:f0:7e:
         80:05:e8:ec:e3:d5:cd:7b:53:c5:83:1c:2a:ad:17:29:fd:1a:
         f0:f7:f1:58:93:f1:73:79:e6:1e:8f:84:b5:6a:13:6b:80:d0:
         ee:8a:f9:60:84:c7:4f:af:e7:df:3b:2c:5c:04:b8:a8:f1:e6:
         d3:8d:e6:fb:12:27:7b:2d:9a:63:d1:89:b1:cb:43:5d:e0:f5:
         1d:1b:3f:1c:e4:ac:73:a3:b4:cd:84:ac:d0:ee:b3:0d:6c:2f:
         5a:ff:47:e5:69:17:ae:36:c3:9f:17:a2:1c:8f:1d:00:8d:15:
         d3:67:e3:17:df:ee:6e:d1:02:cc:e8:5a:ea:46:a0:16:59:a7:
         e1:ce:5a:d2:91:89:fc:56:50:b0:ab:61:f3:9c:e8:8f:2a:65:
         10:d6:1b:e2:f2:13:3a:53:9e:e2:62:77:23:6b:3e:a6:6b:13:
         7b:d0:f9:da:8a:c6:6c:7c:f0:2a:cc:90:4b:44:e3:3a:2b:7a:
         c9:d3:87:3f:54:c2:bd:38:23:ce:1d:87:e9:72:41:a7:8d:f1:
         ba:ce:7c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:04 2024 by rpki-client on console-ams.rpki-client.org