Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/83e9cfeb-1976-3350-a9ad-23e7b4a09d64.roa
File:                     83e9cfeb-1976-3350-a9ad-23e7b4a09d64.roa (raw, json)
Hash identifier:          WtVgGoJ9VakaCinZBOK9tG+DxbSRgyCQH/f4Up8DL4I=
Subject key identifier:   83:A5:65:26:F1:75:0D:51:BE:D4:AC:94:A9:05:31:DB:4F:33:80:B6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584295229F32C4BA53C02B197A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/83e9cfeb-1976-3350-a9ad-23e7b4a09d64.roa
Signing time:             Sun 16 Jul 2023 12:00:00 +0000
ROA not before:           Sun 16 Jul 2023 12:00:00 +0000
ROA not after:            Wed 17 Jan 2024 05:00:00 +0000
asID:                     36535
IP address blocks:        2001:470:162::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:95:22:9f:32:c4:ba:53:c0:2b:19:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 16 12:00:00 2023 GMT
            Not After : Jan 17 05:00:00 2024 GMT
        Subject: CN=77c02110-e026-4356-b8fb-5232b69bdc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:34:98:dd:9d:79:00:87:8f:70:a4:1d:8f:c6:
                    74:6a:3e:bc:3a:89:63:fe:10:ed:b9:6d:ae:bb:57:
                    27:6c:5e:f5:2c:da:55:35:0e:36:66:14:e1:ea:5b:
                    f1:9d:e2:04:80:4e:38:04:42:3b:b7:b6:35:3f:79:
                    b0:e1:e4:92:49:88:25:85:92:37:ca:79:f0:c5:e7:
                    55:e9:9d:32:f1:fd:5e:d0:cf:03:8f:e8:89:9c:71:
                    5b:72:da:24:d4:fa:7a:ba:5c:ed:80:d4:6f:80:9a:
                    de:34:b3:8a:f6:1d:c4:45:b9:5f:b8:58:6c:ac:58:
                    c4:cc:e4:e8:cd:26:a1:74:e2:7f:63:f2:95:a6:26:
                    df:92:3e:ea:cb:b0:23:26:3b:9f:cb:e4:ac:51:13:
                    9f:d0:44:ad:96:e7:67:33:e1:c2:c2:15:56:f3:80:
                    f0:61:b5:82:ae:e3:58:91:5d:e5:c0:29:ef:2c:3b:
                    86:81:56:1c:08:c8:2c:45:89:f1:bc:d6:ab:61:3b:
                    27:6f:6a:0b:f0:7d:01:3b:e4:9b:d2:41:63:97:1a:
                    ca:de:d1:73:27:b3:29:f5:f2:8e:4d:e7:f6:71:33:
                    a9:69:8d:e0:85:2c:60:eb:94:2c:47:23:f4:f4:0a:
                    5e:d3:25:b9:92:c4:8b:31:99:8a:59:fe:a9:32:7b:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A5:65:26:F1:75:0D:51:BE:D4:AC:94:A9:05:31:DB:4F:33:80:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/83e9cfeb-1976-3350-a9ad-23e7b4a09d64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:162::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:96:b2:17:e3:19:87:0b:8c:8e:d1:41:ea:6f:1b:a1:3c:60:
         01:91:8f:e2:07:de:d8:91:56:ef:a2:6e:72:51:fb:08:cc:fd:
         fa:d8:55:30:8b:b2:94:c3:90:ca:2e:d0:a4:ab:26:d2:8b:d4:
         fa:9c:bb:d2:9f:6a:eb:52:ca:7a:f5:27:09:3a:69:e8:f0:77:
         56:49:85:fa:4c:5d:8c:ab:6c:5a:a9:36:86:ea:18:ea:7c:0e:
         5f:51:a9:0c:fe:05:04:73:e9:ff:8c:0e:2c:a6:aa:aa:0c:c9:
         5d:a5:96:d7:75:59:1a:87:1b:4e:2f:75:fc:8d:95:57:48:35:
         8a:b8:67:03:02:6e:f1:cd:5a:73:4a:25:5e:07:90:e5:3e:51:
         62:ed:00:ba:37:9d:16:ce:5f:7a:ac:b7:f7:7d:51:49:6f:6c:
         a0:3a:c2:aa:f3:e2:a8:77:ae:0d:b7:9b:aa:b3:3a:48:41:ee:
         0b:15:57:6d:a9:7a:f2:52:49:7a:68:07:2b:2c:89:d8:72:5b:
         9c:25:40:57:bc:a1:3d:6b:80:5f:8d:30:83:6c:77:8a:8d:56:
         9f:03:94:45:f9:bb:18:35:a6:24:fb:8a:f8:e4:bc:90:76:ca:
         0a:7f:b2:c6:27:bf:f2:84:03:84:f8:7c:a2:e9:4d:c2:62:1e:
         33:c6:a7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 06:41:16 2024 by rpki-client on console-fra.rpki-client.org