Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9ecd88a9-6839-3ee4-86e8-2a306512c5bd.roa
File:                     9ecd88a9-6839-3ee4-86e8-2a306512c5bd.roa (raw, json)
Hash identifier:          ZGWLZmGlbD6e6VLoXluZmY2XGnzPfmGZuQqjxoh5vQA=
Subject key identifier:   6D:D4:0D:14:B6:E5:E3:29:8A:F6:1F:1E:18:E3:85:C1:1E:A8:31:09
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A50A28E2C7A3297AE4C7F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9ecd88a9-6839-3ee4-86e8-2a306512c5bd.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     12266
IP address blocks:        2001:470:2b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:50:a2:8e:2c:7a:32:97:ae:4c:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=3ccbebd2-d9fe-4110-8891-83982f132ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:dc:9c:04:01:f1:75:c3:b1:de:c6:0a:b9:
                    27:e3:ee:3e:71:15:97:c1:f9:1a:80:e5:5e:ec:28:
                    7e:5d:45:4c:de:bd:bf:a0:b4:c2:fc:e3:56:d5:77:
                    bd:84:cb:76:87:cd:92:bf:79:f4:cb:ba:95:bd:ba:
                    5d:9f:36:c0:85:1f:9c:3e:d7:89:64:94:e4:7d:99:
                    45:68:09:2e:cf:4c:78:0e:c3:b5:63:e2:02:e3:db:
                    c1:13:cf:9f:c9:28:26:e9:db:b7:fb:df:fa:f9:a2:
                    5c:ef:14:41:8f:0d:c0:6a:b6:17:6d:f5:a1:86:3f:
                    a7:62:3f:a3:c6:01:4b:cb:ce:74:19:cb:bb:10:8f:
                    8e:25:61:82:b9:75:33:c8:76:e2:30:d2:93:c1:fa:
                    55:93:12:50:6c:b3:d3:f6:df:a1:e4:17:39:82:5b:
                    b1:0c:83:42:e4:a9:a5:60:1d:f7:5f:6e:84:6a:d5:
                    6e:cc:f4:ab:af:0b:35:f5:0b:8d:01:b4:a0:34:ef:
                    21:c0:4c:8b:ea:b6:25:15:3f:19:6c:85:51:1c:8d:
                    ee:0f:ab:8a:72:4a:fb:4c:29:fe:21:2c:7d:cf:d7:
                    1f:8c:69:74:b8:b7:5f:dc:a2:25:7b:43:81:b8:25:
                    fa:75:3d:81:0b:c7:ce:32:42:37:60:4f:d2:d5:03:
                    cb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D4:0D:14:B6:E5:E3:29:8A:F6:1F:1E:18:E3:85:C1:1E:A8:31:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9ecd88a9-6839-3ee4-86e8-2a306512c5bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:34:ff:25:b1:5f:99:a3:16:00:0b:2b:28:f9:8f:00:af:f2:
         9e:c3:0d:f2:67:98:2c:23:67:cc:3e:28:ce:37:fc:e3:f5:18:
         cf:df:e5:cb:dc:ae:7d:b6:26:fe:96:df:7d:45:05:96:40:ca:
         07:b2:b9:40:b9:ab:7a:70:cf:c6:01:f8:1d:43:49:3c:b8:87:
         6f:e5:24:91:a4:7f:0d:2f:76:ce:b7:34:5e:ec:be:21:7f:f7:
         fd:06:f0:98:0d:06:c2:f1:7f:9b:05:0f:48:2f:80:1b:ea:05:
         d8:b3:4e:e6:3c:08:b9:96:53:f3:b6:3c:89:c0:c8:1f:48:35:
         22:2b:91:ed:5e:34:26:e7:eb:c4:51:44:e8:92:3f:55:09:15:
         2b:07:c5:1e:29:24:e3:65:df:5c:37:e6:af:dd:66:d5:c8:28:
         c6:de:53:62:e8:0b:b0:dc:3e:8e:ce:6e:6e:5c:7c:6b:8e:5f:
         12:e8:35:f1:58:f5:fe:5f:26:dc:a9:9c:67:b4:b6:d0:12:5e:
         e5:2d:51:82:b3:62:25:a0:86:42:5e:65:7a:68:97:39:b0:50:
         58:f1:1b:7e:52:72:78:84:e2:35:1b:4f:aa:01:15:85:1c:ab:
         ff:ca:7b:c5:1f:7f:7a:b5:31:a3:4b:9d:17:ae:16:e5:96:df:
         e1:5c:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:05 2023 by rpki-client on console-fra.rpki-client.org