Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/524cb985-892b-32dd-a829-d8ff5b48a646.roa
File:                     524cb985-892b-32dd-a829-d8ff5b48a646.roa (raw, json)
Hash identifier:          7uyUj0HUdesVMpplyCT4ItbiHKl6Jfrqr1xVIUvpJoE=
Subject key identifier:   15:10:F6:C5:4A:74:F5:A0:C0:3C:E4:8C:23:12:89:1B:4D:71:94:B7
Certificate issuer:       /CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
Certificate serial:       010D0C9F432858428CB3A2B39C9A8DD95D8A1D20
Authority key identifier: CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/524cb985-892b-32dd-a829-d8ff5b48a646.roa
Signing time:             Sat 15 Jul 2023 01:00:17 +0000
ROA not before:           Sat 15 Jul 2023 01:00:17 +0000
ROA not after:            Fri 13 Oct 2023 01:00:17 +0000
asID:                     32316
IP address blocks:        2602:812:2000::/45 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:8c:b3:a2:b3:9c:9a:8d:d9:5d:8a:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80f343df-55be-4b48-b559-15fb2fe6c1c5
        Validity
            Not Before: Jul 15 01:00:17 2023 GMT
            Not After : Oct 13 01:00:17 2023 GMT
        Subject: CN=e8433e75-cd13-44a1-9403-62b3fbb1dc64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0a:9e:f9:cd:23:f5:3d:f1:9b:30:c4:a8:5b:
                    ed:21:20:97:65:d8:59:f6:19:d7:ae:6b:fd:55:01:
                    79:02:7a:8f:d7:d8:c6:28:fb:76:9a:a0:89:98:60:
                    34:3c:84:ca:e0:a9:35:34:de:23:57:c8:da:b1:ce:
                    7d:fc:40:39:36:19:84:a1:a8:55:1e:ff:9f:e8:1c:
                    75:8c:92:e1:f7:f4:a4:c4:20:b4:77:7e:f0:8d:38:
                    98:dd:e1:fa:0f:e2:49:e0:ab:66:fd:81:41:8c:ec:
                    39:69:c8:f7:df:34:e9:cd:65:de:61:06:7c:14:69:
                    1c:34:99:d1:94:9e:ba:e5:70:94:17:e6:6d:60:f1:
                    8e:d7:e8:09:f4:3b:7b:be:c5:65:ae:13:49:4e:53:
                    f3:95:77:ac:86:04:a4:22:0e:97:70:d1:97:8b:2b:
                    0d:44:cd:88:14:85:69:dd:33:37:0f:89:35:0c:0d:
                    90:2e:c4:dc:62:89:26:62:cd:ff:ef:bc:1a:44:e4:
                    e4:95:6b:72:82:45:75:80:8b:3a:a4:f1:ec:be:c1:
                    cb:1b:20:58:dc:64:77:a3:24:26:e0:5b:b7:cc:33:
                    31:a9:0c:84:8f:43:57:6a:90:51:c1:be:e7:ac:6d:
                    8d:e2:c6:2a:58:0f:41:8c:13:83:44:54:2d:ff:c3:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:10:F6:C5:4A:74:F5:A0:C0:3C:E4:8C:23:12:89:1B:4D:71:94:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/524cb985-892b-32dd-a829-d8ff5b48a646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5/80f343df-55be-4b48-b559-15fb2fe6c1c5.crl

            X509v3 Authority Key Identifier:
                keyid:CA:25:37:D9:1E:AF:B6:C9:18:89:19:53:82:63:C8:4F:4D:F0:83:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/80f343df-55be-4b48-b559-15fb2fe6c1c5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:812:2000::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:4e:41:f8:32:60:93:0b:03:ed:dc:45:4b:58:11:06:a3:c5:
         5e:29:a1:ae:17:31:80:be:2e:13:5f:07:64:f7:d4:65:14:d6:
         ac:8d:72:3c:1e:2a:9c:4a:ea:fb:ed:5d:dc:7e:40:dd:4d:02:
         ae:3f:82:54:4a:e3:0e:38:bb:6f:f8:0f:ef:7a:8f:6f:0b:94:
         0f:ad:47:87:73:44:a0:08:8e:14:e9:c1:32:5d:c6:68:fc:96:
         18:c9:dc:af:03:fe:12:26:ee:f7:b8:ec:dd:a2:b3:4a:fd:af:
         13:c5:ad:fd:5d:c2:91:d5:2b:fa:53:48:cf:d6:41:68:eb:db:
         66:75:84:d1:ae:f6:d5:01:07:e4:6a:e0:cd:6f:74:7f:b4:37:
         d2:5d:99:8c:b6:40:b5:19:90:68:33:33:b6:46:94:6a:b8:af:
         7e:c8:c2:85:a2:35:52:c0:0c:41:24:40:3b:6f:44:72:31:90:
         1c:13:d0:1e:3a:dc:9f:95:5a:d0:c6:20:1f:38:7e:96:24:af:
         b3:ce:92:cb:06:c8:5b:bf:14:45:4d:ac:cd:68:64:f4:eb:10:
         67:0c:7d:3c:4e:aa:91:38:57:bf:ee:e5:a5:8b:b5:25:7b:3c:
         73:16:fd:7f:9b:80:66:98:e7:dc:4f:10:36:b3:13:8f:38:75:
         b0:be:a0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----