Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62ce031f-e5f9-3905-9b95-2cc947aa97ad.roa
File:                     62ce031f-e5f9-3905-9b95-2cc947aa97ad.roa (raw, json)
Hash identifier:          ltFZXAddT41Z1euuX+updLe9BL0o/hN3XPMrbl880+4=
Subject key identifier:   6D:37:47:75:C2:48:3B:78:0C:9F:CC:49:F1:1E:CA:03:2C:37:B1:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73F0C57B57DFC6441F3F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62ce031f-e5f9-3905-9b95-2cc947aa97ad.roa
Signing time:             Fri 29 Nov 2024 13:58:35 +0000
ROA not before:           Fri 29 Nov 2024 13:58:35 +0000
ROA not after:            Thu 27 Feb 2025 13:58:35 +0000
asID:                     21313
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:f0:c5:7b:57:df:c6:44:1f:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:35 2024 GMT
            Not After : Feb 27 13:58:35 2025 GMT
        Subject: CN=580b71fe-ec9c-42a7-8669-dfe92e104ea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:e5:2f:22:1a:f4:a1:45:93:97:e6:13:f0:
                    a7:c1:0f:52:30:18:f1:3c:ee:89:bf:7e:af:eb:e5:
                    7c:87:e1:c2:6e:0b:0c:97:ee:10:61:3e:65:e5:d8:
                    95:48:dc:72:05:49:d0:dd:f6:16:8d:a7:56:fa:40:
                    58:db:4b:96:0f:a2:6b:3e:9d:95:ca:f0:35:63:34:
                    e2:67:fd:76:f3:84:ad:39:4f:76:8e:42:a9:3e:85:
                    dd:0b:0e:47:44:92:5a:3f:2f:f5:f6:3c:f0:75:cd:
                    c1:6d:cf:7b:cf:1c:82:8a:03:49:11:93:62:8c:e7:
                    40:31:50:62:a8:7f:69:31:8e:5e:3f:37:61:cd:fc:
                    f4:d0:28:cc:2c:78:3e:4a:83:a6:8d:99:15:8f:77:
                    51:47:1f:32:a3:c6:e2:5a:fc:ee:3b:15:1f:7e:d6:
                    7f:67:b8:33:86:5c:12:98:a5:91:8d:e0:38:b1:cf:
                    97:2c:ac:0b:a7:34:58:d2:7b:9d:ae:df:ec:c2:65:
                    13:c7:de:db:fb:83:e0:ed:c4:4c:6e:80:f6:11:21:
                    8e:33:4c:f1:b0:bb:ce:05:b7:68:9f:19:4b:62:0e:
                    f2:9d:d7:8b:f0:c1:1a:54:ba:7e:39:15:8a:28:e7:
                    0e:e3:74:e2:36:7a:d9:4d:90:7f:10:ff:36:39:79:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:37:47:75:C2:48:3B:78:0C:9F:CC:49:F1:1E:CA:03:2C:37:B1:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62ce031f-e5f9-3905-9b95-2cc947aa97ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:9a:00:ba:2a:18:83:df:f4:3f:ff:4b:1e:07:f3:90:8f:49:
         47:49:e6:31:9a:0f:1e:93:6d:67:3b:82:b0:76:a9:87:51:70:
         1b:27:fc:77:66:64:9e:ca:15:54:33:b4:f2:af:66:2e:e6:e4:
         52:2e:04:f1:d2:9f:db:5a:49:46:bc:b6:7a:d7:b9:b4:a5:06:
         e6:b7:38:8c:63:d2:b5:d9:58:de:56:c6:f3:60:47:63:37:a9:
         7b:04:88:aa:58:87:bf:d8:67:b5:06:e8:a9:a1:8b:63:30:b6:
         a4:75:b6:d7:86:16:a3:7e:d5:f1:36:88:e6:27:96:a7:21:c2:
         20:7a:83:8b:37:7a:c5:42:83:0c:18:6d:26:a3:a3:94:0d:20:
         c9:6c:d6:6e:8a:ad:f4:c0:8d:90:6c:ec:5f:67:ac:7f:c2:07:
         bd:e8:e1:ff:c8:76:0e:9a:b9:a5:01:0f:06:9c:6c:14:64:be:
         27:3a:84:ec:d7:27:4e:69:88:c4:d5:9b:1e:14:70:23:fa:2f:
         81:79:fa:d8:f1:7e:4e:9e:c8:c0:c7:31:05:5e:d7:7e:29:32:
         b5:43:b0:4a:18:f7:24:e7:6c:4d:2e:c6:7b:81:fa:17:51:30:
         fa:f0:47:a8:53:87:98:e9:b4:ac:5e:f1:70:63:7b:a5:3b:e2:
         36:64:20:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----