Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7151daea-a0e3-3a66-b279-73469c527e5a.roa
File:                     7151daea-a0e3-3a66-b279-73469c527e5a.roa (raw, json)
Hash identifier:          OyxuEl5SrBoQyTjmep31tEohcz3HwZV+ylARSqLKLmE=
Subject key identifier:   81:E7:F2:9C:4F:68:15:13:48:9A:9A:62:F7:82:8E:F8:FF:52:49:36
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A73F64ABC2589549FB70B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7151daea-a0e3-3a66-b279-73469c527e5a.roa
Signing time:             Fri 29 Nov 2024 13:58:37 +0000
ROA not before:           Fri 29 Nov 2024 13:58:37 +0000
ROA not after:            Thu 27 Feb 2025 13:58:37 +0000
asID:                     397202
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:73:f6:4a:bc:25:89:54:9f:b7:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:37 2024 GMT
            Not After : Feb 27 13:58:37 2025 GMT
        Subject: CN=efc6d7e6-2a2a-40db-98f7-0e53013b5600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:4e:e3:96:02:ff:80:7f:9e:ed:c7:c0:41:
                    65:40:9a:73:a0:86:bf:a0:c4:01:4e:38:2d:d4:d2:
                    31:48:40:19:78:5f:bb:32:84:df:e4:d7:d3:e2:f8:
                    c9:2a:5d:ec:bb:bc:36:f4:72:98:6c:09:2f:7d:d0:
                    1d:47:e8:15:51:c5:30:6c:b6:b4:63:83:64:65:1d:
                    e3:e0:cf:e1:9e:43:96:b5:f5:3e:84:22:d5:2d:66:
                    b6:65:9c:82:29:0f:0b:cf:a5:a8:23:16:27:1a:c1:
                    33:96:97:cc:85:1d:04:05:a6:42:46:d2:8d:99:81:
                    5a:9e:08:c3:e3:36:e8:41:ca:03:b1:a7:87:77:5c:
                    2e:82:15:9f:77:6b:d1:c8:d5:4f:02:92:68:a5:48:
                    2a:b2:a1:27:81:35:b4:44:31:83:24:9a:87:3f:20:
                    c9:cb:91:f5:b3:d9:34:e1:03:c1:24:6a:74:78:da:
                    38:c8:d0:50:d3:81:54:6b:e3:da:5b:71:86:e1:ae:
                    28:1e:6d:45:31:fd:57:43:02:eb:67:04:57:df:e3:
                    b4:87:fe:c4:10:5a:bb:83:62:76:b2:9e:9c:41:f3:
                    35:fd:cd:e6:d8:f4:76:ea:4c:f8:85:91:41:ff:66:
                    a5:56:87:b2:01:0c:60:97:0a:1c:b1:7c:d6:c9:c9:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E7:F2:9C:4F:68:15:13:48:9A:9A:62:F7:82:8E:F8:FF:52:49:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7151daea-a0e3-3a66-b279-73469c527e5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:dd:d0:8a:1d:af:29:62:4e:af:87:18:da:1c:89:18:55:e9:
         95:e6:a3:e9:c3:8c:85:36:94:31:43:60:75:2c:b9:39:76:07:
         5a:78:09:40:53:ee:97:fb:8a:28:dd:8e:aa:fd:1c:17:c3:96:
         08:65:52:81:d0:1f:0d:3f:9f:d4:af:20:b6:2e:82:7f:f3:e4:
         95:81:8c:d8:54:2f:bf:23:e8:78:df:4f:01:eb:30:ec:c9:d3:
         70:f4:2b:8d:5d:4b:63:34:64:ab:d5:62:fa:d3:14:ae:82:38:
         63:7b:6a:f8:9e:2e:4e:cf:7c:60:be:95:5b:ee:a9:2b:67:ad:
         1b:a7:dd:7b:c9:f9:d4:2b:54:93:e5:ed:5a:e3:a6:e0:6c:32:
         04:70:dd:16:59:9d:a6:fa:a7:8a:e1:0b:3c:ea:b3:5a:a6:0f:
         30:15:95:75:dc:e2:8a:26:e2:cb:36:ff:d8:c8:c1:41:0e:76:
         cc:0a:1d:6a:5f:98:6f:ac:d1:7e:e3:a5:92:e0:ad:74:8e:7f:
         6d:0b:86:27:48:e3:48:42:21:cb:2b:f9:ed:34:b3:72:88:a1:
         be:1d:4c:c9:0c:03:fe:1f:41:3d:2f:a3:0d:73:5e:e1:45:80:
         20:21:4b:4f:96:ae:4f:45:5b:3e:df:ad:db:24:31:7f:04:80:
         c5:36:ee:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----