Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5c28f08-4aa7-3ac5-8e17-17e70fc5c735.roa
File:                     a5c28f08-4aa7-3ac5-8e17-17e70fc5c735.roa (raw, json)
Hash identifier:          i6VgVnaDg6u7FdBFNb/Ytr/7yPhFG71IxcavetpKkUc=
Subject key identifier:   29:E5:F8:56:1F:62:61:C2:4A:87:AE:AB:10:40:11:DD:80:21:48:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858480A74082DD6F95A59504B6CE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5c28f08-4aa7-3ac5-8e17-17e70fc5c735.roa
Signing time:             Fri 29 Nov 2024 13:58:46 +0000
ROA not before:           Fri 29 Nov 2024 13:58:46 +0000
ROA not after:            Thu 27 Feb 2025 13:58:46 +0000
asID:                     396561
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0a:74:08:2d:d6:f9:5a:59:50:4b:6c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 29 13:58:46 2024 GMT
            Not After : Feb 27 13:58:46 2025 GMT
        Subject: CN=6e847881-9c6b-4d8d-8d6c-a71150d42f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b2:0a:df:e1:9c:7b:82:3b:db:46:d6:95:99:
                    57:aa:39:6f:6d:f5:7e:7a:e6:ed:af:1d:e0:64:1a:
                    6a:b6:df:02:1a:a6:f4:54:55:9a:a3:96:98:9a:6c:
                    db:96:9d:45:cc:42:3e:dc:94:cd:01:4c:fe:d3:2b:
                    03:ec:00:e6:c0:43:61:22:20:97:4d:7f:20:cf:53:
                    47:64:ce:3d:a4:0a:ff:56:1c:8a:24:47:9a:5a:3a:
                    68:cc:7f:dc:68:1d:10:98:f0:38:45:02:93:e6:49:
                    00:74:99:5c:59:4f:5a:40:06:7f:37:67:16:5d:5f:
                    82:84:46:3b:cf:b1:16:79:0b:dc:58:ac:05:5f:3a:
                    f8:20:a0:8a:34:69:4f:de:63:8e:45:f9:dc:c9:a0:
                    06:58:c0:2e:78:e2:27:5f:8f:65:be:e1:5c:24:a9:
                    15:a8:ec:59:15:fa:91:05:47:50:66:3f:aa:54:26:
                    97:d5:f3:f1:b5:09:07:ff:8c:93:17:06:8b:3a:39:
                    81:ab:9c:6e:a4:43:12:cd:0b:e8:13:ce:61:4b:7c:
                    88:6d:54:01:96:7f:4d:90:8d:b5:c6:a5:1b:46:1d:
                    96:b1:c9:27:a1:3c:de:03:2a:04:68:64:65:fd:05:
                    44:75:4f:bd:70:e7:56:b0:95:c4:19:18:ad:c6:5e:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E5:F8:56:1F:62:61:C2:4A:87:AE:AB:10:40:11:DD:80:21:48:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5c28f08-4aa7-3ac5-8e17-17e70fc5c735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e3:a3:9d:12:51:77:cb:79:e0:e5:ee:51:c9:4b:77:5b:b8:
         3d:d8:ad:cc:9a:80:56:03:57:7d:c5:1d:e1:05:8a:e3:c4:d6:
         80:ac:40:24:a1:61:5b:67:4d:3c:51:06:54:cf:5f:f9:76:1e:
         60:39:5a:63:90:8d:ab:1c:29:8c:fa:68:f4:16:60:46:5d:19:
         a6:7e:57:00:96:f9:85:3a:88:43:12:5e:d0:e8:1f:8a:11:46:
         a4:65:42:92:84:c7:1c:c8:3e:db:4e:81:8d:e6:93:8a:3e:0d:
         f7:49:28:76:fa:e7:8d:f5:2b:aa:6b:02:56:c4:08:ce:f5:69:
         13:f7:f6:9c:3f:39:31:0b:83:ba:f1:50:c8:12:bc:93:ef:69:
         44:3d:a6:b6:7f:40:df:41:0d:25:97:dd:31:f5:29:99:bc:b7:
         dd:67:d6:a4:2a:c1:0a:64:f1:21:7b:08:4c:91:ab:9e:ee:17:
         b0:20:ef:1e:25:b5:df:c0:90:10:da:7e:2c:ad:43:53:36:61:
         62:64:69:01:be:3c:63:de:e5:28:b4:56:68:59:1c:5a:f0:09:
         8e:9a:85:ce:05:ea:9b:01:f3:3c:2d:2c:64:08:6d:a7:b2:77:
         ba:d9:ad:65:8c:12:b4:17:6c:ae:fc:83:ee:42:65:b9:d0:9e:
         25:20:15:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----