Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/40cd7a74-f1fc-3bf3-9377-a4582fbcfd88.roa
File:                     40cd7a74-f1fc-3bf3-9377-a4582fbcfd88.roa (raw, json)
Hash identifier:          ow4Kr1dbvMqB8qHzf0NuFDMNWi9mJ/yQh7W3oYKHmJY=
Subject key identifier:   4D:69:3B:7B:23:15:CA:08:58:BD:AF:F6:6D:E7:07:04:AD:43:D0:6A
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F432858442CC94DB154DCD1E8D55AAE00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/40cd7a74-f1fc-3bf3-9377-a4582fbcfd88.roa
Signing time:             Mon 11 Dec 2023 02:00:15 +0000
ROA not before:           Mon 11 Dec 2023 02:00:15 +0000
ROA not after:            Sun 10 Mar 2024 02:00:15 +0000
asID:                     399976
IP address blocks:        2602:80c:20c9::/48 maxlen: 48
                          2602:80c:20c8::/48 maxlen: 48
                          2602:80c:20c7::/48 maxlen: 48
                          2602:80c:20c6::/48 maxlen: 48
                          2602:80c:20c5::/48 maxlen: 48
                          2602:80c:20c4::/48 maxlen: 48
                          2602:80c:20c3::/48 maxlen: 48
                          2602:80c:20c1::/48 maxlen: 48
                          2602:80c:20c0::/48 maxlen: 48
                          2602:80c:20cd::/48 maxlen: 48
                          2602:80c:20cc::/48 maxlen: 48
                          2602:80c:20cb::/48 maxlen: 48
                          2602:80c:20cf::/48 maxlen: 48
                          2602:80c:20ce::/48 maxlen: 48
                          2602:80c:20c0::/44 maxlen: 48
                          2602:80c:20c2::/48 maxlen: 48
                          2602:80c:20ca::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:2c:c9:4d:b1:54:dc:d1:e8:d5:5a:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Dec 11 02:00:15 2023 GMT
            Not After : Mar 10 02:00:15 2024 GMT
        Subject: CN=2758cbd1-30eb-4629-87c1-55a067727819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:78:33:08:0d:80:a6:c2:c7:b7:34:ef:15:98:
                    68:0f:f3:33:b6:9b:fd:c1:1e:e4:f0:30:39:9f:ae:
                    74:72:68:df:89:d8:85:99:04:1c:5d:35:54:95:25:
                    ed:d8:d9:96:d5:1a:aa:f9:77:0f:34:2c:59:55:fc:
                    7d:d3:e5:16:c8:26:36:7b:75:10:32:ce:54:7b:45:
                    8b:18:41:8d:45:2e:eb:aa:72:85:c7:93:9c:e4:be:
                    0e:2d:db:5b:88:a2:f5:24:84:bf:36:c9:91:a4:48:
                    60:2f:c1:7b:c2:fc:d6:48:f8:76:b7:55:cc:72:73:
                    63:23:6a:3d:c5:3b:8b:34:fa:24:aa:f3:6c:7f:7e:
                    49:25:36:22:59:31:2b:b0:53:47:b9:fc:a6:65:69:
                    d5:77:69:22:f9:13:49:4e:90:b5:03:11:ab:d7:e6:
                    e8:af:20:0a:07:fc:54:67:54:fa:d0:98:04:13:93:
                    81:47:64:dc:a0:af:ba:08:67:1d:57:f1:f7:c5:4e:
                    07:e2:48:62:37:71:fa:4f:da:b1:ab:72:4d:b2:a1:
                    22:11:bc:af:76:99:f9:72:a8:ec:93:d4:03:9a:33:
                    61:bb:b7:c8:13:a0:20:cb:45:2d:73:38:e3:99:3b:
                    09:cc:bd:72:2b:a8:7a:f0:6e:af:6c:f5:3a:d0:8f:
                    9a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:69:3B:7B:23:15:CA:08:58:BD:AF:F6:6D:E7:07:04:AD:43:D0:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/40cd7a74-f1fc-3bf3-9377-a4582fbcfd88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20c0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:52:d5:9a:27:db:15:22:46:07:5e:46:5b:b8:00:37:a1:de:
         35:66:9a:04:98:bd:c9:0f:0e:60:da:0b:33:b7:74:77:d9:ac:
         c4:80:a3:3a:0c:18:8d:c2:57:07:8e:33:a0:a3:a8:05:ef:89:
         18:8e:a0:ff:3b:f6:64:98:d8:b5:d9:f9:fc:a5:41:42:13:d8:
         46:10:d3:9b:9f:52:d5:6c:c2:20:2f:3c:a8:2a:29:33:27:6e:
         af:f1:54:b9:0e:83:17:c3:56:3c:29:8e:91:53:d9:e0:93:ad:
         eb:3f:48:16:7d:6b:f3:9b:35:a4:60:31:7e:ba:a6:51:0f:fb:
         44:93:0f:1c:82:7a:e7:12:3c:9c:15:0d:24:04:68:31:89:90:
         71:60:14:97:5a:b8:ea:4a:5f:a5:dc:a5:7d:7a:3b:fb:8a:a9:
         b1:f2:59:b2:81:1b:66:f3:b3:6b:5f:22:93:eb:d7:52:4a:e7:
         c9:c6:24:50:99:05:d2:77:24:de:ef:d2:69:21:33:cd:9f:72:
         68:18:31:91:b7:ff:e2:d0:d4:c3:52:63:0e:36:3d:40:68:fc:
         5e:94:36:9a:3a:2e:b3:64:c8:15:47:44:f4:a7:9c:29:e5:55:
         31:a6:16:c2:fd:ac:96:64:07:3b:75:61:50:e8:6c:5c:f0:26:
         47:2c:8b:e5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEQsyU2xVNzR6NVargAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3NTE0MGMtNTJjYy00MDFmLWIzYTAtNDc2ZmZhMzY3
MDc2MB4XDTIzMTIxMTAyMDAxNVoXDTI0MDMxMDAyMDAxNVowLzEtMCsGA1UEAxMk
Mjc1OGNiZDEtMzBlYi00NjI5LTg3YzEtNTVhMDY3NzI3ODE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHgzCA2ApsLHtzTvFZhoD/Mztpv9wR7k8DA5
n650cmjfidiFmQQcXTVUlSXt2NmW1Rqq+XcPNCxZVfx90+UWyCY2e3UQMs5Ue0WL
GEGNRS7rqnKFx5Oc5L4OLdtbiKL1JIS/NsmRpEhgL8F7wvzWSPh2t1XMcnNjI2o9
xTuLNPokqvNsf35JJTYiWTErsFNHufymZWnVd2ki+RNJTpC1AxGr1+boryAKB/xU
Z1T60JgEE5OBR2TcoK+6CGcdV/H3xU4H4khiN3H6T9qxq3JNsqEiEbyvdpn5cqjs
k9QDmjNhu7fIE6Agy0UtczjjmTsJzL1yK6h68G6vbPU60I+aOQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFE1pO3sjFcoIWL2v9m3nBwStQ9BqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1
MTQwYy01MmNjLTQwMWYtYjNhMC00NzZmZmEzNjcwNzYvNDBjZDdhNzQtZjFmYy0z
YmYzLTkzNzctYTQ1ODJmYmNmZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjM3NTE0MGMtNTJjYy00MDFmLWIz
YTAtNDc2ZmZhMzY3MDc2L2YzNzUxNDBjLTUyY2MtNDAxZi1iM2EwLTQ3NmZmYTM2
NzA3Ni5jcmwwHwYDVR0jBBgwFoAUROoAp6wNg47spRDusUL/C5heBvMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzc1MTQwYy01MmNjLTQwMWYtYjNhMC00NzZm
ZmEzNjcwNzYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgIIDCDA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADdS1Zon2xUiRgdeRlu4ADeh3jVmmgSYvckPDmDaCzO3dHfZrMSA
ozoMGI3CVweOM6CjqAXviRiOoP879mSY2LXZ+fylQUIT2EYQ05ufUtVswiAvPKgq
KTMnbq/xVLkOgxfDVjwpjpFT2eCTres/SBZ9a/ObNaRgMX66plEP+0STDxyCeucS
PJwVDSQEaDGJkHFgFJdauOpKX6XcpX16O/uKqbHyWbKBG2bzs2tfIpPr11JK58nG
JFCZBdJ3JN7v0mkhM82fcmgYMZG3/+LQ1MNSYw42PUBo/F6UNpo6LrNkyBVHRPSn
nCnlVTGmFsL9rJZkBzt1YVDobFzwJkcsi+U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:08 2024 by rpki-client on console-fra.rpki-client.org