Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/592a020e-ed0c-3df0-a66a-dcd0d1ed79ac.roa
File:                     592a020e-ed0c-3df0-a66a-dcd0d1ed79ac.roa (raw, json)
Hash identifier:          st5od1Kx5ejKcShIxz+dy358ih6aCOVwIGm88xyvMzQ=
Subject key identifier:   D6:C8:38:0A:6A:F8:03:59:74:5D:69:63:F5:7A:8B:24:B4:74:61:3C
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584429FE9DC4687EA7F530704100
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/592a020e-ed0c-3df0-a66a-dcd0d1ed79ac.roa
Signing time:             Sun 10 Dec 2023 02:00:16 +0000
ROA not before:           Sun 10 Dec 2023 02:00:16 +0000
ROA not after:            Sat 09 Mar 2024 02:00:16 +0000
asID:                     399976
IP address blocks:        2602:80c:20a1::/48 maxlen: 48
                          2602:80c:20a8::/48 maxlen: 48
                          2602:80c:20a3::/48 maxlen: 48
                          2602:80c:20a9::/48 maxlen: 48
                          2602:80c:20a4::/48 maxlen: 48
                          2602:80c:20a5::/48 maxlen: 48
                          2602:80c:20a6::/48 maxlen: 48
                          2602:80c:20a7::/48 maxlen: 48
                          2602:80c:20ae::/48 maxlen: 48
                          2602:80c:20af::/48 maxlen: 48
                          2602:80c:20ac::/48 maxlen: 48
                          2602:80c:20a2::/48 maxlen: 48
                          2602:80c:20ad::/48 maxlen: 48
                          2602:80c:20a0::/44 maxlen: 48
                          2602:80c:20aa::/48 maxlen: 48
                          2602:80c:20a0::/48 maxlen: 48
                          2602:80c:20ab::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:29:fe:9d:c4:68:7e:a7:f5:30:70:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Dec 10 02:00:16 2023 GMT
            Not After : Mar  9 02:00:16 2024 GMT
        Subject: CN=ab26c690-f7dc-4289-b901-089b720824df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:49:7f:5a:05:b3:06:3c:0a:2c:6b:69:89:8f:
                    7d:66:7b:2b:19:9e:62:37:47:9a:47:8f:18:84:bd:
                    29:75:0f:94:64:b0:3f:23:c9:7d:8e:a6:b7:04:4b:
                    ba:43:e3:de:6d:b8:74:8d:66:b8:62:2c:79:58:20:
                    3c:49:bf:50:6f:db:1b:cb:5d:11:05:e9:7f:4a:9d:
                    31:ae:fe:92:96:7a:36:c5:1f:6f:ea:b3:9b:6a:23:
                    d7:e5:5d:3f:33:77:e7:a0:0a:71:d5:a5:8d:22:b5:
                    52:98:23:8d:3b:7d:28:fd:fa:3b:d7:ee:98:1f:18:
                    2f:40:d6:9d:cb:ec:08:61:ba:7f:14:da:0e:ce:65:
                    93:1d:7a:fe:49:e1:70:87:56:76:bf:0d:33:0d:83:
                    7b:d8:4b:16:8f:17:17:22:95:b2:f0:83:76:d7:9f:
                    c0:1f:ca:48:26:d6:a8:59:39:55:20:a3:64:0f:e6:
                    28:54:de:b7:80:d4:7a:df:4f:89:11:bb:91:2f:b2:
                    7b:b0:53:a8:01:f2:c2:65:42:a5:8e:63:68:4f:0e:
                    02:6d:72:e7:3e:89:cc:e9:56:84:c8:b6:ce:f1:82:
                    ab:fb:63:a9:14:13:7f:0c:69:a7:4e:60:99:e8:44:
                    05:52:10:fd:52:f3:0d:87:63:19:e5:e3:b4:bc:00:
                    82:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C8:38:0A:6A:F8:03:59:74:5D:69:63:F5:7A:8B:24:B4:74:61:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/592a020e-ed0c-3df0-a66a-dcd0d1ed79ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20a0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f1:45:4a:d9:a3:35:c1:65:c8:e6:a6:66:fb:55:bb:5f:65:
         d0:8f:83:24:37:a8:2f:20:e9:58:b1:ad:bb:3a:12:71:5e:9b:
         fc:92:bd:02:53:9e:68:2a:8a:9d:16:eb:91:49:71:0d:e9:6a:
         9e:f8:0e:42:f2:cd:35:3a:6a:93:66:81:3f:0c:c8:c6:11:27:
         81:f7:ca:c2:61:7f:1c:d9:73:55:5a:7d:50:2e:64:c6:99:f1:
         e9:47:7a:65:76:a2:d4:a7:5a:68:74:4f:61:ff:12:2e:36:f6:
         4c:db:07:54:09:26:0a:55:19:31:6f:8e:a4:b1:f3:15:01:53:
         c6:52:07:30:ab:ff:cd:66:44:77:43:df:fa:92:00:2d:ac:9d:
         47:bb:6b:6a:c0:36:82:61:39:de:41:68:bf:3f:7c:e6:7a:af:
         3b:16:a7:85:eb:9e:d0:a7:e6:6a:9b:82:1b:f1:cb:cd:a8:a8:
         67:b4:fa:d0:97:30:05:36:f6:8d:f7:91:e8:97:35:a1:7c:aa:
         2f:74:5f:71:a3:e1:eb:a6:6c:bf:d6:63:b9:61:6d:91:1c:34:
         c2:d7:83:e4:d9:8f:fa:b9:e2:bd:0c:a6:46:5f:33:c6:88:26:
         49:20:76:3d:75:3b:ac:c4:b8:37:20:ac:1a:4a:2b:07:77:51:
         8d:e9:d6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:08 2024 by rpki-client on console-fra.rpki-client.org