Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7a4c786b-3f59-3e20-9eaf-3fcb4c2ff1f7.roa
File:                     7a4c786b-3f59-3e20-9eaf-3fcb4c2ff1f7.roa (raw, json)
Hash identifier:          O4abLEBdOgxuptDTwMb2I49c+rYIYTdH/lNB0cbpVg0=
Subject key identifier:   06:D4:04:D7:27:AA:6B:45:A9:44:B1:BB:0D:70:49:BB:D8:6C:B7:4B
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285847F9B4E316DC8419A141CBED90
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7a4c786b-3f59-3e20-9eaf-3fcb4c2ff1f7.roa
Signing time:             Sat 23 Nov 2024 14:00:39 +0000
ROA not before:           Sat 23 Nov 2024 14:00:39 +0000
ROA not after:            Fri 21 Feb 2025 14:00:39 +0000
asID:                     209242
IP address blocks:        2607:8940:2000::/35 maxlen: 35
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f9:b4:e3:16:dc:84:19:a1:41:cb:ed:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Nov 23 14:00:39 2024 GMT
            Not After : Feb 21 14:00:39 2025 GMT
        Subject: CN=13fa9e70-d106-4f9a-8b32-4f9da754ebf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2d:dd:5d:9e:7d:2f:86:05:89:78:42:fc:5e:
                    ec:d9:b5:6b:5f:e2:a3:7a:b2:97:e6:f1:33:5a:53:
                    8a:11:ca:43:0d:6a:de:0b:d2:63:c2:af:54:cb:95:
                    f3:e9:4d:f2:84:5d:f3:b0:b5:9b:23:4b:e7:17:87:
                    a7:a7:74:a9:cb:6f:4e:09:ce:3c:c2:81:71:f6:d2:
                    2b:60:73:c2:27:cf:f0:0a:b9:57:33:8e:8a:b2:2d:
                    54:f2:7b:4a:35:96:58:64:de:2c:12:d0:ed:65:7d:
                    8d:40:5c:64:3f:c2:f6:3a:5b:3f:25:0d:eb:16:86:
                    3e:fa:6f:27:2b:e8:f5:a8:86:39:31:f8:e2:47:1f:
                    09:3b:d4:29:5e:0e:22:ec:f1:b9:1f:9f:40:e9:e6:
                    81:5d:19:d7:27:27:0b:a8:2a:3e:92:89:51:9b:e3:
                    4b:d1:5f:40:84:f5:e6:c9:e1:0a:67:94:21:93:a7:
                    79:a7:d6:6e:3b:8b:be:37:cd:3e:d9:f8:2f:c6:f7:
                    1d:0c:d9:e3:88:c2:62:5b:43:1b:c6:cf:23:3f:a8:
                    9a:0f:b2:ff:3e:ea:6a:e5:e0:b9:84:26:c8:36:21:
                    b3:f0:19:73:e3:8c:6a:84:31:c5:30:80:ca:d1:ee:
                    31:33:b4:66:50:95:2b:03:68:4d:24:81:2b:e1:cc:
                    d4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D4:04:D7:27:AA:6B:45:A9:44:B1:BB:0D:70:49:BB:D8:6C:B7:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7a4c786b-3f59-3e20-9eaf-3fcb4c2ff1f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:8940:2000::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:22:35:88:6e:5d:50:c0:78:f7:4c:47:cd:0d:02:a9:8f:89:
         32:2d:c0:c2:b4:c4:da:f7:7a:6c:49:ab:54:7b:6f:21:e3:9d:
         d0:d1:0c:59:13:66:96:a4:28:49:a2:b2:e1:c5:07:bf:92:2a:
         97:bc:56:92:33:f0:99:18:28:3c:7e:3d:5d:b8:4c:74:61:19:
         52:39:86:61:80:2c:57:4c:b8:40:26:78:02:88:8f:1e:e6:31:
         7f:bf:f5:e9:b7:12:28:93:6f:79:3c:d3:2f:90:14:58:57:36:
         06:8b:a8:ff:f9:c0:0f:f3:50:c9:8e:bd:8c:14:c0:7a:21:9e:
         16:ad:b3:fd:6b:ca:6e:f8:cb:e9:e4:59:d2:8d:c9:e5:2a:ee:
         99:e4:77:89:4a:fc:ce:02:45:ea:55:cc:f5:e9:98:a3:c4:af:
         c5:86:c0:92:93:1a:89:0e:94:55:35:2b:1e:91:58:b6:e4:53:
         07:b9:21:20:2c:92:ab:22:42:4c:6e:73:7a:bc:e5:af:a9:fe:
         25:54:95:38:72:45:64:9c:8f:d6:87:97:1c:1b:29:d9:f4:84:
         77:a4:eb:6d:95:51:08:a2:3f:72:14:7f:53:47:68:7e:92:82:
         e5:30:42:c3:99:f9:f8:b7:50:0b:29:49:ed:67:61:cb:62:71:
         cd:25:54:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----