Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/437325c6-a66a-30ba-8b97-d07a7b5a791f.roa
File:                     437325c6-a66a-30ba-8b97-d07a7b5a791f.roa (raw, json)
Hash identifier:          bU0j2U02JmWhZvoGSW//X3I7YBuH1D2m9LwWHv6Abq8=
Subject key identifier:   D7:D9:B9:F6:A2:03:14:02:96:2E:86:4A:42:19:38:D8:C1:C8:96:93
Certificate issuer:       /CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
Certificate serial:       010D0C9F4328584505F2F91B566A0EA60DC8CD80
Authority key identifier: 27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/437325c6-a66a-30ba-8b97-d07a7b5a791f.roa
Signing time:             Mon 26 Feb 2024 20:54:41 +0000
ROA not before:           Mon 26 Feb 2024 20:54:41 +0000
ROA not after:            Sun 26 May 2024 19:54:41 +0000
asID:                     32002
IP address blocks:        2602:f964::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:f2:f9:1b:56:6a:0e:a6:0d:c8:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8b84e2b-afbe-4b35-b005-e0dfca2e23d8
        Validity
            Not Before: Feb 26 20:54:41 2024 GMT
            Not After : May 26 19:54:41 2024 GMT
        Subject: CN=89d8fd9e-fdf0-4886-804d-148bc11302aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1a:05:2a:51:b0:e2:f8:2c:d5:32:ea:f2:ce:
                    3c:99:ed:8a:15:0c:fa:ab:92:3c:d4:07:4c:a3:0e:
                    08:8a:34:d0:3e:27:86:5f:10:16:08:9e:65:e8:90:
                    e4:2c:3c:51:c6:ef:13:34:20:55:e7:fa:c3:25:a1:
                    62:2b:a4:04:cc:5f:10:41:f3:4a:bf:7e:33:fb:cf:
                    9e:83:86:c2:d6:d6:3c:b8:9e:72:38:81:c1:0b:29:
                    a7:9b:92:9a:1c:fe:f7:11:3d:3b:cd:b6:ff:ca:29:
                    5e:65:4b:ac:78:d7:64:9a:40:dc:0d:54:eb:45:18:
                    8b:28:0a:e2:94:7b:ed:50:ea:92:df:8b:e5:89:0c:
                    3d:24:c3:de:48:94:53:f7:e2:03:05:4b:99:d1:cc:
                    fa:44:9a:1f:e3:9d:2c:ec:c5:6a:a6:c0:c9:54:25:
                    d5:24:bb:5c:32:ca:7b:3a:05:e4:5b:a2:51:56:be:
                    21:81:8e:d9:80:58:df:77:41:5b:15:c7:78:fa:8b:
                    a5:90:95:17:c7:f2:f5:dc:62:f4:e8:92:fb:1a:50:
                    4b:7d:42:06:eb:e3:26:68:ee:9d:7e:5a:03:87:33:
                    c8:6b:5c:33:8b:c2:2e:76:63:07:55:ac:40:de:d2:
                    2d:a7:72:de:44:32:0d:53:f5:d6:2f:9e:7e:31:1a:
                    16:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D9:B9:F6:A2:03:14:02:96:2E:86:4A:42:19:38:D8:C1:C8:96:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/437325c6-a66a-30ba-8b97-d07a7b5a791f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.crl

            X509v3 Authority Key Identifier:
                keyid:27:26:87:9C:23:23:76:52:E8:25:F4:9A:C6:24:3A:FF:A6:E6:4E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a8b84e2b-afbe-4b35-b005-e0dfca2e23d8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f964::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:74:c0:6d:05:84:a0:45:33:34:23:bc:ba:cf:dd:a4:b5:f5:
         d5:d5:ee:a3:fa:a1:8f:db:aa:30:92:a0:db:d2:f1:b4:16:85:
         43:35:31:ac:f5:84:1a:9f:ad:2b:dd:2e:2b:6b:7e:51:f2:e8:
         d4:30:b5:e0:b4:e8:a5:3f:11:fd:75:5f:2e:2e:45:31:de:24:
         b6:c8:11:48:8b:49:c4:f3:7c:f7:2a:c5:d7:1d:b8:9e:5e:39:
         ae:45:6b:9f:75:28:d4:0b:3e:44:64:f9:0a:84:7f:92:3f:5c:
         bb:c3:4d:6f:3f:c1:21:22:15:5a:f5:5a:1d:5d:92:00:75:5e:
         5b:0f:0d:f8:e2:d5:c1:f1:2f:39:18:3c:34:f7:66:bd:72:13:
         43:41:1f:fb:81:38:0e:6f:92:b6:d2:83:97:98:ec:83:84:1a:
         a3:3d:6f:1e:be:b1:ec:68:b3:bd:02:de:4f:f9:b6:50:65:34:
         57:a6:75:f3:50:dc:11:35:f0:3e:d0:f0:d7:e2:db:8a:14:37:
         df:c7:2d:8c:d6:e9:98:7a:dc:28:93:28:18:91:b6:22:ca:7d:
         4a:b0:7f:14:28:38:a2:2a:a2:45:73:18:cb:be:3b:8a:6c:36:
         17:f2:6a:63:c4:eb:75:35:fa:22:40:7f:01:70:44:8d:09:4f:
         2d:e8:31:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----