Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/2f1790c1-fbc8-3d76-a1fd-66bf588bc8ff.roa
File:                     2f1790c1-fbc8-3d76-a1fd-66bf588bc8ff.roa (raw, json)
Hash identifier:          wRHEyRy3IvGWQu/m8WEyLH08uwWeutdkS+87VsnvxJg=
Subject key identifier:   78:96:15:9D:E1:0C:0D:91:E5:D7:2F:84:5D:C3:90:2B:91:DA:E4:F0
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285841E46E37769B777B41E438FB80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/2f1790c1-fbc8-3d76-a1fd-66bf588bc8ff.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Sun 23 Jul 2023 21:44:58 +0000
asID:                     9009
IP address blocks:        2607:740:37::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:37:76:9b:77:7b:41:e4:38:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 23 21:44:58 2023 GMT
        Subject: CN=ddd2dd99-f1ba-44d7-81d4-5c728664a6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:dd:5c:7d:9e:00:fa:19:1f:46:c7:da:17:
                    22:01:ce:4c:b2:52:3f:79:4e:cb:3a:25:bb:74:33:
                    5a:0d:8a:cb:ab:57:5a:87:b1:63:7e:7e:a6:19:09:
                    9d:40:5d:5b:6e:92:27:cb:9e:f1:17:0c:0c:c3:49:
                    08:6a:94:61:65:37:ae:f4:35:aa:4d:0a:55:f2:48:
                    7c:44:d1:d6:ac:96:5a:2d:a8:82:47:38:b4:c6:b9:
                    1e:68:8d:bc:0b:ea:c1:e5:89:e9:b2:e3:89:59:15:
                    61:ae:74:61:13:87:1d:37:00:04:90:c2:4a:e1:1b:
                    a6:01:c7:9d:22:c3:26:c3:7d:d1:39:e6:9e:2a:bf:
                    f6:55:79:e6:72:e1:24:e4:01:8f:34:88:e6:ec:70:
                    ff:47:dc:4d:61:03:d0:9c:b1:3c:9a:7d:85:26:b2:
                    69:da:55:bc:58:cc:d4:a2:14:77:b0:16:ae:1b:8c:
                    1e:da:99:d4:76:c8:37:2d:25:17:1f:57:9a:cb:5c:
                    74:81:f2:0b:a7:8d:39:ad:9f:18:e8:bc:a2:12:4f:
                    95:c8:1e:b6:89:72:c3:ac:3c:d8:01:63:6b:11:17:
                    cb:41:a9:71:39:37:fb:41:49:68:7d:f2:77:cb:21:
                    ff:59:4f:32:05:46:c7:5c:68:f5:27:89:11:a1:d3:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:96:15:9D:E1:0C:0D:91:E5:D7:2F:84:5D:C3:90:2B:91:DA:E4:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/2f1790c1-fbc8-3d76-a1fd-66bf588bc8ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:740:37::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e2:ad:c8:88:59:c1:65:98:8d:e9:c5:72:01:a1:59:48:9c:
         16:04:19:d4:09:3c:e5:70:d8:be:9a:05:fa:12:c0:7f:96:fa:
         fb:64:2d:23:bd:46:61:96:db:56:82:94:c4:4b:d6:65:c0:96:
         d7:0b:5b:10:3c:9c:48:54:38:f2:a8:e4:ed:c1:4c:84:b2:70:
         a9:46:d1:f6:0f:54:8b:54:bc:bc:c9:1f:a1:30:9a:55:cf:e1:
         9e:7e:99:9f:60:0b:c3:31:97:7d:a2:80:ca:8e:49:ce:2d:61:
         2a:d9:d5:ad:42:df:d6:3d:61:c7:48:02:99:e6:24:e3:f5:ab:
         a9:2f:e8:e0:94:fb:a4:47:41:e6:8a:71:4a:8a:2f:38:01:38:
         84:56:04:c4:41:2a:ba:07:c1:e5:6d:54:55:60:12:8c:1e:c0:
         ed:ed:6c:5a:a9:c3:20:81:38:48:a1:4c:c6:97:64:df:4d:3d:
         5a:61:7d:ed:26:e9:4a:fb:88:8b:81:d4:80:3d:6f:bb:35:96:
         63:cd:c5:b5:56:6f:a3:17:5e:9f:15:b5:2e:5c:6a:bb:5f:56:
         f4:2f:5b:08:8b:24:66:79:81:31:97:15:79:f6:6a:cc:6c:3d:
         a8:b3:e6:fa:9a:76:8d:53:6d:9e:55:6f:be:99:81:80:51:8c:
         bb:3b:8b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----