Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/f2e50b8a-e4f7-3406-b8a0-0212f9067891.roa
File:                     f2e50b8a-e4f7-3406-b8a0-0212f9067891.roa (raw, json)
Hash identifier:          363UJSB3VgC6IQFpu++Tff8FCH1ZKix8np0pD6wr6ys=
Subject key identifier:   9A:F9:81:C9:4E:B6:2B:98:B1:80:8F:32:0C:D7:3E:BC:19:1E:37:EE
Certificate issuer:       /CN=40392fe9-312c-47a6-8066-48fda2f4c80b
Certificate serial:       010D0C9F43285841E46E2C015446E36348C89480
Authority key identifier: DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/f2e50b8a-e4f7-3406-b8a0-0212f9067891.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Fri 21 Jul 2023 10:27:38 +0000
asID:                     963
IP address blocks:        2602:fb34:1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6e:2c:01:54:46:e3:63:48:c8:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40392fe9-312c-47a6-8066-48fda2f4c80b
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 21 10:27:38 2023 GMT
        Subject: CN=3f64a3f3-39f6-49b2-81b3-32ed7255935b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:71:e5:3b:78:9f:13:49:0d:e5:9e:89:9c:11:
                    ee:d0:2a:5b:73:b8:94:30:9e:f4:87:a4:5e:43:23:
                    9f:0d:4e:11:35:01:08:85:5b:c6:b1:05:b6:aa:3f:
                    8d:8d:74:fb:35:3a:49:2e:72:12:24:46:d9:69:5f:
                    ae:33:4b:38:e3:84:e0:78:8a:b4:96:51:27:c1:81:
                    72:52:78:6f:71:dd:49:33:40:0d:44:26:57:c5:8d:
                    4d:30:12:02:2f:19:88:23:a8:ea:cd:80:c9:fd:b2:
                    75:17:31:92:3c:cb:bc:78:9c:48:7a:8f:f2:e1:1d:
                    5f:b1:5c:dc:4b:f3:a4:71:12:f8:0a:8b:5e:f4:1b:
                    1d:e9:15:b5:32:82:69:3d:7f:b0:b5:03:c3:90:a1:
                    c9:1c:0b:ed:a1:e9:04:0e:74:f2:b8:d5:b9:30:ba:
                    a3:90:38:35:db:8b:7a:27:7f:e0:16:34:b6:6a:95:
                    13:0b:f6:ea:81:31:96:da:05:c1:ae:00:a7:d0:47:
                    e2:11:7c:c5:c6:e8:2b:36:41:b6:4d:fc:a9:67:ab:
                    3f:d3:68:af:d1:60:61:c8:01:db:34:10:06:6e:c8:
                    5b:0d:26:fa:bb:59:61:64:26:fc:53:a8:62:1d:24:
                    90:04:57:46:1c:e4:1c:ac:6d:d1:ff:90:f5:3c:f9:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F9:81:C9:4E:B6:2B:98:B1:80:8F:32:0C:D7:3E:BC:19:1E:37:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/f2e50b8a-e4f7-3406-b8a0-0212f9067891.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl

            X509v3 Authority Key Identifier:
                keyid:DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb34:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:13:36:c9:85:92:1a:20:d3:1c:06:0e:2f:c6:37:96:35:
         d2:2c:83:10:d2:34:4f:3c:bf:14:94:c3:69:c3:89:cc:52:2d:
         a6:f1:cc:c2:9c:64:ac:96:a6:14:37:cf:99:3e:c2:85:6c:73:
         97:6d:20:d0:a4:85:6a:e9:88:73:89:b9:b4:87:7e:0f:98:47:
         c5:87:dd:b1:fc:55:8f:0b:d6:94:de:36:fe:d2:a9:41:32:a2:
         19:7f:54:54:c2:7a:38:be:89:02:34:02:0f:f5:af:38:48:23:
         63:52:de:91:6a:b0:34:4c:ab:d4:04:93:41:f3:e7:0e:37:60:
         17:23:e8:88:1a:94:d4:9c:b4:30:e4:50:5a:ae:34:89:ad:cb:
         bd:02:66:13:87:cd:ef:7e:6c:ba:46:ce:6d:29:03:5a:1f:02:
         93:b5:11:80:bf:4b:4f:d9:93:aa:78:f6:86:09:e6:5c:6d:03:
         3e:5e:e6:ac:c6:27:50:35:a2:76:09:3c:b8:58:f9:7b:11:4b:
         15:99:91:8a:1b:f2:5a:7e:e2:3f:37:89:66:34:57:8d:a2:5b:
         1a:c8:1a:91:a2:4b:84:df:f8:d1:df:ba:50:0d:c9:a5:e8:3f:
         68:e3:92:df:4f:18:83:9d:fa:84:a3:48:4d:8e:10:17:4c:7a:
         08:2b:1d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----