Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/5e9cde03-a68a-394d-8ff8-b1c54659bd69.roa
File:                     5e9cde03-a68a-394d-8ff8-b1c54659bd69.roa (raw, json)
Hash identifier:          bvPPZRe3egs7r2rxzGjsXEZRinxCMS8qtARLw4UI+hI=
Subject key identifier:   76:04:B8:FD:3B:EB:54:6D:14:08:03:B1:30:5F:73:99:C4:0A:CF:D8
Certificate issuer:       /CN=46369a04-d9fc-4dd8-bc96-cf22af084843
Certificate serial:       010D0C9F43285844D9DFCCD5C71D6CEAA1C04400
Authority key identifier: B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/5e9cde03-a68a-394d-8ff8-b1c54659bd69.roa
Signing time:             Sun 11 Feb 2024 02:00:25 +0000
ROA not before:           Sun 11 Feb 2024 02:00:25 +0000
ROA not after:            Sat 11 May 2024 01:00:25 +0000
asID:                     400550
IP address blocks:        2602:fb9e:17::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d9:df:cc:d5:c7:1d:6c:ea:a1:c0:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46369a04-d9fc-4dd8-bc96-cf22af084843
        Validity
            Not Before: Feb 11 02:00:25 2024 GMT
            Not After : May 11 01:00:25 2024 GMT
        Subject: CN=b47cbbc4-7465-4308-aa5b-38bd3edb69f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:0b:db:56:55:83:9c:26:3b:a3:44:77:7c:
                    31:cb:90:ee:77:79:91:f7:64:c2:97:eb:3f:00:cb:
                    b7:b1:0d:63:31:a5:e3:e8:19:54:33:13:99:d4:17:
                    0e:67:9b:f7:22:a3:fa:67:1f:2e:87:f2:58:27:7d:
                    06:f3:59:85:41:f1:8e:eb:11:a1:2d:a8:39:c2:ef:
                    23:a8:40:96:8e:fb:07:96:aa:78:a6:91:a7:a1:80:
                    aa:e7:c6:b7:f2:de:9f:68:75:d1:4b:55:95:4f:ad:
                    7c:03:94:dd:de:cf:5b:83:d5:2d:df:b2:9b:40:c0:
                    6c:3e:52:f6:d1:2c:2b:c6:b7:f7:53:f3:18:d9:72:
                    76:bc:e9:78:3b:e4:92:ea:ae:2c:5f:24:78:e0:eb:
                    a6:0d:e4:1f:2b:49:be:42:4c:58:35:08:cd:0f:d8:
                    97:57:c4:0d:46:23:db:06:0b:8f:ce:9f:c5:c8:8e:
                    7f:69:dc:02:3e:fb:fc:0e:e0:18:9f:d7:f4:67:54:
                    45:c6:09:23:49:84:97:f4:b3:10:2c:bc:11:ed:ac:
                    29:4f:0a:c5:d7:3e:ef:88:f9:16:ef:52:be:06:7f:
                    43:9e:e0:32:2b:e1:07:82:c0:89:dc:3b:51:cb:24:
                    40:95:d3:11:c2:6d:5e:6f:e9:ba:f6:67:28:a9:85:
                    cd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:04:B8:FD:3B:EB:54:6D:14:08:03:B1:30:5F:73:99:C4:0A:CF:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/5e9cde03-a68a-394d-8ff8-b1c54659bd69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.crl

            X509v3 Authority Key Identifier:
                keyid:B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb9e:17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ab:af:cb:99:19:ac:81:d5:c7:ed:3e:6e:e6:a0:67:c2:29:
         b0:5f:78:0f:6e:4e:c7:92:29:c3:7c:1b:71:c6:43:69:82:a8:
         b1:e4:a8:b4:a4:17:10:fb:e4:76:17:82:31:fe:3e:a2:9f:d2:
         cf:e0:c2:ab:96:f6:c4:ad:37:28:98:e1:9a:62:79:12:56:b1:
         b2:12:eb:98:82:eb:ab:d8:b2:03:82:64:7d:cb:24:1a:2d:29:
         43:86:a4:30:c6:a1:2f:ae:e9:03:6d:7f:77:e1:96:53:a8:f0:
         f9:04:f7:c1:f6:33:02:3b:dd:5b:84:ef:db:f4:b0:3c:d9:94:
         b5:82:3f:4b:0c:f3:9c:1e:74:05:5e:64:9a:97:18:de:c9:3b:
         5e:66:ae:cf:e0:ad:e5:7f:d4:b5:ca:8d:c9:72:0a:4c:e9:9c:
         18:47:14:da:3b:27:74:ce:5c:80:20:1a:71:86:e8:4c:75:cf:
         9a:c9:2a:c7:cd:3c:c1:fa:99:6a:64:99:38:ba:2d:8e:8d:f1:
         f1:fa:9f:85:29:29:ab:9d:73:75:d9:f9:fd:d5:8b:28:db:d1:
         14:e3:93:3b:53:45:a8:36:78:36:2a:96:4e:70:e5:98:4a:82:
         e5:5e:b6:58:90:21:9a:89:51:4d:69:a7:eb:df:9a:9f:4b:ed:
         ba:ba:f9:99
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWETZ38zVxx1s6qHARAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDYzNjlhMDQtZDlmYy00ZGQ4LWJjOTYtY2YyMmFmMDg0
ODQzMB4XDTI0MDIxMTAyMDAyNVoXDTI0MDUxMTAxMDAyNVowLzEtMCsGA1UEAxMk
YjQ3Y2JiYzQtNzQ2NS00MzA4LWFhNWItMzhiZDNlZGI2OWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTwL21ZVg5wmO6NEd3wxy5Dud3mR92TCl+s/
AMu3sQ1jMaXj6BlUMxOZ1BcOZ5v3IqP6Zx8uh/JYJ30G81mFQfGO6xGhLag5wu8j
qECWjvsHlqp4ppGnoYCq58a38t6faHXRS1WVT618A5Td3s9bg9Ut37KbQMBsPlL2
0Swrxrf3U/MY2XJ2vOl4O+SS6q4sXyR44OumDeQfK0m+QkxYNQjND9iXV8QNRiPb
BguPzp/FyI5/adwCPvv8DuAYn9f0Z1RFxgkjSYSX9LMQLLwR7awpTwrF1z7viPkW
71K+Bn9DnuAyK+EHgsCJ3DtRyyRAldMRwm1eb+m69mcoqYXNGwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHYEuP0761RtFAgDsTBfc5nECs/YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NjM2
OWEwNC1kOWZjLTRkZDgtYmM5Ni1jZjIyYWYwODQ4NDMvNWU5Y2RlMDMtYTY4YS0z
OTRkLThmZjgtYjFjNTQ2NTliZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDYzNjlhMDQtZDlmYy00ZGQ4LWJj
OTYtY2YyMmFmMDg0ODQzLzQ2MzY5YTA0LWQ5ZmMtNGRkOC1iYzk2LWNmMjJhZjA4
NDg0My5jcmwwHwYDVR0jBBgwFoAUuWi3LSclH4svCBQeUP6CdKa7wA0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NjM2OWEwNC1kOWZjLTRkZDgtYmM5Ni1jZjIy
YWYwODQ4NDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL7ngAX
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHOrr8uZGayB1cftPm7moGfCKbBfeA9uTseSKcN8G3HGQ2mCqLHk
qLSkFxD75HYXgjH+PqKf0s/gwquW9sStNyiY4ZpieRJWsbIS65iC66vYsgOCZH3L
JBotKUOGpDDGoS+u6QNtf3fhllOo8PkE98H2MwI73VuE79v0sDzZlLWCP0sM85we
dAVeZJqXGN7JO15mrs/greV/1LXKjclyCkzpnBhHFNo7J3TOXIAgGnGG6Ex1z5rJ
KsfNPMH6mWpkmTi6LY6N8fH6n4UpKaudc3XZ+f3Viyjb0RTjkztTRag2eDYqlk5w
5ZhKguVetliQIZqJUU1pp+vfmp9L7bq6+Zk=
-----END CERTIFICATE-----