Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/ccae6743-4c13-3ebc-8db9-85e9712b3b85.roa
File:                     ccae6743-4c13-3ebc-8db9-85e9712b3b85.roa (raw, json)
Hash identifier:          OXTPEeWFl1eVCScwgztT/htcIr3LX8lQoWO6/hirLmU=
Subject key identifier:   1C:DD:D9:A8:2F:AF:53:00:12:3A:C0:DE:B1:32:42:A3:55:3F:7D:89
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F43285844E2665C15624A26D124F20600
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/ccae6743-4c13-3ebc-8db9-85e9712b3b85.roa
Signing time:             Wed 14 Feb 2024 03:18:04 +0000
ROA not before:           Wed 14 Feb 2024 03:18:04 +0000
ROA not after:            Tue 14 May 2024 02:18:04 +0000
asID:                     14618
IP address blocks:        2606:9fc0:f000::/48 maxlen: 56
                          2606:9fc0:f001::/48 maxlen: 56
                          2606:9fc0:f002::/48 maxlen: 56
                          2606:9fc0:f003::/48 maxlen: 56

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e2:66:5c:15:62:4a:26:d1:24:f2:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Feb 14 03:18:04 2024 GMT
            Not After : May 14 02:18:04 2024 GMT
        Subject: CN=38e31823-44bf-4ede-ab83-ff30c2089194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:12:82:e9:f3:28:30:2b:7e:5b:13:8e:e7:fc:
                    c5:c2:9a:51:97:13:d1:8a:63:fd:22:18:c7:25:46:
                    15:bd:8f:65:34:06:62:4e:46:72:82:59:30:4b:16:
                    36:91:80:c9:cb:9a:7f:e4:54:1f:2a:cb:ae:0c:fa:
                    10:eb:0e:00:85:3a:e9:c2:20:b8:49:aa:39:a9:b1:
                    2a:b0:47:ce:e8:f7:ff:f4:34:70:eb:b1:a6:22:22:
                    7f:15:c3:62:5a:6c:27:0b:53:d3:be:92:a9:8c:2a:
                    89:f0:4a:a8:de:10:ed:72:c4:ea:8e:59:ac:6a:cc:
                    62:3f:e2:60:34:90:c0:5e:33:c7:e5:d7:7d:a5:f4:
                    af:f1:85:08:f3:9e:4b:d4:d6:ea:2e:d0:fd:d9:76:
                    f5:3c:c5:48:5f:24:82:73:a8:5e:43:09:3c:00:4c:
                    12:48:7c:ff:7d:14:c2:64:47:69:8f:d8:71:b8:4f:
                    eb:6a:9d:11:b5:a2:2e:05:d3:ff:fc:92:e4:69:5a:
                    2d:40:42:d4:71:db:36:ea:f9:d2:38:f1:ed:aa:a9:
                    ff:44:58:45:4b:ff:c9:b8:48:47:44:16:b0:e3:57:
                    3c:d8:e2:be:2a:51:df:6b:95:17:9e:f1:3a:05:d8:
                    5a:e7:05:d5:59:d4:8b:9f:65:8e:66:ac:6a:5f:c3:
                    53:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DD:D9:A8:2F:AF:53:00:12:3A:C0:DE:B1:32:42:A3:55:3F:7D:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/ccae6743-4c13-3ebc-8db9-85e9712b3b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0:f000::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:df:39:53:1d:53:34:3d:99:7e:87:ef:ca:cb:ae:cf:8f:2f:
         23:b7:6e:99:30:14:d2:f9:ed:61:39:a2:31:d5:75:dc:01:14:
         af:70:75:3a:63:15:91:84:72:d4:19:61:80:b0:4d:4c:b2:49:
         d3:30:5a:7a:71:cd:8c:93:dc:25:63:e3:ac:af:bd:ef:36:6f:
         e2:c1:db:15:0d:d9:28:4d:4e:77:65:5e:3e:23:04:25:85:19:
         95:d7:eb:0b:33:47:07:40:2d:30:a2:46:4d:03:a6:58:ce:3b:
         98:f4:d6:d0:70:99:8f:40:1c:a8:fe:03:a8:3d:f8:06:ca:40:
         99:fe:9a:fb:2e:66:d1:90:58:63:ff:4d:0c:6a:5d:9c:c4:43:
         00:a0:d4:fd:08:ef:7f:8e:14:a4:ed:e3:4b:f8:4a:54:1a:56:
         d4:a6:a3:77:2d:b6:56:0a:04:f8:74:8f:82:49:7b:e9:7a:d0:
         a3:22:12:1a:0c:70:e1:e4:36:b4:5d:36:61:57:c3:83:b2:7a:
         39:c7:9c:87:a6:6f:e0:f1:b3:42:94:5b:0b:21:0d:f8:e5:5b:
         fe:2b:32:fc:12:bc:d8:4a:fa:fb:ec:97:c8:65:d9:de:26:8b:
         80:1d:7f:0a:a2:f5:7b:56:a7:31:d9:48:d3:87:c9:b7:d2:cc:
         2f:75:87:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----