Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d764ceb7-73e6-3818-8eeb-2666e99d9268.roa
File:                     d764ceb7-73e6-3818-8eeb-2666e99d9268.roa (raw, json)
Hash identifier:          2zeCxBRuUhnUdl9s2K6wmaS3sPpDA7Z2PgwymrCCKro=
Subject key identifier:   45:5F:40:8A:DA:CC:B5:B7:A6:D6:F9:E6:D2:1B:7A:91:B7:3F:49:8E
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F43285844E626348237A0B4BB1C0A0180
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d764ceb7-73e6-3818-8eeb-2666e99d9268.roa
Signing time:             Thu 15 Feb 2024 11:32:02 +0000
ROA not before:           Thu 15 Feb 2024 11:32:02 +0000
ROA not after:            Wed 15 May 2024 10:32:02 +0000
asID:                     14618
IP address blocks:        2606:9fc0::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e6:26:34:82:37:a0:b4:bb:1c:0a:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: Feb 15 11:32:02 2024 GMT
            Not After : May 15 10:32:02 2024 GMT
        Subject: CN=9ebc6b06-df10-495e-8f23-331cce816722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:27:89:89:01:3f:3a:f6:95:18:5e:4d:28:61:
                    12:fb:64:98:1f:78:ce:f6:89:89:7b:df:b7:7c:25:
                    e9:45:7b:87:fc:6d:72:b1:33:6a:62:4c:b7:6b:9f:
                    7d:18:3f:74:4b:73:0e:98:f3:0a:8f:bf:3f:21:64:
                    a9:d8:c5:50:a1:f5:db:83:86:fe:50:52:ab:87:c6:
                    a1:39:bd:ab:55:c3:8b:98:69:2b:ef:62:ec:49:87:
                    83:10:16:8e:fa:03:20:dd:9f:46:4d:ea:51:c2:cb:
                    17:05:e9:af:54:c0:ce:26:c3:86:fa:a6:68:b1:21:
                    65:75:3c:11:0f:c0:45:e9:af:2d:ec:e4:11:08:1b:
                    1b:19:a0:41:47:7f:af:40:c7:19:1f:22:27:ed:d9:
                    9b:db:39:af:fa:9e:39:03:31:02:5e:c7:13:95:27:
                    d5:80:42:db:14:3a:19:36:20:7d:0a:19:01:78:1d:
                    6e:93:c6:a1:de:92:3b:07:8a:c3:3d:c2:62:2d:6a:
                    36:ca:02:1c:57:8a:b2:32:de:aa:b9:b4:1a:f0:d8:
                    65:75:30:83:55:6a:ff:84:f0:fa:8d:6a:b9:25:83:
                    26:ac:73:35:00:33:73:df:e2:b6:a8:cd:19:4b:1a:
                    ed:24:2c:fb:66:06:f6:71:3a:28:c7:b9:62:5e:d4:
                    cb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5F:40:8A:DA:CC:B5:B7:A6:D6:F9:E6:D2:1B:7A:91:B7:3F:49:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/d764ceb7-73e6-3818-8eeb-2666e99d9268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9fc0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a8:f1:7d:64:d9:15:57:57:10:9d:c7:13:bd:7c:08:c0:82:
         d9:b5:4d:f4:7b:56:0b:9a:e7:26:72:ce:2d:75:86:50:a5:ff:
         f8:33:ff:f0:7a:dd:1e:a4:f1:c4:fa:e2:46:31:57:e8:81:fc:
         89:16:b1:eb:98:c6:ff:a4:52:12:4a:47:bb:6e:5b:05:6c:7c:
         bf:09:cf:31:59:27:77:29:39:63:47:3c:34:40:1b:0f:96:c1:
         30:19:e6:d6:c7:13:5d:60:bb:c7:b3:84:75:a0:ed:4d:39:6f:
         b0:4d:15:39:86:29:cf:b9:73:b8:48:ab:bd:c9:8c:b2:4c:9b:
         8a:35:0c:97:14:55:5e:d1:64:f3:bb:e5:d0:af:61:0c:81:2d:
         85:10:3f:13:9c:37:1e:71:ca:67:2a:3d:e3:3b:43:23:c5:aa:
         94:3b:94:c8:e0:4b:2c:92:08:8b:0c:02:d8:e5:e4:86:61:03:
         28:fd:50:26:68:36:81:51:4f:dc:c7:44:68:46:d0:f0:73:3e:
         e3:86:14:10:27:18:b6:57:5a:7e:95:ce:84:fe:c7:d5:1f:83:
         ce:80:f7:f1:c6:ac:c9:09:ad:59:56:3f:89:a9:09:5c:ee:2e:
         32:0e:ae:ce:01:a8:5e:c9:53:89:12:a5:df:1a:0b:01:8a:4f:
         4d:51:62:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----