Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/f4ab33c1-4dff-37df-bf70-713fa6fa3c49.roa
File:                     f4ab33c1-4dff-37df-bf70-713fa6fa3c49.roa (raw, json)
Hash identifier:          xJgUC46XacUZ4bIkf4b0uIsB0EznmX3osN0SgqWVMGE=
Subject key identifier:   CD:9F:43:12:DC:E3:98:37:62:E6:DB:4F:92:8C:77:4B:9B:18:E5:F1
Certificate issuer:       /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial:       010D0C9F43285845054A1009E902E68D1B370B38
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/f4ab33c1-4dff-37df-bf70-713fa6fa3c49.roa
Signing time:             Mon 26 Feb 2024 15:14:21 +0000
ROA not before:           Mon 26 Feb 2024 15:14:21 +0000
ROA not after:            Sun 26 May 2024 14:14:21 +0000
asID:                     30399
IP address blocks:        2606:ae40::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:4a:10:09:e9:02:e6:8d:1b:37:0b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
        Validity
            Not Before: Feb 26 15:14:21 2024 GMT
            Not After : May 26 14:14:21 2024 GMT
        Subject: CN=dae978a7-2465-49ca-be58-b226ba7b1a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f8:8c:92:80:16:7d:24:97:e0:40:95:cc:33:
                    e1:30:cb:b7:b1:98:e7:76:d4:f5:44:cd:bd:26:8c:
                    a3:6c:79:9d:9e:44:f2:1e:e3:fb:5d:38:43:b1:fa:
                    d3:1a:6f:2e:d6:1a:ce:7b:e4:dc:ee:4a:26:95:1d:
                    84:f5:aa:c7:78:13:c7:dd:f4:59:cd:7e:6f:8e:af:
                    13:61:63:50:b1:b0:5c:91:c3:b8:cf:e0:af:dd:2e:
                    f9:4f:6e:24:7e:55:69:fa:48:40:a0:74:69:d2:69:
                    6f:0e:d5:f8:85:f7:80:66:5f:8f:34:0e:8c:ce:29:
                    d4:2b:6d:54:90:39:76:e8:b0:f6:d4:73:0f:77:4b:
                    3b:d7:6d:ca:90:22:a2:6e:c3:e1:c3:05:be:a3:13:
                    f5:05:12:30:58:58:6f:d6:c0:e3:af:ea:71:5c:13:
                    89:39:24:d7:59:23:e1:09:e0:27:a1:c6:4f:0f:6c:
                    58:cd:de:aa:d1:c7:e0:31:68:09:52:03:82:70:ce:
                    83:f4:86:b0:63:4b:b4:85:96:d6:b3:5c:62:8c:1c:
                    7d:87:68:0c:ac:1f:74:f8:a5:5a:99:5a:32:1d:7f:
                    5e:93:5a:0f:da:91:56:b1:48:f0:80:fc:38:4e:c2:
                    c6:38:f2:cd:e4:d8:98:da:c1:b9:b6:77:cc:c9:46:
                    79:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9F:43:12:DC:E3:98:37:62:E6:DB:4F:92:8C:77:4B:9B:18:E5:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/f4ab33c1-4dff-37df-bf70-713fa6fa3c49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl

            X509v3 Authority Key Identifier:
                keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ae40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:85:81:fa:0f:50:43:7f:fd:96:0f:00:59:63:f7:73:1c:bd:
         a4:4f:b8:b0:a2:1a:1e:a2:aa:41:4b:ad:07:9c:bb:85:54:96:
         46:1c:93:82:7d:cf:6b:d5:77:a1:a0:a6:f7:ac:37:83:08:2b:
         ba:b5:db:f2:8d:16:61:14:28:42:2b:d0:07:1d:d3:e3:0f:a4:
         e8:90:0c:bb:b0:25:e9:17:d1:8f:10:e7:30:b4:3a:b5:55:c0:
         68:92:61:36:44:71:e3:23:3b:92:4e:14:31:9b:1a:6f:50:a0:
         9d:93:85:71:ac:38:f7:a0:fc:81:d1:58:56:f0:89:ad:32:e2:
         13:ea:ae:65:46:91:e5:45:f7:26:73:c1:a1:db:4c:b5:e5:ea:
         20:f3:e7:6d:e9:1f:7d:2b:7b:df:4b:5c:2a:02:38:2a:93:9b:
         df:c6:3f:63:59:77:f1:34:0d:19:32:55:93:2e:fc:7a:9e:75:
         ab:d3:1c:20:26:86:77:09:48:9e:89:3e:4c:05:3a:6c:bc:5b:
         ff:b6:13:d0:1a:8c:ea:b9:13:0e:f1:c4:80:08:7a:34:b9:ff:
         95:54:c7:26:f3:aa:19:5d:5c:7e:74:1d:e6:50:2f:11:80:4e:
         d8:4b:d1:96:34:69:ba:68:df:b3:c9:37:47:6f:61:8f:78:fe:
         41:37:c9:13
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEUFShAJ6QLmjRs3CzgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2
NTFkMB4XDTI0MDIyNjE1MTQyMVoXDTI0MDUyNjE0MTQyMVowLzEtMCsGA1UEAxMk
ZGFlOTc4YTctMjQ2NS00OWNhLWJlNTgtYjIyNmJhN2IxYTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/iMkoAWfSSX4ECVzDPhMMu3sZjndtT1RM29
JoyjbHmdnkTyHuP7XThDsfrTGm8u1hrOe+Tc7komlR2E9arHeBPH3fRZzX5vjq8T
YWNQsbBckcO4z+Cv3S75T24kflVp+khAoHRp0mlvDtX4hfeAZl+PNA6MzinUK21U
kDl26LD21HMPd0s7123KkCKibsPhwwW+oxP1BRIwWFhv1sDjr+pxXBOJOSTXWSPh
CeAnocZPD2xYzd6q0cfgMWgJUgOCcM6D9IawY0u0hZbWs1xijBx9h2gMrB90+KVa
mVoyHX9ek1oP2pFWsUjwgPw4TsLGOPLN5NiY2sG5tnfMyUZ5PQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFM2fQxLc45g3YubbT5KMd0ubGOXxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1
ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvZjRhYjMzYzEtNGRmZi0z
N2RmLWJmNzAtNzEzZmE2ZmEzYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi
NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2
NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri
ZDVlNjY1MWQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgauQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAAhYH6D1BDf/2WDwBZY/dzHL2kT7iwohoeoqpBS60HnLuFVJZGHJOC
fc9r1XehoKb3rDeDCCu6tdvyjRZhFChCK9AHHdPjD6TokAy7sCXpF9GPEOcwtDq1
VcBokmE2RHHjIzuSThQxmxpvUKCdk4VxrDj3oPyB0VhW8ImtMuIT6q5lRpHlRfcm
c8Gh20y15eog8+dt6R99K3vfS1wqAjgqk5vfxj9jWXfxNA0ZMlWTLvx6nnWr0xwg
JoZ3CUieiT5MBTpsvFv/thPQGozquRMO8cSACHo0uf+VVMcm86oZXVx+dB3mUC8R
gE7YS9GWNGm6aN+zyTdHb2GPeP5BN8kT
-----END CERTIFICATE-----