Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/d3fed44f-8b9d-336a-a56a-4e02457d2b2a.roa
File:                     d3fed44f-8b9d-336a-a56a-4e02457d2b2a.roa (raw, json)
Hash identifier:          g7A5ycvOZIRshnVJOvXtICxOyvxobWonuZTMk9c5U9I=
Subject key identifier:   B7:2A:26:E0:23:A5:AC:74:0C:31:77:11:58:52:4A:F1:1A:7F:12:93
Certificate issuer:       /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial:       010D0C9F43285847DB2BD45F66313C950123CF00
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/d3fed44f-8b9d-336a-a56a-4e02457d2b2a.roa
Signing time:             Tue 12 Nov 2024 15:30:17 +0000
ROA not before:           Tue 12 Nov 2024 15:30:17 +0000
ROA not after:            Mon 10 Feb 2025 15:30:17 +0000
asID:                     26340
IP address blocks:        2602:fc3b:6000::/37 maxlen: 37
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:db:2b:d4:5f:66:31:3c:95:01:23:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
        Validity
            Not Before: Nov 12 15:30:17 2024 GMT
            Not After : Feb 10 15:30:17 2025 GMT
        Subject: CN=3e7f3aab-53c0-4077-8807-23e810956555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:4f:24:0f:b5:99:12:72:cf:81:37:89:93:
                    b2:68:97:b0:5b:b8:b5:47:b6:8f:84:af:2e:5f:28:
                    e8:ee:52:cc:13:27:be:47:60:55:d5:0d:78:66:ce:
                    a4:ee:27:b6:ea:33:7d:d8:61:93:e2:18:4b:cc:3b:
                    3a:9d:74:e7:6d:25:9a:39:96:42:c2:2f:50:5d:d3:
                    97:ff:bb:b5:4e:11:04:d1:75:52:ba:cc:30:7f:67:
                    b1:09:6d:9e:38:0a:21:20:da:72:eb:b4:8d:c1:40:
                    2b:77:a6:d7:21:2f:9d:97:91:b4:78:39:1b:f5:0d:
                    9c:3c:f1:6a:06:6c:25:8b:e3:a7:bc:86:50:52:3a:
                    a6:0d:4d:55:5d:24:28:f1:f0:6e:b3:83:83:d6:c8:
                    0b:b5:01:be:44:54:50:eb:3a:5b:12:46:23:38:74:
                    f0:10:51:05:11:49:36:b2:d9:80:d5:fc:5b:2b:28:
                    e6:a8:81:89:b0:b6:26:ca:a6:92:36:06:a9:fb:72:
                    2d:f1:3e:a9:fa:a4:6a:e9:1c:38:a2:2c:0b:4c:0b:
                    72:20:a9:07:18:78:c8:26:40:ae:65:81:14:18:fb:
                    b6:9a:43:ef:d0:4f:1b:19:41:a3:44:32:0d:c5:d3:
                    52:22:a5:bd:9f:ef:b1:61:a2:7d:de:14:76:62:31:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2A:26:E0:23:A5:AC:74:0C:31:77:11:58:52:4A:F1:1A:7F:12:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/d3fed44f-8b9d-336a-a56a-4e02457d2b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl

            X509v3 Authority Key Identifier:
                keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:6000::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d3:db:fa:d7:b0:3d:28:d4:67:01:8d:07:0c:3b:bc:b7:22:
         c1:f6:b1:e3:3e:24:73:f3:94:9f:6a:bb:df:b6:6d:ca:89:5c:
         63:5e:2b:b3:8f:a8:32:47:15:cf:3f:d0:61:bf:a3:bf:cb:d7:
         b4:38:e8:2c:b7:24:4b:2c:22:0e:83:6f:a8:1c:ef:bc:b2:17:
         c3:67:1f:e2:aa:82:99:cd:ed:1b:5c:8e:1b:98:bd:c0:b9:f8:
         4f:21:de:b0:f7:6c:3a:6b:fb:d9:60:9c:53:cd:5e:8f:97:31:
         d7:6d:6c:1c:25:80:aa:e8:bb:c5:a3:fb:c7:aa:05:42:c6:e5:
         14:75:a8:04:5a:e0:07:ef:1a:2d:e8:fb:f7:e5:1b:40:e9:65:
         a2:f8:50:41:e1:07:11:50:0b:63:6f:fa:9e:71:56:e4:6f:c4:
         f6:e0:db:a0:a2:95:56:c8:ac:e9:5c:e2:7f:eb:54:6d:31:63:
         0d:5a:03:09:97:f1:f4:f2:56:e4:78:74:61:0a:b1:01:9b:4f:
         12:ae:b0:d6:ed:28:5e:5f:dd:9b:07:cb:1c:35:89:f3:8f:d8:
         3d:75:34:22:f6:41:58:d7:75:75:3c:20:4a:a7:0c:c3:64:ed:
         68:f8:38:3f:14:cd:b5:77:a5:c9:64:5e:0f:ac:14:73:45:ea:
         e0:82:6d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----