Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/6211dedf-eaab-3f64-9d3c-15858bbe92c1.roa
File:                     6211dedf-eaab-3f64-9d3c-15858bbe92c1.roa (raw, json)
Hash identifier:          RqW/cnWK69K5MfmpQlCBHFSsRkfOtBUnQwPxVFNqi5I=
Subject key identifier:   18:7D:12:AC:B5:86:23:F6:F4:76:AA:B7:02:68:20:B7:FB:34:A7:8D
Certificate issuer:       /CN=85012cde-de16-4e2c-88cc-fb082ace78b7
Certificate serial:       010D0C9F43285844325EB0E4CBB73AC517E0DC40
Authority key identifier: 32:4C:86:C1:0F:92:C6:F4:A8:A8:E0:01:43:1B:BA:65:C9:7E:96:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/6211dedf-eaab-3f64-9d3c-15858bbe92c1.roa
Signing time:             Wed 13 Dec 2023 02:00:15 +0000
ROA not before:           Wed 13 Dec 2023 02:00:15 +0000
ROA not after:            Tue 12 Mar 2024 01:00:15 +0000
asID:                     20473
IP address blocks:        2602:fa17::/40 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:32:5e:b0:e4:cb:b7:3a:c5:17:e0:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85012cde-de16-4e2c-88cc-fb082ace78b7
        Validity
            Not Before: Dec 13 02:00:15 2023 GMT
            Not After : Mar 12 01:00:15 2024 GMT
        Subject: CN=e5b09821-c4f6-4c75-aca0-f652bed4c671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:b3:52:4d:1f:4f:b4:ba:46:0c:2a:e4:ed:
                    39:45:dd:98:7d:67:96:83:09:4d:11:03:36:a1:90:
                    25:c0:99:bf:0b:2a:27:9c:3b:46:58:4f:53:a9:98:
                    6c:f8:48:31:58:bd:29:e3:3c:c1:ba:d4:3d:dc:28:
                    7c:4a:9b:9c:a6:57:b8:34:2b:03:f1:4d:59:70:10:
                    98:52:96:4c:58:57:9f:a3:11:75:3a:0a:7a:64:9f:
                    76:a6:fe:ee:53:66:37:75:b0:1d:49:d5:56:ac:df:
                    6e:17:53:e8:63:d3:3e:fe:a9:85:b5:ba:ac:f6:02:
                    f8:3c:9c:52:34:fd:51:40:30:36:c5:97:0e:25:92:
                    d9:2c:fb:4e:4e:dd:7b:e0:f5:03:8e:6e:b3:a7:63:
                    a6:8e:61:ea:03:04:fe:d7:9f:e0:07:c9:31:4e:c0:
                    d1:c6:78:e8:fd:ac:f2:a0:a1:4c:45:d4:12:5f:22:
                    07:8f:d7:cc:56:35:92:63:ce:71:ae:d4:00:df:39:
                    0b:7a:55:0d:15:6b:f5:ff:a7:c8:a8:05:91:dc:92:
                    9f:12:a9:34:0f:94:36:c6:d4:70:6f:1b:b4:3e:10:
                    14:76:ef:9a:7a:26:91:a1:e8:c6:7e:a6:dd:d5:7f:
                    32:c1:94:25:42:90:ae:d0:11:bd:cd:ad:03:44:98:
                    31:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7D:12:AC:B5:86:23:F6:F4:76:AA:B7:02:68:20:B7:FB:34:A7:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/6211dedf-eaab-3f64-9d3c-15858bbe92c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7/85012cde-de16-4e2c-88cc-fb082ace78b7.crl

            X509v3 Authority Key Identifier:
                keyid:32:4C:86:C1:0F:92:C6:F4:A8:A8:E0:01:43:1B:BA:65:C9:7E:96:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/85012cde-de16-4e2c-88cc-fb082ace78b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa17::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b7:7a:c8:3b:56:a5:ed:5c:83:cc:7a:20:64:8a:70:7f:c9:
         84:02:cd:fd:5b:7c:3c:85:6a:0c:aa:98:fb:8a:66:c2:a2:13:
         ab:b5:27:b2:54:3b:63:a2:ca:60:d4:2f:72:31:16:00:d0:6a:
         c7:23:ee:d7:f1:3b:69:af:33:4f:67:ef:b8:bb:27:2d:9d:6e:
         3f:19:a1:ad:90:da:05:93:05:82:92:0f:5b:86:2b:69:d0:87:
         a1:cc:89:9a:e1:40:03:84:ed:f1:e6:1a:b5:af:b0:f3:08:6b:
         c8:c2:f5:cb:12:9d:c2:29:94:3e:ba:47:38:d1:52:34:21:3e:
         46:aa:d7:62:c4:5b:e3:9a:68:97:7c:c2:3e:6b:2f:41:49:8b:
         e1:c8:e1:97:e1:4e:2b:0f:62:43:90:a8:7e:db:9b:80:35:7a:
         d5:3f:da:75:c4:c7:57:a9:f1:b5:bc:18:06:ad:d8:22:5f:48:
         62:b5:b0:ea:ac:dc:66:6a:c2:16:0d:ed:d6:5b:93:18:8e:05:
         dc:62:bd:9f:df:9f:44:5d:3c:7c:b0:3a:48:2e:18:f7:aa:33:
         07:ed:e2:91:f2:c8:fe:a4:b7:ba:0b:47:e4:24:fb:89:2c:e4:
         a7:f4:22:0b:c0:91:f4:c4:31:58:c8:84:31:e5:a7:8b:b5:77:
         24:0f:e4:c8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEQyXrDky7c6xRfg3EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODUwMTJjZGUtZGUxNi00ZTJjLTg4Y2MtZmIwODJhY2U3
OGI3MB4XDTIzMTIxMzAyMDAxNVoXDTI0MDMxMjAxMDAxNVowLzEtMCsGA1UEAxMk
ZTViMDk4MjEtYzRmNi00Yzc1LWFjYTAtZjY1MmJlZDRjNjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkuzUk0fT7S6Rgwq5O05Rd2YfWeWgwlNEQM2
oZAlwJm/CyonnDtGWE9TqZhs+EgxWL0p4zzButQ93Ch8Spucple4NCsD8U1ZcBCY
UpZMWFefoxF1Ogp6ZJ92pv7uU2Y3dbAdSdVWrN9uF1PoY9M+/qmFtbqs9gL4PJxS
NP1RQDA2xZcOJZLZLPtOTt174PUDjm6zp2OmjmHqAwT+15/gB8kxTsDRxnjo/azy
oKFMRdQSXyIHj9fMVjWSY85xrtQA3zkLelUNFWv1/6fIqAWR3JKfEqk0D5Q2xtRw
bxu0PhAUdu+aeiaRoejGfqbd1X8ywZQlQpCu0BG9za0DRJgxBwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBh9Eqy1hiP29HaqtwJoILf7NKeNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84NTAx
MmNkZS1kZTE2LTRlMmMtODhjYy1mYjA4MmFjZTc4YjcvNjIxMWRlZGYtZWFhYi0z
ZjY0LTlkM2MtMTU4NThiYmU5MmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODUwMTJjZGUtZGUxNi00ZTJjLTg4
Y2MtZmIwODJhY2U3OGI3Lzg1MDEyY2RlLWRlMTYtNGUyYy04OGNjLWZiMDgyYWNl
NzhiNy5jcmwwHwYDVR0jBBgwFoAUMkyGwQ+SxvSoqOABQxu6Zcl+lscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84NTAxMmNkZS1kZTE2LTRlMmMtODhjYy1mYjA4
MmFjZTc4YjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6FwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAMLd6yDtWpe1cg8x6IGSKcH/JhALN/Vt8PIVqDKqY+4pmwqITq7Un
slQ7Y6LKYNQvcjEWANBqxyPu1/E7aa8zT2fvuLsnLZ1uPxmhrZDaBZMFgpIPW4Yr
adCHocyJmuFAA4Tt8eYata+w8whryML1yxKdwimUPrpHONFSNCE+RqrXYsRb45po
l3zCPmsvQUmL4cjhl+FOKw9iQ5CoftubgDV61T/adcTHV6nxtbwYBq3YIl9IYrWw
6qzcZmrCFg3t1luTGI4F3GK9n9+fRF08fLA6SC4Y96ozB+3ikfLI/qS3ugtH5CT7
iSzkp/QiC8CR9MQxWMiEMeWni7V3JA/kyA==
-----END CERTIFICATE-----