Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/128e4759-47b9-304c-b2a5-f110caabea66.roa
File:                     128e4759-47b9-304c-b2a5-f110caabea66.roa (raw, json)
Hash identifier:          /ZmrdNyncLMXXjDSk3Qn1j7VPRY5L4hWGzAOgx5YnN8=
Subject key identifier:   7A:8C:44:25:33:99:88:52:2A:CF:FF:D9:5B:74:3C:CC:FA:89:4D:33
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F43285843F4D10C58CEA52F23753B7700
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/128e4759-47b9-304c-b2a5-f110caabea66.roa
Signing time:             Tue 21 Nov 2023 00:50:39 +0000
ROA not before:           Tue 21 Nov 2023 00:50:39 +0000
ROA not after:            Mon 19 Feb 2024 00:50:39 +0000
asID:                     203
IP address blocks:        2602:fa2e:100:2000::/52 maxlen: 52

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:f4:d1:0c:58:ce:a5:2f:23:75:3b:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Nov 21 00:50:39 2023 GMT
            Not After : Feb 19 00:50:39 2024 GMT
        Subject: CN=0eeac346-f64e-465f-9bb5-e8e8102f8e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:b6:07:b6:b1:57:f1:0f:1c:64:d6:a3:d4:
                    5f:ec:4d:d0:38:95:49:86:2c:f2:d3:12:e3:33:af:
                    91:c5:b9:3a:ff:f3:33:22:d6:c1:5c:64:f1:98:16:
                    0a:b6:be:17:aa:2e:aa:80:cd:38:21:b0:bc:90:ec:
                    aa:e4:7f:7e:8e:23:1f:5e:c9:a1:28:00:d1:32:12:
                    25:c4:55:08:d8:17:b3:03:3c:9f:1a:6e:d7:54:fa:
                    b4:70:9d:48:12:6a:86:91:06:e3:22:9e:38:34:ee:
                    43:0a:cf:45:bb:65:a1:55:2d:60:88:55:c0:ba:35:
                    5f:5d:2c:36:64:4b:00:70:ff:e4:fb:7f:73:3c:f8:
                    8e:e0:e1:3f:76:54:fc:54:e5:8b:66:27:5e:3c:3e:
                    f2:72:90:c7:93:e0:56:c8:b7:80:93:5f:2a:d1:85:
                    0f:a1:c7:a5:dc:30:e0:55:bf:e0:01:cf:64:02:eb:
                    44:a3:b7:f5:3c:0d:cb:e4:9f:a8:d7:33:ee:da:18:
                    ea:0f:bb:87:17:ca:4b:b0:a4:64:62:0b:85:68:6e:
                    e1:34:42:92:9c:bd:62:0b:e1:2c:21:06:05:01:be:
                    5f:d9:64:d4:a7:16:b4:1b:a4:3f:94:59:36:3b:33:
                    8f:e7:f1:19:75:86:d2:37:82:3c:53:cb:bd:21:92:
                    41:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8C:44:25:33:99:88:52:2A:CF:FF:D9:5B:74:3C:CC:FA:89:4D:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/128e4759-47b9-304c-b2a5-f110caabea66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:100:2000::/52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:8f:51:d2:0c:79:3a:3f:bb:dd:a4:d8:9f:9f:24:37:59:fa:
         56:42:29:ff:bd:d3:44:f0:35:5e:cd:9a:fa:b1:6c:82:6c:c0:
         b0:bc:8f:66:8c:ce:43:88:65:0d:bb:71:28:43:92:8f:1b:3d:
         97:16:c9:e4:be:85:e4:60:7b:91:7f:bd:a3:75:4f:43:41:c5:
         f5:12:78:47:6e:68:3f:5b:52:de:ba:6e:61:f5:dc:d0:11:7a:
         ee:24:f4:3e:e7:2d:5d:18:9c:96:81:eb:fd:86:30:4c:e1:9a:
         8c:6d:c2:a5:05:d4:29:56:eb:ec:59:26:57:57:c5:aa:2d:ae:
         6b:84:bf:1a:47:f5:b7:a2:6a:e7:65:00:ad:80:fd:dd:69:55:
         10:e7:64:9a:00:02:6c:26:20:d2:16:ac:ef:e4:49:9e:76:52:
         ba:89:7f:cd:1a:06:12:b8:71:29:b8:66:5e:56:d3:62:b0:e1:
         61:d5:d7:a1:bb:b6:14:7c:f1:82:5f:cf:10:96:3d:f5:19:cd:
         b7:a2:11:45:92:54:79:c3:b2:73:85:21:e4:97:1d:d5:9c:0a:
         7e:8c:06:6e:56:ee:73:fa:f2:b2:d2:5e:4d:aa:58:a3:53:12:
         bb:c2:aa:74:21:0d:49:85:9a:14:81:c0:79:69:f2:20:cb:e2:
         89:d4:c7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----