Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/1d0ea4a2-b8e0-3184-8bb8-3753503f135f.roa
File:                     1d0ea4a2-b8e0-3184-8bb8-3753503f135f.roa (raw, json)
Hash identifier:          lySFeV9tGQLai/H0K9WpLkjqwmTDizPi71m50aGPdeY=
Subject key identifier:   43:3D:88:77:C4:40:FB:B0:3A:F4:FE:1D:4C:8A:D8:A1:63:90:20:81
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F43285843E9348A457F1DA420FCAC2480
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/1d0ea4a2-b8e0-3184-8bb8-3753503f135f.roa
Signing time:             Thu 16 Nov 2023 21:01:24 +0000
ROA not before:           Thu 16 Nov 2023 21:01:24 +0000
ROA not after:            Wed 14 Feb 2024 21:01:24 +0000
asID:                     65527
IP address blocks:        2602:fa2e::/37 maxlen: 37

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e9:34:8a:45:7f:1d:a4:20:fc:ac:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Nov 16 21:01:24 2023 GMT
            Not After : Feb 14 21:01:24 2024 GMT
        Subject: CN=ce107912-a0e3-4306-9041-fe1a1f0cd7fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0a:cf:dc:57:9f:f4:36:26:e1:e6:e0:5e:1c:
                    ff:ee:9e:90:69:d4:2e:32:dd:c8:08:d4:ca:4e:96:
                    df:fc:ee:12:10:12:ba:15:fd:e1:37:20:75:f5:8e:
                    5e:aa:20:a6:48:9d:f4:94:a4:4a:8a:6e:fd:a2:41:
                    7e:c0:ce:9f:a2:a0:ea:22:6d:e6:44:84:f6:8e:a8:
                    a6:5b:31:8f:cb:5e:4a:f7:57:d5:d8:9b:a7:b6:ec:
                    f9:54:69:c9:4e:79:75:d2:27:4a:d3:4b:cf:77:bf:
                    bb:39:9f:85:c2:91:db:7d:c3:10:32:25:88:94:ee:
                    40:c1:a7:62:88:33:a3:83:5f:c9:3c:4c:d5:e5:17:
                    aa:d8:3b:f1:61:3d:8e:34:d3:78:4b:df:db:f2:14:
                    74:b1:e9:40:10:9b:9e:74:6d:2f:fc:59:60:f9:27:
                    ba:29:81:7f:ae:be:88:05:6a:4d:c5:31:95:a9:3a:
                    ff:c0:04:f0:3a:43:dc:2e:cc:99:64:b8:f5:2e:38:
                    95:89:62:28:ee:02:0e:0e:69:75:1a:a8:cc:a5:ff:
                    36:c7:88:0d:80:12:87:40:f0:6c:c0:65:aa:35:80:
                    c8:5c:f5:9f:2e:a2:97:2f:45:10:7e:2a:e1:8c:07:
                    1c:e4:1d:94:46:ff:fe:ba:fe:2b:ca:d4:5d:21:9d:
                    8d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3D:88:77:C4:40:FB:B0:3A:F4:FE:1D:4C:8A:D8:A1:63:90:20:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/1d0ea4a2-b8e0-3184-8bb8-3753503f135f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:b2:4e:62:e3:2c:3b:9f:0f:30:7f:28:5d:2f:00:2a:cf:c0:
         38:c8:8d:e5:a0:11:25:db:cf:f3:1a:eb:8e:4f:cd:66:37:d3:
         d3:eb:1c:de:19:b0:a7:54:50:44:57:6a:5f:b4:63:f6:31:62:
         7b:99:f6:50:2f:07:42:d3:f5:f7:a7:d8:db:a0:a5:29:47:a0:
         c6:b2:f0:ac:3a:5b:3d:c2:42:d3:6f:ed:b2:13:c1:2e:7f:34:
         dc:b8:e8:5f:c7:df:5c:ad:6a:61:51:36:a1:7f:d2:85:92:93:
         ad:bf:10:c0:07:34:c6:cb:4a:9b:a4:6f:55:42:e2:db:4f:2b:
         b5:4e:5f:d6:5b:07:6a:60:73:6d:ba:6d:9a:c2:e1:03:a4:8b:
         85:0f:ed:71:e2:7a:b1:75:0c:4c:e2:c7:48:19:ff:1b:80:1d:
         54:ff:15:0e:8f:ca:d2:58:48:20:ee:7a:df:3d:b6:f1:43:28:
         aa:55:73:3c:6b:d0:80:4e:fd:6d:d3:c0:ea:a6:48:81:a8:32:
         24:bc:08:87:fc:35:12:88:da:7b:29:15:e7:ba:b1:b5:84:d1:
         07:58:49:94:b0:5b:fb:0b:73:37:8a:8f:bf:25:18:5a:f7:f7:
         b1:91:9d:0b:bd:c1:d9:e8:e1:d4:aa:6d:25:da:76:61:21:ec:
         38:80:6f:be
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEPpNIpFfx2kIPysJIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY5ODMyMDctODA3My00MmFmLTg4ZWUtZGY0OTAyYzhh
ZGFmMB4XDTIzMTExNjIxMDEyNFoXDTI0MDIxNDIxMDEyNFowLzEtMCsGA1UEAxMk
Y2UxMDc5MTItYTBlMy00MzA2LTkwNDEtZmUxYTFmMGNkN2ZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQrP3Fef9DYm4ebgXhz/7p6QadQuMt3ICNTK
Tpbf/O4SEBK6Ff3hNyB19Y5eqiCmSJ30lKRKim79okF+wM6foqDqIm3mRIT2jqim
WzGPy15K91fV2Juntuz5VGnJTnl10idK00vPd7+7OZ+FwpHbfcMQMiWIlO5Awadi
iDOjg1/JPEzV5Req2DvxYT2ONNN4S9/b8hR0selAEJuedG0v/Flg+Se6KYF/rr6I
BWpNxTGVqTr/wATwOkPcLsyZZLj1LjiViWIo7gIODml1GqjMpf82x4gNgBKHQPBs
wGWqNYDIXPWfLqKXL0UQfirhjAcc5B2URv/+uv4rytRdIZ2NdwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEM9iHfEQPuwOvT+HUyK2KFjkCCBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4
MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5MDJjOGFkYWYvMWQwZWE0YTItYjhlMC0z
MTg0LThiYjgtMzc1MzUwM2YxMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWY5ODMyMDctODA3My00MmFmLTg4
ZWUtZGY0OTAyYzhhZGFmLzlmOTgzMjA3LTgwNzMtNDJhZi04OGVlLWRmNDkwMmM4
YWRhZi5jcmwwHwYDVR0jBBgwFoAUwyy5+3oif0oFHkqZqPtujWhZyqEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85Zjk4MzIwNy04MDczLTQyYWYtODhlZS1kZjQ5
MDJjOGFkYWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJgL6LgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZ7JOYuMsO58PMH8oXS8AKs/AOMiN5aARJdvP8xrrjk/NZjfT0+sc
3hmwp1RQRFdqX7Rj9jFie5n2UC8HQtP196fY26ClKUegxrLwrDpbPcJC02/tshPB
Ln803LjoX8ffXK1qYVE2oX/ShZKTrb8QwAc0xstKm6RvVULi208rtU5f1lsHamBz
bbptmsLhA6SLhQ/tceJ6sXUMTOLHSBn/G4AdVP8VDo/K0lhIIO563z228UMoqlVz
PGvQgE79bdPA6qZIgagyJLwIh/w1EojaeykV57qxtYTRB1hJlLBb+wtzN4qPvyUY
Wvf3sZGdC73B2ejh1KptJdp2YSHsOIBvvg==
-----END CERTIFICATE-----