Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/2f2166c6-38f5-3f20-8a47-7492030daefd.roa
File:                     2f2166c6-38f5-3f20-8a47-7492030daefd.roa (raw, json)
Hash identifier:          kd16F7j21M1SKx9ri2QqQXgLctXeqEraFndketyeB10=
Subject key identifier:   96:60:BD:1B:14:98:93:20:9D:96:A7:52:48:65:62:EE:10:86:B1:A9
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F432858437EE380B3DFA6C1F0EEAB5B00
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/2f2166c6-38f5-3f20-8a47-7492030daefd.roa
Signing time:             Mon 09 Oct 2023 19:02:26 +0000
ROA not before:           Mon 09 Oct 2023 19:02:26 +0000
ROA not after:            Sun 07 Jan 2024 20:02:26 +0000
asID:                     65536
IP address blocks:        2602:fa2e:a90:400::/64 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7e:e3:80:b3:df:a6:c1:f0:ee:ab:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Oct  9 19:02:26 2023 GMT
            Not After : Jan  7 20:02:26 2024 GMT
        Subject: CN=7a2f74e3-0246-4347-9e7e-36501a281113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:87:a9:62:f3:b1:b7:79:38:e4:45:58:8b:
                    56:aa:19:ee:54:d9:30:e9:0f:41:a9:19:e0:51:1f:
                    7c:70:45:d7:2e:f3:8e:0a:86:04:90:19:49:65:ef:
                    78:0e:10:2a:cc:85:86:53:7b:83:b9:90:9e:e8:bc:
                    0b:75:10:71:39:01:89:1b:b7:3b:7c:e1:76:c5:39:
                    db:12:7d:05:ea:64:13:86:73:d6:ae:b7:08:42:50:
                    9d:2e:94:9a:8e:a6:f9:4d:ef:ca:58:1e:e3:d8:46:
                    6e:41:23:20:7c:e5:b5:39:b1:3c:cf:2b:c4:03:c4:
                    11:c4:b7:3c:80:e2:34:b9:73:7e:db:ce:02:e3:72:
                    60:8e:76:8e:e6:4e:01:f8:70:6c:e5:2a:54:f0:d4:
                    d0:eb:af:93:8c:4a:f3:4b:14:a2:4f:ca:16:59:7e:
                    d7:51:ae:af:7f:fd:f2:af:05:e9:1d:44:7c:8b:8f:
                    61:5e:b4:b0:23:bf:c5:b3:ef:13:0e:0e:90:59:a9:
                    15:71:5f:69:ec:83:fa:1f:83:53:3d:d3:8a:1c:a2:
                    71:02:37:5d:2e:3b:81:a2:9d:96:fb:49:f7:4b:e3:
                    ac:79:6a:1b:20:e7:90:38:2c:ec:3c:56:2b:65:93:
                    e2:b8:5d:12:d3:10:2f:a2:06:bb:70:35:db:ce:3d:
                    6e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:60:BD:1B:14:98:93:20:9D:96:A7:52:48:65:62:EE:10:86:B1:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/2f2166c6-38f5-3f20-8a47-7492030daefd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:a90:400::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:48:5a:a4:bf:17:05:a4:54:83:69:d3:4c:46:6e:5c:94:35:
         96:fb:3d:f7:31:1e:6f:01:1e:64:cf:3c:29:a7:9c:9c:fd:eb:
         65:3c:3e:d4:b3:06:35:71:1c:ba:6b:3d:0e:02:6d:97:82:81:
         42:ef:63:1e:25:2e:29:cd:72:14:80:ea:53:ca:fa:a1:b7:59:
         63:99:b8:79:ef:a6:bc:eb:39:f0:4a:e1:f7:be:c6:25:79:32:
         74:e5:58:c2:5e:e1:fe:7d:65:61:8c:ce:52:72:1d:23:e0:9b:
         6c:f3:4b:12:bf:3b:9b:76:8a:99:a7:ea:a7:d4:33:b6:ee:46:
         b2:3a:a1:08:e6:34:9c:0f:16:1f:27:cb:6c:39:31:dd:cb:0d:
         b6:9e:dc:96:d0:35:b8:54:4f:99:ff:b1:01:9e:30:ae:90:c0:
         71:fc:40:85:97:91:6f:d9:f4:af:03:1a:c9:86:fa:90:62:e7:
         57:e7:83:d4:30:60:4e:c0:51:f9:99:6d:f5:f9:50:9f:13:69:
         3b:47:41:ec:b1:6e:b7:22:6d:73:64:18:a6:1a:12:1d:22:e6:
         20:4a:66:9e:94:b7:0d:3e:a3:a3:20:32:c1:d0:65:ed:92:46:
         f7:46:a5:3a:ed:f6:29:e5:d6:49:26:6e:53:eb:1c:f2:a9:30:
         29:7f:23:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:14 2024 by rpki-client on console-fra.rpki-client.org