Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/321e7e38-a598-3759-9b8e-1c8a10eb5457.roa
File:                     321e7e38-a598-3759-9b8e-1c8a10eb5457.roa (raw, json)
Hash identifier:          pfCtxN+uRtqrFEhtdi1YRfi01WCu1hCTsCc8EYSKZEo=
Subject key identifier:   35:E1:81:C9:E8:47:11:00:5F:D6:B6:64:B7:0F:91:95:7F:22:B4:9D
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F432858442DDD906CBDB216D8FEDD3920
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/321e7e38-a598-3759-9b8e-1c8a10eb5457.roa
Signing time:             Mon 11 Dec 2023 11:16:56 +0000
ROA not before:           Mon 11 Dec 2023 11:16:56 +0000
ROA not after:            Sun 10 Mar 2024 10:16:56 +0000
asID:                     401
IP address blocks:        2602:fa2e:401::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:2d:dd:90:6c:bd:b2:16:d8:fe:dd:39:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Dec 11 11:16:56 2023 GMT
            Not After : Mar 10 10:16:56 2024 GMT
        Subject: CN=1a5c9ae5-9b55-496d-a528-c579ba3738b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:05:83:87:a8:1c:47:bf:38:b1:d4:ae:d5:e0:
                    5d:2e:a2:76:87:b1:8c:09:d7:d8:65:65:f5:1b:36:
                    1c:f6:d0:62:bb:27:74:8d:3c:e3:9c:ea:b5:9d:40:
                    79:06:f4:cc:5e:eb:18:dc:c8:d8:cd:fd:57:06:6d:
                    42:eb:da:bc:96:e3:4d:51:e7:af:67:71:23:c4:24:
                    06:5e:7f:0f:bd:7d:9d:4c:44:5d:61:9b:03:e5:c3:
                    0c:5f:38:24:08:16:04:05:0e:49:c9:dc:6c:a5:e7:
                    e5:8b:4f:99:a2:d6:be:7c:2e:87:d3:98:e0:19:28:
                    b0:51:e2:51:77:52:eb:d5:22:f9:3b:20:5c:05:00:
                    b7:8f:a3:dc:3d:5c:1f:84:47:c6:e3:68:9d:56:b6:
                    a8:10:fc:c5:55:38:82:fe:ce:5c:79:68:60:f9:b2:
                    e7:ba:b7:a1:14:cb:9f:f2:60:7e:98:eb:ff:12:34:
                    ed:32:a3:83:00:41:d0:9b:cd:0d:97:28:b0:7e:a6:
                    74:f1:df:9a:89:3c:e7:7f:2a:ab:b1:3b:01:ec:1d:
                    88:75:c8:d2:23:fd:47:f0:a9:7d:7e:1b:ad:d0:b9:
                    d5:51:ba:fb:6c:3d:ad:d1:ad:fe:de:db:a2:15:ad:
                    f3:ac:bb:8a:a1:f6:74:48:4c:75:38:76:8c:f7:51:
                    c3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E1:81:C9:E8:47:11:00:5F:D6:B6:64:B7:0F:91:95:7F:22:B4:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/321e7e38-a598-3759-9b8e-1c8a10eb5457.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:401::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:75:e9:db:13:c8:15:b9:ad:02:6d:f0:06:f0:65:91:0c:0e:
         20:0c:e6:34:64:87:78:5b:17:88:e8:86:ac:2d:45:e1:3d:e2:
         d0:30:30:a3:2b:ed:5d:02:d6:69:7d:b3:ea:37:a4:7d:74:b7:
         b9:88:a9:96:2f:be:c8:5f:57:da:c7:66:07:4e:28:40:df:81:
         8f:50:64:af:60:98:33:b7:16:f7:47:59:f5:09:7e:95:3f:c5:
         e7:a2:3f:1e:9b:bf:3a:8e:e6:33:4b:0f:01:5e:a2:20:e4:b5:
         d6:38:ae:f6:40:64:ce:30:26:dc:15:73:6f:8a:d9:74:cc:7d:
         69:b9:9c:ee:2d:2f:17:7f:01:30:4b:f7:6e:26:ca:3d:08:e4:
         35:d0:01:14:c8:7c:5f:65:65:c4:15:54:d2:c7:7e:95:89:51:
         f1:56:8f:8c:d6:bc:5b:09:12:1d:d1:ba:ae:73:c7:01:42:b6:
         8d:03:ca:e2:cb:e8:46:db:c2:b0:e5:8b:93:c1:ad:85:b7:09:
         13:78:8b:ff:19:0f:23:b9:d4:c8:3d:79:fb:5f:86:fd:29:17:
         f8:f5:a1:57:51:ef:bf:48:75:52:15:c3:4d:15:94:3d:70:fa:
         d7:f5:a8:18:4c:89:45:b8:d4:2a:f4:36:8e:6b:9c:5f:e9:73:
         fd:b3:4e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----