Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/f47b2426-3a8d-37ec-830c-3455e8e8e641.roa
File:                     f47b2426-3a8d-37ec-830c-3455e8e8e641.roa (raw, json)
Hash identifier:          APWLjYNE3vJkMHSuM2jCu4yWrMe+7Ogusu945oak3VA=
Subject key identifier:   C1:AA:08:D7:DD:17:FA:87:BE:60:95:7B:54:30:7D:0F:B6:65:71:71
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F43285843E96A22647F4E34736D859380
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/f47b2426-3a8d-37ec-830c-3455e8e8e641.roa
Signing time:             Thu 16 Nov 2023 22:49:24 +0000
ROA not before:           Thu 16 Nov 2023 22:49:24 +0000
ROA not after:            Wed 14 Feb 2024 22:49:24 +0000
asID:                     79
IP address blocks:        2602:fa2e::/37 maxlen: 37

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e9:6a:22:64:7f:4e:34:73:6d:85:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Nov 16 22:49:24 2023 GMT
            Not After : Feb 14 22:49:24 2024 GMT
        Subject: CN=f67bf196-2c08-4a8c-bde0-1c9c4b6f1740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:56:cd:c7:ff:40:ab:8c:55:7a:cc:30:0c:22:
                    af:5e:85:6c:88:86:d9:92:06:c7:da:d2:81:5c:d8:
                    1c:2c:58:22:7b:8f:c2:92:9f:15:2d:ca:85:0e:1d:
                    05:7a:3a:aa:67:0a:d5:6f:8c:6b:72:8b:11:04:e5:
                    db:db:cf:e2:a3:f9:9e:48:45:0c:8b:0a:8a:6d:6d:
                    f6:fd:20:22:ef:56:1b:c2:4e:c0:f6:73:d7:fd:d6:
                    a1:8f:8b:85:e6:b2:72:db:a3:97:02:f2:0c:7f:af:
                    f8:66:da:80:5f:1e:e3:d4:c0:3e:a5:79:ea:3d:bc:
                    df:93:5d:ca:5f:f4:51:0e:c1:9b:e4:79:17:56:26:
                    7a:73:3a:58:28:4d:85:fa:31:0c:02:99:fd:33:3b:
                    cb:95:c1:dc:8c:4a:82:20:a4:fd:18:e9:b6:3f:b3:
                    f7:2a:23:6d:af:52:e7:43:b1:44:0a:a1:61:ee:91:
                    3c:3f:b4:fa:59:26:02:9f:36:f1:76:69:1e:40:0e:
                    22:9d:6d:d9:0b:58:16:f3:9f:c8:7b:c2:0b:62:67:
                    23:6d:61:f1:64:72:f1:dd:b5:2f:06:04:ff:80:37:
                    08:9e:0e:93:05:93:1d:a7:58:cd:80:be:c3:c0:e8:
                    2b:c2:6b:47:81:1a:dd:f7:d4:a1:75:f6:e9:84:18:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AA:08:D7:DD:17:FA:87:BE:60:95:7B:54:30:7D:0F:B6:65:71:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/f47b2426-3a8d-37ec-830c-3455e8e8e641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e::/37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:64:0e:81:8e:7a:60:38:20:6d:39:8a:2a:9a:02:6a:a0:aa:
         ec:b7:0e:ec:dc:48:2e:39:88:42:6c:70:ed:a3:b9:12:1d:05:
         d2:bb:04:43:d8:de:2e:98:f0:15:03:09:2c:db:f5:5e:75:06:
         f0:ad:c4:7f:54:78:0e:a9:a5:b0:dc:84:d2:e0:f4:93:b8:b5:
         a4:5b:65:8b:7b:74:54:33:7c:3f:f0:5c:d2:e7:4a:06:5c:e0:
         22:f7:4e:dc:e8:13:dc:5d:2e:69:d7:80:2a:95:55:66:96:be:
         af:ad:84:0e:32:d0:5e:16:b8:87:c4:18:07:1c:16:72:5a:8b:
         d2:a2:9d:ac:8e:4a:09:2f:c9:dc:fb:65:b6:6a:45:ff:00:5c:
         34:c0:df:93:5c:b6:f9:6d:6e:2e:21:9c:12:4a:7a:59:45:d8:
         12:af:c3:38:1d:88:90:2b:c9:98:2c:8e:ed:57:4b:47:06:9d:
         2b:46:b1:36:06:bc:bc:8d:66:bd:ba:55:9f:85:c3:e2:34:2b:
         04:e1:05:41:7c:55:0e:9b:38:52:75:d2:4c:29:f2:9d:15:42:
         aa:90:fe:48:87:e8:64:90:c8:6a:08:b1:04:a8:7a:76:f4:55:
         de:3b:16:62:1c:28:c1:6d:65:78:b7:fb:5c:0f:2b:0f:b6:f7:
         8d:86:2b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:14 2024 by rpki-client on console-fra.rpki-client.org