Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/6dfbee20-8f3b-317b-aaf3-e92840c170fc.roa
File:                     6dfbee20-8f3b-317b-aaf3-e92840c170fc.roa (raw, json)
Hash identifier:          ywvIJjWZdU2OGS5yLJtqjxnP3/7YiW8vZCzL++Wz6GA=
Subject key identifier:   ED:E5:CA:EA:87:15:7A:AA:DA:9A:04:B1:69:E5:19:4C:D8:C4:C8:44
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F432858447C9606E0729347578AEB5C80
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/6dfbee20-8f3b-317b-aaf3-e92840c170fc.roa
Signing time:             Mon 08 Jan 2024 16:01:39 +0000
ROA not before:           Mon 08 Jan 2024 16:01:39 +0000
ROA not after:            Sun 07 Apr 2024 15:01:39 +0000
asID:                     198100
IP address blocks:        2602:814:f0fe::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:7c:96:06:e0:72:93:47:57:8a:eb:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: Jan  8 16:01:39 2024 GMT
            Not After : Apr  7 15:01:39 2024 GMT
        Subject: CN=78d25e62-c9d9-49de-8cf4-6e9337c9fd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:bc:54:b6:e2:91:0c:0e:f0:02:94:73:d6:
                    0e:78:af:49:d5:11:03:df:b1:2e:dd:21:18:51:ea:
                    26:7a:55:79:32:3d:95:20:68:2f:9c:d1:dd:5c:fc:
                    57:20:48:25:0e:5d:e6:52:49:6b:d1:2f:b5:01:fe:
                    c8:5e:f8:e0:be:82:d4:ee:0c:d5:2e:d1:76:17:1b:
                    3f:32:bb:bb:6c:89:6f:82:47:7f:35:8f:14:bc:44:
                    c9:c0:9c:d1:95:62:33:a7:b3:99:d6:b1:1a:9e:b8:
                    ca:f9:6d:a5:f8:88:9b:e5:a1:74:f6:c9:84:cf:a4:
                    f3:ff:93:06:57:e9:88:2e:d6:f6:3d:57:f5:d0:e6:
                    af:ba:ec:c2:77:06:5c:36:39:31:d0:46:0d:52:a7:
                    39:ea:33:b3:c1:4f:b8:1f:8a:d1:48:75:88:d9:c5:
                    e9:5c:7f:36:0d:77:21:ae:a6:8c:4c:23:52:9f:7f:
                    6f:1e:8a:90:ea:82:e9:d8:57:66:32:e2:91:9f:27:
                    40:0f:06:26:92:c3:24:80:70:63:e4:98:35:5b:df:
                    d2:46:b1:a8:d0:bd:e0:47:1f:d3:64:ca:91:19:bc:
                    17:0b:b1:f9:e2:f8:fe:f6:f5:22:27:66:de:bd:b8:
                    af:ba:c0:61:b6:6a:d6:2c:80:bc:0e:0e:18:5e:81:
                    6c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E5:CA:EA:87:15:7A:AA:DA:9A:04:B1:69:E5:19:4C:D8:C4:C8:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/6dfbee20-8f3b-317b-aaf3-e92840c170fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:f0fe::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:42:cc:df:03:33:4b:07:4e:cc:ac:87:d8:5e:de:13:eb:b6:
         71:19:59:a6:02:13:62:fc:73:b7:31:8e:7a:70:c3:72:6d:43:
         a9:b9:97:3e:ea:65:14:5e:83:c0:e3:56:5a:e6:48:1d:29:7e:
         c0:41:bd:32:d7:f9:5b:58:92:6a:19:3b:ba:c8:e0:64:8d:7e:
         b1:84:0d:45:a4:e5:23:39:68:93:1d:96:99:2a:2a:c0:c7:5f:
         38:a7:98:7f:b8:34:91:1a:53:b3:4e:33:7a:14:c3:a1:45:8b:
         10:79:9f:54:5f:a6:25:de:b6:d6:88:ab:51:3c:c2:95:99:82:
         41:5b:67:5e:9d:d0:1d:aa:f3:1d:ee:79:29:70:54:ec:ac:ed:
         9d:1b:93:74:b4:fe:b7:f1:de:ac:c9:0b:fc:9e:cf:c8:2f:75:
         e5:35:33:40:e7:73:c6:1f:e9:01:42:bb:80:22:2e:07:72:15:
         8a:f8:3d:14:8a:53:ee:4f:b4:f3:02:1e:d7:29:15:d6:39:91:
         4c:43:7e:00:c2:27:81:1f:22:22:33:9a:05:e7:32:e8:31:84:
         90:4f:56:1c:3f:5a:49:8b:0c:a9:46:b4:ce:86:84:f5:57:53:
         5d:b9:99:89:06:ab:db:5a:9d:e1:e4:41:19:56:09:fd:31:47:
         ac:7f:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:14 2024 by rpki-client on console-fra.rpki-client.org