Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/914285a9-663e-3e3a-a426-8ff0df0f39df.roa
File:                     914285a9-663e-3e3a-a426-8ff0df0f39df.roa (raw, json)
Hash identifier:          PrXZlJ7oLsE6QLMOntLUqagEiHjoasZUJ38dpYEQWwo=
Subject key identifier:   B4:78:62:92:28:CA:EB:67:E6:68:BA:A5:D8:8D:27:95:E3:42:FA:99
Certificate issuer:       /CN=f5d93400-0a6f-4938-9925-856c6ace39df
Certificate serial:       010D0C9F43285844D8CC8C40C4EC132F28B2C168
Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/914285a9-663e-3e3a-a426-8ff0df0f39df.roa
Signing time:             Sat 10 Feb 2024 16:45:53 +0000
ROA not before:           Sat 10 Feb 2024 16:45:53 +0000
ROA not after:            Fri 10 May 2024 15:45:53 +0000
asID:                     14439
IP address blocks:        2602:fa02:7::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d8:cc:8c:40:c4:ec:13:2f:28:b2:c1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df
        Validity
            Not Before: Feb 10 16:45:53 2024 GMT
            Not After : May 10 15:45:53 2024 GMT
        Subject: CN=af7fb817-e577-4dc3-9ed0-14c7b55f7fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:57:e9:f7:5b:c9:99:77:dc:b7:a1:30:04:
                    20:c2:51:5c:fa:a9:9a:b0:90:f0:40:f7:2a:0f:9f:
                    46:95:cd:e9:b2:7d:be:d5:66:ee:6a:7b:05:59:62:
                    3e:40:b0:75:47:db:5a:fa:c3:6d:eb:ee:4d:2b:5b:
                    7c:97:82:62:91:05:22:02:aa:aa:25:ed:01:2e:d6:
                    eb:14:92:ae:35:f2:70:a4:55:37:f9:77:53:de:d6:
                    8f:e1:d4:a5:d7:18:42:01:5b:9a:30:50:a1:d4:46:
                    8b:64:42:92:3e:1b:d9:44:1d:8f:88:4b:04:ad:72:
                    bc:5c:ba:5f:8d:ff:75:23:a0:d9:6c:3b:ef:4a:fe:
                    e0:49:48:a4:b8:79:71:7f:99:89:63:b3:03:00:2a:
                    7a:4a:d5:1e:e0:35:2a:26:f8:7d:08:ee:a5:20:72:
                    08:47:a2:c7:3c:31:8e:20:b5:ec:e5:97:33:e8:8b:
                    38:cd:f2:9d:bb:fa:ed:a7:bf:ae:61:b9:52:0f:18:
                    ee:f7:49:a0:43:d9:f7:52:8b:fe:84:ac:7c:ad:75:
                    6a:d6:52:c9:54:31:eb:6e:7d:ac:c4:b6:89:94:db:
                    dc:5e:06:8e:5c:16:ad:cb:65:3c:e5:9e:37:5b:d5:
                    9a:81:dd:52:2b:ba:b0:5b:9f:53:cc:ce:33:ee:db:
                    a1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:78:62:92:28:CA:EB:67:E6:68:BA:A5:D8:8D:27:95:E3:42:FA:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/914285a9-663e-3e3a-a426-8ff0df0f39df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa02:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e7:7e:fe:9b:ec:3a:b6:6f:3b:d2:a0:75:63:42:f5:12:bf:
         37:cf:2e:64:10:de:47:ff:0b:f5:9e:aa:8e:f7:5a:bf:20:0b:
         21:74:d0:bf:b8:d0:12:5d:15:2f:3d:13:89:a5:61:8c:fe:67:
         cd:6a:d0:6b:64:47:f0:dc:f2:e0:f2:75:4d:55:eb:91:7e:df:
         10:fa:04:44:8e:60:4c:92:85:3b:be:7d:86:75:21:f2:e4:38:
         4a:98:22:12:aa:1e:ea:a7:78:99:c5:dc:07:a3:f0:ad:4f:d0:
         87:9d:56:af:06:84:16:b8:b5:12:ff:18:30:58:34:ea:7d:7a:
         bf:e3:f8:ae:eb:97:a2:a3:dd:dd:37:7c:ce:5d:3e:20:0a:8a:
         f9:02:c7:e4:8c:8f:a7:77:63:24:a3:ee:2d:ec:da:96:9e:d6:
         af:05:57:56:33:e1:b7:b1:b9:9d:31:f1:bb:62:1a:43:fe:84:
         d1:b7:c7:42:e3:12:7b:cd:7b:eb:b5:43:dd:66:bf:ce:29:90:
         4e:81:a4:61:1d:9c:ea:ea:2f:4e:51:01:0a:48:86:ef:8d:cd:
         b9:7f:47:d2:78:1a:13:b6:19:6f:ca:ff:a3:8d:6e:2d:69:4a:
         05:27:8f:25:60:6b:05:aa:76:81:ac:09:d9:f5:88:42:b2:f9:
         13:bd:dc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----