Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5642eb3c-9905-3ed7-8021-6ff1e283bfa8.roa
File:                     5642eb3c-9905-3ed7-8021-6ff1e283bfa8.roa (raw, json)
Hash identifier:          9xooRQjULfjJhaKr2qmn0YgN/DKPKlU067Cu1vy66MI=
Subject key identifier:   EB:75:CA:41:6B:14:2F:E2:D0:ED:4B:10:99:46:09:E4:23:94:A6:05
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285842FEF1AEE022C176D200701C00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5642eb3c-9905-3ed7-8021-6ff1e283bfa8.roa
Signing time:             Thu 24 Aug 2023 23:07:33 +0000
ROA not before:           Thu 24 Aug 2023 23:07:33 +0000
ROA not after:            Thu 23 Nov 2023 00:07:33 +0000
asID:                     6649
IP address blocks:        2607:fa40:2::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:fe:f1:ae:e0:22:c1:76:d2:00:70:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Aug 24 23:07:33 2023 GMT
            Not After : Nov 23 00:07:33 2023 GMT
        Subject: CN=e712bef4-2223-43c9-ac65-934277b68fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:31:41:b5:dd:2f:95:54:6d:e3:8d:c2:5d:fe:
                    51:2a:65:38:a4:6d:ab:54:31:f3:27:7a:d5:e0:36:
                    02:dd:4a:af:16:2c:ba:69:5d:6c:04:f5:74:fd:e2:
                    3e:f9:29:7c:9d:3e:e0:d3:15:36:b1:ac:98:a7:63:
                    8f:32:4b:9d:26:29:b6:6c:e4:9d:e4:04:93:0f:42:
                    9a:f7:ef:6e:c9:99:59:6d:37:66:73:ed:ac:1b:56:
                    80:03:3c:90:47:39:79:b5:ec:3a:d3:a2:df:14:99:
                    17:99:17:c0:64:1e:d3:25:ac:bd:c2:ce:aa:05:8b:
                    c0:75:75:46:f7:d8:28:17:10:5d:68:34:cd:ff:83:
                    a8:91:ed:09:65:1e:93:e0:a8:fc:8a:f8:6f:ad:c1:
                    9f:1a:f6:63:a9:07:b8:c0:be:f8:b3:4b:fd:88:68:
                    b5:f1:32:94:e0:ec:20:50:07:d0:57:e5:c4:41:95:
                    63:a0:f1:8d:6a:f5:21:47:d9:a2:1c:79:f5:a7:33:
                    56:ad:5c:a0:89:37:e1:d7:b8:6f:2d:47:1b:e7:cc:
                    8e:e9:ff:8d:37:a8:b7:dc:37:99:2b:bb:92:e2:8c:
                    c9:4e:0d:8e:1a:dc:2a:c2:5d:ca:2f:47:25:69:d4:
                    19:b6:ad:b9:39:56:66:14:2f:6e:4a:6c:4e:52:5c:
                    31:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:75:CA:41:6B:14:2F:E2:D0:ED:4B:10:99:46:09:E4:23:94:A6:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/5642eb3c-9905-3ed7-8021-6ff1e283bfa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fa40:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:88:ed:c9:a1:5d:67:3e:52:f4:05:e5:0e:7c:8e:6c:15:51:
         b6:57:89:6b:78:48:cd:ba:29:14:cc:f6:a6:ec:bb:77:86:35:
         d2:11:74:26:6a:0c:22:aa:76:51:90:2d:43:c2:7c:bb:83:66:
         e0:73:45:c9:f1:5e:82:3f:ba:d7:a9:b3:af:d4:d9:2d:5d:e3:
         83:73:ce:1d:ab:c8:2c:c6:1f:ce:fd:bb:e8:96:7f:71:6b:0f:
         1f:48:74:52:08:ac:84:08:8a:2a:90:65:06:1a:c1:bd:01:1d:
         ca:e1:0a:3e:c9:f6:51:8b:9b:b6:62:35:b7:61:fc:c2:03:b5:
         fe:73:d8:31:86:c9:56:85:30:ca:19:66:20:e7:36:83:b3:77:
         60:09:18:80:a0:46:d5:96:13:3d:47:1b:6c:7f:84:a4:b9:f3:
         cb:21:27:5f:4c:97:55:af:00:4f:3b:cd:da:25:29:17:a3:14:
         6e:dc:f5:aa:3a:2b:e1:2d:b9:a6:54:24:79:c5:d3:3d:76:fc:
         0c:34:8a:dd:71:17:35:0e:ea:5d:5d:79:6d:1c:c7:25:d4:3e:
         df:74:10:7b:0c:8e:a6:a0:e0:4e:f6:75:7f:a6:d5:f6:af:90:
         a8:9c:5e:78:d1:b1:5f:59:fa:c2:fe:3a:9a:19:e1:cd:99:86:
         43:50:93:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----