Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d142277-f51d-4273-bd55-7ede4dcc4a76/06aea7d2-f7e4-3456-a05e-a9a5883f49a7.roa
File:                     06aea7d2-f7e4-3456-a05e-a9a5883f49a7.roa (raw, json)
Hash identifier:          XQsb6dhnaaVZwOz+W/9mXF4Pk5r/P2uZuAqTVFfc53U=
Subject key identifier:   77:3B:63:4F:E8:3F:73:7A:1E:BD:56:64:9D:18:76:F4:88:40:CD:42
Certificate issuer:       /CN=3d142277-f51d-4273-bd55-7ede4dcc4a76
Certificate serial:       010D0C9F4328584784F4FDB68CD330C97997BC80
Authority key identifier: 87:F6:41:55:A6:08:5A:56:11:93:CA:8A:02:4F:74:26:2D:51:E2:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d142277-f51d-4273-bd55-7ede4dcc4a76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d142277-f51d-4273-bd55-7ede4dcc4a76/06aea7d2-f7e4-3456-a05e-a9a5883f49a7.roa
Signing time:             Sat 12 Oct 2024 18:20:17 +0000
ROA not before:           Sat 12 Oct 2024 18:20:17 +0000
ROA not after:            Fri 10 Jan 2025 19:20:17 +0000
asID:                     215546
IP address blocks:        2602:f855::/36 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:84:f4:fd:b6:8c:d3:30:c9:79:97:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d142277-f51d-4273-bd55-7ede4dcc4a76
        Validity
            Not Before: Oct 12 18:20:17 2024 GMT
            Not After : Jan 10 19:20:17 2025 GMT
        Subject: CN=72faf71e-def7-477d-9331-62d3e5feb156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b7:3f:4f:37:80:48:29:e6:bd:33:79:2c:cf:
                    c8:d2:ff:59:25:45:49:6f:5a:bd:fa:79:00:b3:88:
                    06:58:6e:73:bb:d0:95:9f:e8:ce:c2:ae:30:db:9a:
                    c4:37:04:db:72:72:0a:75:c9:82:1b:51:94:37:b7:
                    21:16:e1:f5:14:8b:2b:d8:f1:42:4a:09:b3:9b:59:
                    7f:ff:da:ff:2a:e6:a1:aa:23:2e:ab:e2:5a:9d:0c:
                    e6:17:14:f0:f1:33:c8:75:19:a3:2c:3c:8a:e6:34:
                    ef:02:2d:d0:99:76:7f:ef:21:6d:7f:1a:3c:0e:cc:
                    80:6e:aa:f6:e7:d5:14:66:52:38:91:c6:ca:42:0a:
                    d4:31:40:b0:5e:6b:27:15:53:09:5d:d9:32:16:a9:
                    a2:fe:8c:d8:3d:73:b6:da:6d:f9:bd:95:97:0f:bd:
                    16:ab:6c:a8:79:f5:73:70:6e:c1:b3:57:fb:2a:8f:
                    10:20:f6:29:a8:6f:37:a5:1b:fb:f1:f9:6a:b2:18:
                    79:45:b4:54:df:0c:e9:1e:e1:a1:9b:63:8e:5f:f2:
                    95:97:c4:5e:8e:a8:15:09:1c:8c:3b:83:37:e3:df:
                    51:be:c5:93:08:9f:54:73:04:54:8e:d6:dd:c1:39:
                    6c:25:a2:b7:43:f9:d3:9d:47:f7:62:e3:93:7a:eb:
                    1c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3B:63:4F:E8:3F:73:7A:1E:BD:56:64:9D:18:76:F4:88:40:CD:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d142277-f51d-4273-bd55-7ede4dcc4a76/06aea7d2-f7e4-3456-a05e-a9a5883f49a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d142277-f51d-4273-bd55-7ede4dcc4a76/3d142277-f51d-4273-bd55-7ede4dcc4a76.crl

            X509v3 Authority Key Identifier:
                keyid:87:F6:41:55:A6:08:5A:56:11:93:CA:8A:02:4F:74:26:2D:51:E2:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d142277-f51d-4273-bd55-7ede4dcc4a76.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f855::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:df:ad:b0:23:bf:4d:1c:5e:b0:3a:b6:41:d4:ed:f8:39:f7:
         0a:fe:36:43:40:9b:0a:4c:2c:55:96:1e:69:b5:5d:7d:30:7e:
         be:b3:a0:00:ce:ee:85:b0:b6:c8:d5:60:19:21:69:b0:28:04:
         46:d9:96:d0:b4:a5:44:d4:a9:71:cd:c4:b1:dd:2d:43:5c:0f:
         c5:95:1d:bb:36:6a:03:73:e7:9f:04:af:df:65:e0:1f:0f:f1:
         9e:bd:55:83:cd:91:55:a9:b9:51:f5:b0:10:c4:17:b9:d0:e5:
         1a:f3:3c:a3:8b:c9:8d:ef:23:8c:6f:c3:16:82:3e:8b:1d:5d:
         f8:c9:31:b8:05:25:96:25:5e:cc:fe:e7:32:21:2b:35:ef:92:
         e5:fd:da:d5:38:f4:e1:bc:a8:3b:8a:84:ee:c8:94:ee:b3:c1:
         80:c8:38:6f:c1:17:15:33:ed:a2:90:59:1b:2d:6f:e1:72:d4:
         91:c5:b2:77:ff:ae:ae:aa:11:96:6c:e7:12:eb:c3:13:64:c1:
         60:06:b2:4e:af:d8:af:f3:1c:e9:80:b5:a6:b3:e9:a4:03:ce:
         1b:d4:a7:db:96:b6:8b:2a:bc:c2:67:b2:3b:b3:d1:91:5e:24:
         0c:71:1a:cd:a6:12:97:db:4b:a1:57:45:58:8a:9b:1e:9d:af:
         fb:65:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----