Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/577ce955-940a-3b5b-b4c7-563f4ce8443c.roa
File:                     577ce955-940a-3b5b-b4c7-563f4ce8443c.roa (raw, json)
Hash identifier:          2Q6tMu7TcoAMPZtQiKG4XH7GAzLv+L756e8E27q7ARY=
Subject key identifier:   7B:2A:79:60:A6:77:A2:CE:53:29:E7:28:87:7B:A0:8E:9E:FF:B8:54
Certificate issuer:       /CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
Certificate serial:       010D0C9F43285842B263D86AB8486FACDC938580
Authority key identifier: FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/577ce955-940a-3b5b-b4c7-563f4ce8443c.roa
Signing time:             Fri 28 Jul 2023 13:00:19 +0000
ROA not before:           Fri 28 Jul 2023 13:00:19 +0000
ROA not after:            Thu 26 Oct 2023 13:00:19 +0000
asID:                     62833
IP address blocks:        2600:cc04:e000::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b2:63:d8:6a:b8:48:6f:ac:dc:93:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
        Validity
            Not Before: Jul 28 13:00:19 2023 GMT
            Not After : Oct 26 13:00:19 2023 GMT
        Subject: CN=897d6311-53ac-4d6f-aa71-fb41e9efa482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:55:40:42:8b:ed:21:76:93:ab:f8:04:c5:70:
                    fc:ed:63:4c:f4:88:5c:a0:6e:fa:58:3a:6d:2e:df:
                    6f:36:4d:cb:13:3f:08:ed:f2:68:d6:ea:df:2e:87:
                    3d:51:60:9b:ca:db:32:1b:c4:48:61:1f:af:96:13:
                    11:34:89:f0:1c:1f:6f:a8:29:97:4d:ac:b8:ef:1e:
                    ad:80:9a:f5:45:5f:09:c2:0f:24:3c:a8:f4:50:25:
                    e7:77:61:b3:5a:f1:e9:6c:3e:07:c0:54:bd:52:62:
                    94:44:71:12:5d:6c:4c:66:6b:de:9f:2a:9a:66:08:
                    f2:6d:fa:ae:86:9b:bc:82:10:a6:f7:a9:b6:34:6e:
                    47:12:de:7a:af:e9:f3:40:bd:59:75:00:57:33:3a:
                    8b:a5:85:59:6a:d8:f6:8c:88:03:3b:ed:02:e5:8a:
                    b5:e1:64:fc:5b:d7:22:ea:bb:42:f7:4f:5d:d3:12:
                    cb:cf:9d:70:3a:cb:8e:b1:a6:57:e6:e4:f8:a6:4e:
                    13:87:c8:9b:ef:9e:1b:8f:47:2c:92:d5:2c:87:4d:
                    b6:b2:89:94:3f:cd:c7:2c:87:35:2b:ed:b2:e2:e3:
                    cd:e2:68:42:54:85:c5:75:95:22:59:98:e0:f9:89:
                    5d:27:87:2e:01:9f:af:f6:67:d1:0f:0d:aa:4c:30:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2A:79:60:A6:77:A2:CE:53:29:E7:28:87:7B:A0:8E:9E:FF:B8:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/577ce955-940a-3b5b-b4c7-563f4ce8443c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.crl

            X509v3 Authority Key Identifier:
                keyid:FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:cc04:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:59:e9:16:b0:76:b2:d5:85:af:f7:15:b5:f6:07:86:27:3f:
         35:4f:d0:e8:81:ea:4b:b1:83:84:fd:cb:66:6e:6b:5b:82:86:
         c5:0a:7a:b5:8d:79:d8:70:24:ab:6b:99:fd:24:db:13:6e:63:
         6c:bc:a6:c9:0a:c3:37:30:e4:4e:5b:be:be:6a:76:1d:0f:86:
         26:5c:7a:e6:bb:df:89:c7:1c:64:f4:b9:a5:bd:64:82:64:a8:
         ed:3d:34:50:e4:79:94:48:5e:1f:6a:66:a1:34:e9:27:93:8b:
         27:b1:66:4b:00:40:68:d6:da:cf:82:df:93:25:15:29:fd:90:
         ec:56:d4:21:68:25:9c:0d:fc:03:fd:c3:54:e2:11:ae:14:d3:
         8a:27:cd:7c:89:ac:d1:68:37:4d:cf:59:87:27:ec:83:08:22:
         a6:75:3d:2b:53:1f:8b:43:28:9d:b9:27:36:ab:39:6d:69:a9:
         6c:ee:71:20:fd:36:42:3c:fc:0b:51:3a:ae:25:82:8a:01:21:
         9b:7c:d9:47:33:49:fb:96:ae:1e:0b:24:22:10:76:92:1f:1c:
         9a:17:cc:7c:3f:1c:8c:ea:20:20:1b:8f:97:b0:76:a9:60:da:
         d2:8d:66:33:4a:f1:f3:1c:83:51:51:63:0d:2a:8a:8f:af:74:
         a7:25:85:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----