Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4e78062b-ec34-32f0-99bc-ea6b5541aeaf.roa
File:                     4e78062b-ec34-32f0-99bc-ea6b5541aeaf.roa (raw, json)
Hash identifier:          7aqyLiUQj5Cnw3vMQd3Nab95VFYsJ+8oVgmLAcWawXc=
Subject key identifier:   75:41:79:A5:44:1B:19:CC:E0:2A:48:39:10:1B:7B:15:8D:78:21:06
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F43285840E0D0A4D6E2B88980DFCE2C00
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4e78062b-ec34-32f0-99bc-ea6b5541aeaf.roa
Signing time:             Thu 02 Feb 2023 12:00:00 +0000
ROA not before:           Thu 02 Feb 2023 12:00:00 +0000
ROA not after:            Wed 24 Jan 2024 05:00:00 +0000
asID:                     209165
IP address blocks:        2602:fd50:10f9::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:e0:d0:a4:d6:e2:b8:89:80:df:ce:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Feb  2 12:00:00 2023 GMT
            Not After : Jan 24 05:00:00 2024 GMT
        Subject: CN=b8f13a3d-c9e2-4b40-8a64-aa7a96ee776a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4a:46:68:cc:ae:b7:93:d0:14:b9:38:56:5a:
                    5e:d7:92:05:10:ba:a0:84:0d:da:5a:0c:26:b0:5c:
                    73:4a:52:09:f2:bf:0c:1a:b5:eb:e5:42:2a:6b:43:
                    af:48:3c:4b:46:27:1a:70:9c:19:0c:03:d0:c5:e4:
                    a3:56:d5:3e:42:e5:7d:fb:25:73:ef:14:24:6f:b4:
                    4d:c5:63:88:d2:60:88:cf:08:59:63:e0:f8:e5:a5:
                    de:da:cf:70:e9:16:1d:07:b6:bb:0c:9b:e8:98:ad:
                    4b:19:fc:0f:9c:09:d2:9d:e7:83:9e:1b:aa:bc:27:
                    07:09:7b:0c:0c:4b:7a:50:0c:cb:b2:45:56:26:ea:
                    0a:7b:45:65:82:93:30:6d:0e:fd:5a:51:d7:16:00:
                    13:a8:13:20:7f:a4:b0:18:6e:7c:53:dd:d4:62:20:
                    a6:09:b1:1e:68:49:b8:96:b2:b1:ae:de:0c:db:06:
                    89:2b:86:3c:9d:cb:d1:7c:3b:87:1b:2b:99:8c:47:
                    57:28:20:5f:9c:f8:52:02:a8:5e:aa:bc:b2:9a:48:
                    03:aa:1f:06:fd:11:d8:0b:8b:b5:d6:f9:29:24:19:
                    3d:a4:c4:93:26:f5:65:83:16:ef:68:1d:65:21:f7:
                    11:b8:b5:c9:05:de:96:8d:ce:9f:bc:75:07:05:22:
                    74:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:41:79:A5:44:1B:19:CC:E0:2A:48:39:10:1B:7B:15:8D:78:21:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/4e78062b-ec34-32f0-99bc-ea6b5541aeaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd50:10f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:53:3e:92:6b:22:49:e4:01:ad:dc:97:86:47:c0:78:ce:89:
         ac:1d:2d:fb:f9:45:48:bd:c7:e6:5c:6e:ca:a3:76:bb:43:61:
         75:65:0f:ea:2e:22:77:a7:6b:96:47:f1:c4:d0:19:ab:4c:80:
         df:d3:b2:54:59:bb:eb:e3:c9:bb:59:87:73:63:d8:3e:11:e8:
         ec:d9:c6:64:1f:ef:af:83:ab:98:f2:b0:c3:58:dc:d9:6d:4e:
         7f:c7:e6:48:96:c2:3b:7b:1a:9f:99:76:4a:15:cc:64:10:94:
         44:ed:c6:c2:ab:1a:6d:54:00:7e:cf:bc:aa:4a:1c:07:b9:ba:
         ea:ac:ab:73:d7:b9:14:78:3f:ea:2f:c1:e4:04:ec:12:12:ee:
         40:5c:07:86:77:64:aa:6b:a5:03:01:4f:c4:7b:6d:f7:3a:a3:
         48:ea:22:8d:56:8f:c9:77:f2:97:57:46:14:c3:68:93:4e:10:
         ba:55:04:51:0f:54:ed:4f:dd:bd:9c:36:80:77:2e:5d:82:eb:
         18:d2:43:01:3b:fe:f0:f4:b1:50:51:a3:3a:69:41:96:ad:a7:
         40:04:d5:14:fd:6d:88:02:65:6f:45:7a:31:14:fa:05:16:71:
         8a:76:95:36:2c:61:8b:ee:19:4b:fa:bb:75:a9:0c:6d:ca:b0:
         97:69:1c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----