Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/c40db865-4bfb-3620-98fd-08e2ce822d9e.roa
File:                     c40db865-4bfb-3620-98fd-08e2ce822d9e.roa (raw, json)
Hash identifier:          9C4IXREgVh97tj+rcnqmtdgMdw1VE1oRDyM9e1KDRXE=
Subject key identifier:   0A:95:EB:05:AC:20:42:38:E0:33:CC:D9:CB:14:89:7B:32:F5:1A:02
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F43285842DADED59FBAA7259EF3BB4D00
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/c40db865-4bfb-3620-98fd-08e2ce822d9e.roa
Signing time:             Sat 12 Aug 2023 01:00:21 +0000
ROA not before:           Sat 12 Aug 2023 01:00:21 +0000
ROA not after:            Fri 10 Nov 2023 02:00:21 +0000
asID:                     398646
IP address blocks:        2602:fe6b:1012::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:da:de:d5:9f:ba:a7:25:9e:f3:bb:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Aug 12 01:00:21 2023 GMT
            Not After : Nov 10 02:00:21 2023 GMT
        Subject: CN=ed3b48d5-3dfe-4f70-87c5-a8d7c78ba5b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7a:50:11:5a:93:fd:fb:84:85:4a:61:41:e7:
                    c2:64:01:d3:c2:c4:fa:46:81:d3:f3:58:74:9c:50:
                    88:8a:6c:0e:d9:b5:73:0f:e7:6d:5b:12:96:e8:07:
                    7a:c8:bb:70:b6:5f:f0:0c:3b:87:4c:85:05:52:7d:
                    60:66:87:01:54:2c:56:27:69:13:94:95:53:6d:16:
                    4b:4c:d4:a9:8e:ce:5b:eb:35:de:bd:71:56:d4:f6:
                    d2:b8:65:8c:df:6a:a4:c2:2c:04:5e:60:14:45:af:
                    ef:2c:82:18:37:60:fe:10:54:77:57:8f:c1:f0:0c:
                    65:8a:88:49:e0:0f:c7:86:6b:20:e5:7a:ca:9c:33:
                    a1:8a:7e:20:45:37:90:af:22:83:ce:c1:d8:9b:6e:
                    e2:4f:37:37:4d:a9:98:dd:07:c1:04:bc:a3:1b:f2:
                    f6:35:7c:67:ba:3a:07:c8:72:56:4d:e5:6d:21:85:
                    61:52:2f:4d:bd:75:e4:1a:d7:90:a9:de:ef:0b:5c:
                    80:d3:f6:a6:2f:9b:53:fb:c0:a7:c5:90:02:d3:66:
                    3e:9c:4c:05:14:b0:58:cf:1a:ab:37:f0:92:1f:35:
                    e6:5e:a6:f2:15:a0:42:06:3a:3b:e5:df:d8:d6:75:
                    88:d6:70:4f:4e:f4:ac:3b:a8:98:b9:3e:f7:e2:49:
                    cf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:95:EB:05:AC:20:42:38:E0:33:CC:D9:CB:14:89:7B:32:F5:1A:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/c40db865-4bfb-3620-98fd-08e2ce822d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe6b:1012::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:1c:5e:09:61:7e:2a:12:bd:ea:1a:46:e7:50:68:e0:73:dd:
         af:64:80:10:b8:49:05:87:a0:91:31:a2:bb:1b:7f:b5:75:e5:
         8c:1e:67:b6:88:39:72:5d:13:19:bc:b1:71:fe:25:9f:4c:72:
         dc:d5:66:59:e0:45:dd:ae:ce:2c:0d:bc:8f:7b:4d:ed:21:0d:
         94:36:ee:f8:88:d4:5c:68:ac:4f:6e:14:74:10:76:b7:b9:99:
         6c:50:7e:23:fd:52:7e:a5:08:e5:2e:d2:6b:e6:04:43:6a:20:
         1a:07:bf:54:21:d1:d5:2a:95:06:ea:2e:37:17:4d:6f:be:7e:
         56:4a:91:08:56:91:18:06:a5:dd:59:89:3a:98:55:0f:b3:46:
         14:0c:b6:30:c8:b6:ea:22:23:cb:40:5e:0c:c7:bb:cf:9d:e8:
         83:72:23:0d:7a:e5:67:c0:31:1c:10:a6:76:5e:13:43:77:30:
         40:d3:20:b8:4e:aa:46:46:85:93:7b:d1:44:2b:e8:ed:47:f6:
         10:ac:f6:65:e5:88:c8:85:4c:aa:64:96:c7:69:d6:a2:bf:03:
         ca:da:50:12:41:d3:54:c4:70:a9:a0:9e:d0:ef:99:75:7c:6a:
         b6:58:5a:de:4d:da:40:5b:58:13:5e:e8:11:87:8b:b5:1f:2b:
         99:48:a8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:32 2024 by rpki-client on console-ams.rpki-client.org