Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/21b50d58-71f3-35de-9eac-e699b2724e11.roa
File:                     21b50d58-71f3-35de-9eac-e699b2724e11.roa (raw, json)
Hash identifier:          L6M9yqyKyPLehCSK2yPh5Iw7bqRk/bKjtoIFC2lcaaY=
Subject key identifier:   95:9B:D6:EF:2E:4D:7A:06:DD:02:6A:73:02:27:BE:DA:37:AB:09:03
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F432858480D3FCBC130D0C494DB91B000
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/21b50d58-71f3-35de-9eac-e699b2724e11.roa
Signing time:             Sat 30 Nov 2024 14:00:50 +0000
ROA not before:           Sat 30 Nov 2024 14:00:50 +0000
ROA not after:            Fri 28 Feb 2025 14:00:50 +0000
asID:                     15169
IP address blocks:        2605:ef80:c040::/45 maxlen: 45
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0d:3f:cb:c1:30:d0:c4:94:db:91:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Nov 30 14:00:50 2024 GMT
            Not After : Feb 28 14:00:50 2025 GMT
        Subject: CN=b73f9e2b-0dc2-4fbf-bfa8-7938826e63ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:3f:2b:7a:f6:e4:81:6e:f1:90:ba:57:7d:
                    80:89:de:4b:f2:be:a6:e2:13:1a:79:e7:6f:51:c5:
                    6e:a8:24:a7:38:6a:92:6b:11:ee:fd:0e:8a:74:14:
                    04:55:92:ee:66:a0:7e:9f:0b:66:39:5a:9b:01:cf:
                    c2:41:8e:9a:e4:83:dc:ce:46:bd:92:50:99:84:e3:
                    e9:3d:cd:4f:96:25:fb:49:ee:45:0c:0c:13:dd:28:
                    fb:78:c0:bb:c0:2f:84:48:7d:56:1c:26:44:fe:c1:
                    95:9c:38:bc:ee:29:20:86:05:2c:9f:66:85:68:0f:
                    e3:2e:99:41:35:50:53:db:e9:9e:14:99:c4:19:b0:
                    8a:0e:76:83:2e:98:60:65:3b:6b:ec:a1:3f:49:d4:
                    1b:b2:c4:37:c1:c2:16:61:f4:8d:db:da:b5:2b:cc:
                    41:a3:2b:80:82:f5:0c:40:b5:44:61:db:34:c8:2f:
                    8b:10:44:f2:0c:bb:42:4a:a9:68:7f:53:2e:88:9f:
                    dc:04:21:85:1b:3e:fc:45:7b:1a:c2:52:06:f9:d2:
                    f0:56:fe:e5:72:86:99:2e:97:27:f2:64:d1:bc:2d:
                    e8:3e:5d:e9:22:e8:ae:38:3a:3a:b4:c9:9f:48:bb:
                    b7:d0:40:36:75:cb:8c:57:f0:14:e6:ca:24:ed:69:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9B:D6:EF:2E:4D:7A:06:DD:02:6A:73:02:27:BE:DA:37:AB:09:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/21b50d58-71f3-35de-9eac-e699b2724e11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ef80:c040::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f5:74:d4:7d:ca:7e:7f:14:47:1b:87:5f:77:80:91:0a:dd:
         19:40:02:94:7b:17:67:a3:08:3c:b9:90:50:17:e9:a4:f9:f2:
         ba:bf:f6:54:60:f3:ff:85:03:17:1c:60:45:f8:1d:a4:0d:29:
         66:48:ea:0b:ac:1a:71:d7:c3:21:f4:50:a2:2c:93:53:a9:ae:
         c1:68:67:39:9a:dc:17:49:5e:33:14:e3:b4:a5:b7:9b:f6:7e:
         f7:3d:28:25:04:43:30:af:37:09:12:03:ab:a1:5f:76:21:e1:
         7f:76:5f:1c:22:a1:3d:88:40:58:1d:ea:7a:1b:cd:ac:84:70:
         cf:07:57:98:f4:a6:bf:bb:5a:f7:d0:39:ac:14:8f:5d:cf:f7:
         24:7c:8c:27:6f:8a:7f:f1:58:3e:d2:51:5c:30:01:fd:c0:d0:
         d0:56:ac:ec:28:42:63:11:b0:d6:14:89:02:8d:15:c6:d9:79:
         a4:32:76:94:89:d5:aa:7e:b6:4c:35:86:c2:7a:50:51:8a:45:
         2d:6a:20:bf:2f:d1:8e:cc:f2:a4:7a:b1:4d:ee:93:dc:11:cc:
         51:e9:e1:71:98:2e:92:7d:d0:de:b0:9d:1b:2f:55:c5:c4:65:
         91:c2:ea:32:75:a0:bb:c2:7d:3a:0f:61:ed:e2:d5:8e:1b:e5:
         8f:ac:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----