Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/44c4623e-126a-30bb-a39a-60838838c077.roa
File:                     44c4623e-126a-30bb-a39a-60838838c077.roa (raw, json)
Hash identifier:          uVOknJj/wz2KZAiznBxZsldjNLIsFRr3xxZMInUd4Rw=
Subject key identifier:   8A:B9:84:40:B1:45:1C:90:58:7A:58:4E:1D:84:B5:3A:54:17:3A:50
Certificate issuer:       /CN=0675db59-b7a3-47ed-ae85-edcfb590155e
Certificate serial:       010D0C9F4328583D51CF79DAE87CAEC62EA0DA20
Authority key identifier: D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/44c4623e-126a-30bb-a39a-60838838c077.roa
Signing time:             Tue 22 Mar 2022 04:00:00 +0000
ROA not before:           Tue 22 Mar 2022 04:00:00 +0000
ROA not after:            Wed 22 Mar 2023 04:00:00 +0000
asID:                     399866
IP address blocks:        2602:fc5d:c0a::/48 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:51:cf:79:da:e8:7c:ae:c6:2e:a0:da:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0675db59-b7a3-47ed-ae85-edcfb590155e
        Validity
            Not Before: Mar 22 04:00:00 2022 GMT
            Not After : Mar 22 04:00:00 2023 GMT
        Subject: CN=8aa87a84-76f1-42a0-afcf-5a6be005b969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:c7:fc:63:a7:27:36:8a:4f:a3:c7:b3:19:
                    06:41:4c:9f:6c:67:7e:99:ed:35:3f:2d:b3:64:f5:
                    7a:c4:d4:a9:f7:41:6e:11:c1:a6:dd:22:5e:5f:f9:
                    0a:f5:73:3f:00:5e:86:a3:f2:ca:d9:fc:fa:69:b7:
                    d5:b1:eb:6a:61:b2:ac:4e:ba:04:76:b0:fa:4f:ce:
                    76:2c:df:3e:3e:dd:be:ba:f8:37:cd:64:11:44:47:
                    4f:2c:a6:1b:dc:94:03:72:a6:00:00:2b:24:fb:60:
                    aa:f9:01:ce:64:29:3b:94:43:50:2e:f7:e4:01:f9:
                    39:7e:57:34:e1:d5:e3:b4:43:50:09:e6:7d:9a:1d:
                    92:5b:54:ac:0b:79:1f:fc:a7:f8:45:b3:01:10:44:
                    69:0d:a7:b6:c5:02:2d:c5:95:93:a2:e5:c8:c6:4b:
                    7d:67:13:87:fa:32:39:8a:cc:95:58:c2:25:61:89:
                    d8:7e:62:ab:02:ba:44:b8:4f:d1:48:f5:b1:e1:ee:
                    df:e4:50:c1:ed:22:c0:7f:9b:10:ac:5e:60:b5:1e:
                    48:39:89:86:6e:46:aa:27:c4:39:ce:9a:3b:f0:c4:
                    ae:72:88:6e:03:f7:e6:26:e9:71:e3:bc:9a:cd:69:
                    c4:f3:0f:ac:8d:a4:ea:22:e2:72:2e:35:12:02:8d:
                    05:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B9:84:40:B1:45:1C:90:58:7A:58:4E:1D:84:B5:3A:54:17:3A:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/44c4623e-126a-30bb-a39a-60838838c077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e/0675db59-b7a3-47ed-ae85-edcfb590155e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:DD:50:92:34:CF:D1:3B:C7:4B:47:40:06:68:71:C3:2A:DE:A6:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0675db59-b7a3-47ed-ae85-edcfb590155e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc5d:c0a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:8c:13:fb:a8:90:f2:48:3b:5f:f6:13:f6:37:08:41:2b:65:
         0c:3e:12:73:6c:a2:0b:e1:e6:bb:0c:28:3c:09:58:de:f1:76:
         5d:ca:20:15:f4:ed:a7:19:36:a3:3c:be:04:7b:c4:73:d6:a5:
         1c:ae:90:2d:3d:ea:7e:c8:83:fa:f1:25:e8:da:23:08:ba:c1:
         ad:a7:be:46:d7:0d:fa:cb:93:32:8a:83:f6:13:29:06:0a:8b:
         6c:b9:19:8e:74:b9:95:ca:0d:12:cd:4b:54:60:93:5d:5a:27:
         bc:1c:31:24:81:ef:98:3e:66:65:0a:33:0b:89:e3:dd:d2:d3:
         a6:f8:76:38:ab:68:69:a1:22:07:74:1c:1d:d7:06:64:d5:37:
         05:f2:3d:17:2f:08:b3:c6:f8:b2:08:24:fc:e6:f1:a8:a4:65:
         91:af:d5:42:3c:08:bb:69:2a:34:4e:ca:3c:bc:5e:1e:0e:09:
         de:3a:48:9d:fa:26:f4:85:a4:c3:2c:5f:39:60:e1:e2:f5:2d:
         6b:72:2e:6c:ce:45:b4:8c:c3:e1:0f:c4:f5:03:a1:e1:0f:d8:
         2c:aa:e1:2b:e1:52:ad:bf:9a:06:05:70:9b:7f:80:37:71:67:
         a6:60:d3:3d:5e:f1:81:2b:6b:c0:5b:dc:c4:de:2a:d4:4f:d3:
         c2:25:dc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----