Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/c31ea8e2-ebf5-3ce1-9896-1e2e6903056a.roa
File:                     c31ea8e2-ebf5-3ce1-9896-1e2e6903056a.roa (raw, json)
Hash identifier:          +aBalwOcqpHUCa1Oy6oP3MqXf5H1q2Q2uvrfZidbU8s=
Subject key identifier:   68:88:60:BB:52:72:44:8B:BB:1F:04:45:A2:E3:A7:78:E4:56:0F:F9
Certificate issuer:       /CN=492092dd-7457-4265-80ee-c447496a414c
Certificate serial:       010D0C9F4328584304BF1A1DA17E3EDF40129FF0
Authority key identifier: E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/c31ea8e2-ebf5-3ce1-9896-1e2e6903056a.roa
Signing time:             Sun 27 Aug 2023 01:00:22 +0000
ROA not before:           Sun 27 Aug 2023 01:00:22 +0000
ROA not after:            Sat 25 Nov 2023 02:00:22 +0000
asID:                     260628
IP address blocks:        2602:fc26:bd::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:04:bf:1a:1d:a1:7e:3e:df:40:12:9f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492092dd-7457-4265-80ee-c447496a414c
        Validity
            Not Before: Aug 27 01:00:22 2023 GMT
            Not After : Nov 25 02:00:22 2023 GMT
        Subject: CN=70d5a128-3575-4d8b-a166-13e5fa17a897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:88:f9:59:70:c6:c7:ea:9a:05:ac:ae:4a:
                    ef:57:30:b6:ba:d4:2a:4d:30:c2:87:51:54:bd:1c:
                    d8:47:06:9e:a6:78:a9:f4:fa:e7:cb:6f:3b:3c:07:
                    4a:0d:2f:72:0e:af:4d:fb:51:f1:1b:df:8a:84:e3:
                    51:f7:37:97:51:f6:09:3f:06:a5:6f:8b:2b:2f:50:
                    d3:3c:fa:1a:d4:5e:59:59:22:43:4b:03:51:b1:52:
                    ac:98:08:5c:12:12:8c:ee:25:f9:39:0c:99:45:c6:
                    77:27:7a:0f:49:88:51:98:b2:a4:fc:cc:5e:2c:1c:
                    b9:0f:65:0d:8f:1b:38:6c:a6:b9:a5:d5:f7:88:c9:
                    9b:79:a4:e1:c6:61:36:2a:8e:c1:c7:69:70:ad:d8:
                    a6:65:05:01:b0:b6:83:4c:18:20:7d:fd:9e:06:1b:
                    27:d7:a2:e1:05:b9:0f:e0:9f:a5:45:8f:0d:80:2e:
                    c7:fe:28:29:67:ad:f3:23:e8:fa:98:45:cb:a8:7c:
                    6f:15:1b:18:3f:7e:44:68:25:c9:26:e9:b5:43:6a:
                    81:66:39:ac:eb:a8:29:c3:70:77:0d:e3:82:6c:68:
                    1c:1b:f4:9d:a8:0d:8a:9a:5f:01:a2:fd:0b:ab:ab:
                    12:ff:d9:2c:b3:eb:99:4f:fd:20:80:63:10:74:7d:
                    46:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:88:60:BB:52:72:44:8B:BB:1F:04:45:A2:E3:A7:78:E4:56:0F:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/c31ea8e2-ebf5-3ce1-9896-1e2e6903056a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc26:bd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:13:c8:de:54:00:c0:4e:2a:62:90:6e:aa:2d:57:65:a8:d2:
         f7:86:0a:f7:f7:f1:64:b8:5b:fa:57:57:51:d3:30:98:e9:95:
         6c:be:8f:6a:fd:aa:82:1f:94:93:2f:d2:20:0f:c2:81:92:c3:
         29:23:8f:36:bb:93:80:99:fb:8e:69:fb:e7:23:55:9b:92:97:
         73:ef:ba:bf:42:39:37:eb:b0:7b:60:fa:34:0e:97:47:bf:0c:
         9c:bb:e5:14:30:60:dd:60:cd:7f:51:c2:73:ef:41:e1:2d:2e:
         f9:ad:ae:82:5f:a3:ca:df:2b:03:aa:cb:ae:fd:60:e7:53:9c:
         de:e3:2f:6e:b9:ba:df:af:d0:66:69:75:3f:dd:ee:b6:bd:48:
         e8:f0:ae:9f:e6:8c:45:87:c9:a8:cf:77:2e:d3:c1:a8:93:b6:
         2f:70:52:58:e5:19:a1:e4:3a:c8:e2:e7:49:c8:69:b1:18:07:
         bc:2a:63:c2:1e:81:58:7d:8f:7e:62:5e:48:58:4e:30:14:f4:
         af:a0:c9:3c:24:5a:e2:f3:20:fc:0c:ea:19:d3:77:f6:c5:e9:
         07:78:f8:03:c3:b0:2f:d7:6e:df:ef:37:bc:7f:ba:ab:56:76:
         c7:d6:d0:91:6f:73:44:ae:d8:70:44:1a:e4:ce:3d:04:c5:54:
         2f:05:1d:c6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEMEvxodoX4+30ASn/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDkyMDkyZGQtNzQ1Ny00MjY1LTgwZWUtYzQ0NzQ5NmE0
MTRjMB4XDTIzMDgyNzAxMDAyMloXDTIzMTEyNTAyMDAyMlowLzEtMCsGA1UEAxMk
NzBkNWExMjgtMzU3NS00ZDhiLWExNjYtMTNlNWZhMTdhODk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFqI+VlwxsfqmgWsrkrvVzC2utQqTTDCh1FU
vRzYRwaepnip9Prny287PAdKDS9yDq9N+1HxG9+KhONR9zeXUfYJPwalb4srL1DT
PPoa1F5ZWSJDSwNRsVKsmAhcEhKM7iX5OQyZRcZ3J3oPSYhRmLKk/MxeLBy5D2UN
jxs4bKa5pdX3iMmbeaThxmE2Ko7Bx2lwrdimZQUBsLaDTBggff2eBhsn16LhBbkP
4J+lRY8NgC7H/igpZ63zI+j6mEXLqHxvFRsYP35EaCXJJum1Q2qBZjms66gpw3B3
DeOCbGgcG/SdqA2Kml8Bov0Lq6sS/9kss+uZT/0ggGMQdH1G1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGiIYLtSckSLux8ERaLjp3jkVg/5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OTIw
OTJkZC03NDU3LTQyNjUtODBlZS1jNDQ3NDk2YTQxNGMvYzMxZWE4ZTItZWJmNS0z
Y2UxLTk4OTYtMWUyZTY5MDMwNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDkyMDkyZGQtNzQ1Ny00MjY1LTgw
ZWUtYzQ0NzQ5NmE0MTRjLzQ5MjA5MmRkLTc0NTctNDI2NS04MGVlLWM0NDc0OTZh
NDE0Yy5jcmwwHwYDVR0jBBgwFoAU52n324FmfZ3Lk+ns0XF96zrFDHAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80OTIwOTJkZC03NDU3LTQyNjUtODBlZS1jNDQ3
NDk2YTQxNGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8JgC9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADYTyN5UAMBOKmKQbqotV2Wo0veGCvf38WS4W/pXV1HTMJjplWy+
j2r9qoIflJMv0iAPwoGSwykjjza7k4CZ+45p++cjVZuSl3Pvur9COTfrsHtg+jQO
l0e/DJy75RQwYN1gzX9RwnPvQeEtLvmtroJfo8rfKwOqy679YOdTnN7jL265ut+v
0GZpdT/d7ra9SOjwrp/mjEWHyajPdy7TwaiTti9wUljlGaHkOsji50nIabEYB7wq
Y8IegVh9j35iXkhYTjAU9K+gyTwkWuLzIPwM6hnTd/bF6Qd4+APDsC/Xbt/vN7x/
uqtWdsfW0JFvc0Su2HBEGuTOPQTFVC8FHcY=
-----END CERTIFICATE-----