Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/db942636-f9fb-36aa-bb26-d308f32b5cc0.roa
File:                     db942636-f9fb-36aa-bb26-d308f32b5cc0.roa (raw, json)
Hash identifier:          cuK4en0dt5utzqnd+2pDJt8eGbgj373GUkqZf9VZrsw=
Subject key identifier:   D0:2B:3B:5F:27:FB:42:D9:8A:3F:42:6D:A9:0F:BD:AA:57:FC:E6:FD
Certificate issuer:       /CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
Certificate serial:       010D0C9F43285841E46CAAE75740EDAB49163920
Authority key identifier: 17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/db942636-f9fb-36aa-bb26-d308f32b5cc0.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Fri 02 Jun 2023 06:09:27 +0000
asID:                     53978
IP address blocks:        2602:807:6000::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6c:aa:e7:57:40:ed:ab:49:16:39:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ac516fb-e4df-49c1-82bc-fed2399d21c2
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun  2 06:09:27 2023 GMT
        Subject: CN=eac0f9ed-83d8-457c-87d2-6cb92dfeaabe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:bf:b7:37:87:43:5e:1b:cf:7b:31:4f:c0:
                    d1:60:65:b6:a4:88:1f:93:e5:bc:d3:42:0c:12:d2:
                    7b:fd:49:f4:b1:5e:7e:ed:98:b1:42:cc:bb:68:4d:
                    bc:89:b5:26:c6:20:b6:8c:3e:12:bc:50:02:f8:fa:
                    50:d7:7b:f5:e1:82:6a:6e:e8:66:c7:aa:4c:2f:c6:
                    63:41:4b:56:9c:8a:18:69:72:20:8f:3d:6e:df:67:
                    d7:3b:ce:73:9d:b6:d0:a3:d7:33:4a:78:a7:c0:14:
                    22:89:c2:04:b5:fb:be:c4:14:df:23:2e:de:c1:66:
                    64:79:5a:09:f0:a6:cf:e8:79:1d:4d:f0:0a:d5:6c:
                    c4:e5:e9:42:ca:14:46:25:8c:ed:fa:15:96:c1:69:
                    83:66:ef:8b:31:ae:61:bf:6f:bb:95:f9:63:eb:a1:
                    c2:35:5f:d0:74:34:68:b1:c4:c6:5e:9d:29:ed:f8:
                    ca:0a:3e:7b:ee:67:2c:b1:eb:c6:c0:c7:a0:43:e1:
                    bb:53:32:16:cb:3a:b1:39:29:6c:cf:bb:cd:ae:e0:
                    b2:5b:1a:3c:90:d5:37:a1:b7:5e:ee:d6:1c:35:fc:
                    94:e9:e1:ec:bd:b9:85:e8:74:e3:cc:74:99:b2:61:
                    8a:60:85:26:bf:ab:0e:fa:da:38:77:cc:06:33:ff:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2B:3B:5F:27:FB:42:D9:8A:3F:42:6D:A9:0F:BD:AA:57:FC:E6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/db942636-f9fb-36aa-bb26-d308f32b5cc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2/6ac516fb-e4df-49c1-82bc-fed2399d21c2.crl

            X509v3 Authority Key Identifier:
                keyid:17:89:41:4A:81:2C:AF:72:C7:E2:27:3F:C0:5C:CC:33:C2:91:67:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ac516fb-e4df-49c1-82bc-fed2399d21c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:807:6000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:62:46:6c:1f:c5:5d:f4:62:1a:90:b1:07:58:5b:89:e6:34:
         51:e4:7f:44:17:ef:9c:4c:13:fa:d4:64:6c:0f:d3:aa:a4:34:
         98:6a:fd:db:c3:d8:f1:dc:07:0f:a6:f3:83:9a:36:c5:9a:91:
         d8:df:8e:0f:80:5c:ab:ff:54:c8:c6:7a:f7:c1:25:2d:d3:29:
         45:22:2d:54:44:67:3c:bb:1a:20:65:6b:9b:e7:2e:6e:f2:85:
         f4:ae:62:e3:f5:36:18:58:5c:19:91:76:ef:fb:ec:40:83:18:
         a2:66:1b:ae:07:ac:81:2f:8f:09:43:96:b4:6e:b5:c4:5f:8f:
         5c:5c:3e:f4:1b:8b:49:34:f1:b0:03:85:c0:0a:88:4c:11:02:
         8c:27:44:9d:c1:6b:0d:ac:c1:48:44:c4:50:aa:61:54:91:ab:
         f5:2e:ef:3a:67:4b:d0:cb:6a:a8:79:f9:21:21:e9:e0:90:e0:
         a3:b3:ab:24:a7:ef:8c:b7:db:ed:bb:7f:e6:4b:a9:83:99:33:
         b9:4c:43:5d:fe:40:79:3f:b8:9e:3f:6b:14:e1:58:66:28:2a:
         60:7c:4f:34:bc:98:e3:b1:f9:67:fc:94:f0:55:9e:91:30:23:
         11:2c:ae:e8:74:d1:43:a3:26:5b:41:cf:34:2d:7c:19:51:c1:
         d2:04:48:a8
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEHkbKrnV0Dtq0kWOSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmFjNTE2ZmItZTRkZi00OWMxLTgyYmMtZmVkMjM5OWQy
MWMyMB4XDTIzMDUxNTE4MjEwMVoXDTIzMDYwMjA2MDkyN1owLzEtMCsGA1UEAxMk
ZWFjMGY5ZWQtODNkOC00NTdjLTg3ZDItNmNiOTJkZmVhYWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdO/tzeHQ14bz3sxT8DRYGW2pIgfk+W800IM
EtJ7/Un0sV5+7ZixQsy7aE28ibUmxiC2jD4SvFAC+PpQ13v14YJqbuhmx6pML8Zj
QUtWnIoYaXIgjz1u32fXO85znbbQo9czSninwBQiicIEtfu+xBTfIy7ewWZkeVoJ
8KbP6HkdTfAK1WzE5elCyhRGJYzt+hWWwWmDZu+LMa5hv2+7lflj66HCNV/QdDRo
scTGXp0p7fjKCj577mcssevGwMegQ+G7UzIWyzqxOSlsz7vNruCyWxo8kNU3obde
7tYcNfyU6eHsvbmF6HTjzHSZsmGKYIUmv6sO+to4d8wGM//55wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNArO18n+0LZij9CbakPvapX/Ob9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82YWM1
MTZmYi1lNGRmLTQ5YzEtODJiYy1mZWQyMzk5ZDIxYzIvZGI5NDI2MzYtZjlmYi0z
NmFhLWJiMjYtZDMwOGYzMmI1Y2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmFjNTE2ZmItZTRkZi00OWMxLTgy
YmMtZmVkMjM5OWQyMWMyLzZhYzUxNmZiLWU0ZGYtNDljMS04MmJjLWZlZDIzOTlk
MjFjMi5jcmwwHwYDVR0jBBgwFoAUF4lBSoEsr3LH4ic/wFzMM8KRZyswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82YWM1MTZmYi1lNGRmLTQ5YzEtODJiYy1mZWQy
Mzk5ZDIxYzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgIIB2Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUGJGbB/FXfRiGpCxB1hbieY0UeR/RBfvnEwT+tRkbA/TqqQ0mGr9
28PY8dwHD6bzg5o2xZqR2N+OD4Bcq/9UyMZ698ElLdMpRSItVERnPLsaIGVrm+cu
bvKF9K5i4/U2GFhcGZF27/vsQIMYomYbrgesgS+PCUOWtG61xF+PXFw+9BuLSTTx
sAOFwAqITBECjCdEncFrDazBSETEUKphVJGr9S7vOmdL0MtqqHn5ISHp4JDgo7Or
JKfvjLfb7bt/5kupg5kzuUxDXf5AeT+4nj9rFOFYZigqYHxPNLyY47H5Z/yU8FWe
kTAjESyu6HTRQ6MmW0HPNC18GVHB0gRIqA==
-----END CERTIFICATE-----