Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/18225652-75a1-3768-ab8f-205344ddb07a.roa
File:                     18225652-75a1-3768-ab8f-205344ddb07a.roa (raw, json)
Hash identifier:          rUH3fh9M4b1rfzF2G65fUi4QQnrLNw2f44SquMzbegU=
Subject key identifier:   9B:61:07:F9:33:1C:1E:EE:56:04:1B:72:69:C2:F3:BB:F5:11:2F:5F
Certificate issuer:       /CN=b32217e1-2473-49a5-919e-08e1896c5019
Certificate serial:       010D0C9F432858443A480114D5881F3545D21500
Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/18225652-75a1-3768-ab8f-205344ddb07a.roa
Signing time:             Fri 15 Dec 2023 22:01:06 +0000
ROA not before:           Fri 15 Dec 2023 22:01:06 +0000
ROA not after:            Thu 14 Mar 2024 21:01:06 +0000
asID:                     22191
IP address blocks:        2604:1dc0:6::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:3a:48:01:14:d5:88:1f:35:45:d2:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019
        Validity
            Not Before: Dec 15 22:01:06 2023 GMT
            Not After : Mar 14 21:01:06 2024 GMT
        Subject: CN=426685bb-f5ca-46f3-9522-46f856a2c749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a9:a1:66:f6:8c:5d:2b:2f:0d:86:b1:78:75:
                    ec:eb:b1:44:18:ff:6e:d9:e2:ce:65:03:2e:13:56:
                    3c:70:56:41:4b:4b:8c:b5:3a:50:f2:53:f2:9e:a1:
                    16:cb:4e:15:93:b1:eb:ea:38:27:ab:f2:85:24:6a:
                    db:cd:16:72:22:48:5f:99:00:de:26:7b:43:40:7b:
                    40:54:3f:e3:a9:86:42:71:f5:1c:31:a8:c5:52:ae:
                    03:62:be:75:aa:db:72:77:f5:1c:15:14:98:ad:22:
                    d6:73:d5:73:dc:82:cc:35:33:8b:f5:58:e1:4d:be:
                    d1:ff:dd:35:56:67:ed:b6:1d:a5:ad:44:fa:6b:69:
                    32:39:e7:e4:c8:18:02:80:5f:ec:7e:c3:9e:1a:32:
                    eb:bf:79:8c:dd:99:69:34:50:7e:66:d6:02:56:71:
                    97:20:17:87:33:90:ec:be:83:7c:c3:c3:aa:df:5c:
                    55:62:f9:2e:83:c1:30:1f:d8:c8:39:25:ab:ad:2a:
                    f3:e2:e4:b8:b0:24:46:99:e6:1f:7e:53:c7:68:43:
                    3e:ab:b4:21:ac:d8:51:f8:4e:60:25:68:2c:c5:1c:
                    66:96:16:f1:46:52:70:b6:72:e7:f1:bf:b3:fb:42:
                    e3:f0:62:ed:83:df:75:a7:56:dd:94:d5:29:e6:1a:
                    99:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:61:07:F9:33:1C:1E:EE:56:04:1B:72:69:C2:F3:BB:F5:11:2F:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/18225652-75a1-3768-ab8f-205344ddb07a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl

            X509v3 Authority Key Identifier:
                keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:1dc0:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:bf:65:a3:66:a5:38:24:35:4a:af:a2:e0:94:34:11:26:3d:
         b9:b1:15:b8:1c:34:6a:ec:25:85:15:20:aa:e4:1c:d1:c6:6d:
         1f:09:6f:b6:a9:a4:32:22:80:da:bc:d9:2a:b4:de:fa:89:7c:
         5c:db:9a:04:ff:94:5a:a2:1c:50:8b:8e:e7:b7:34:df:b3:7c:
         ff:c7:dd:3a:e4:b9:d5:a7:ab:af:24:62:e6:c4:55:b2:ec:dd:
         3a:a3:f9:8d:ce:6b:51:6f:fc:5f:4b:b8:05:0e:1e:ae:91:89:
         7e:35:49:c9:fe:81:49:94:da:8a:a8:b9:3d:27:76:99:24:d2:
         ee:c6:21:3a:49:16:b3:7d:a8:b3:82:47:67:ca:6f:9e:97:b3:
         49:07:e7:e9:1e:fa:6c:68:d4:86:c4:ed:81:5d:bc:a0:18:50:
         75:f2:99:fe:0d:4b:3b:5f:7a:c5:d6:ee:67:54:1b:c6:36:ba:
         53:f1:31:33:f3:3f:a3:3a:22:80:0e:56:81:92:3a:7d:4e:7e:
         f8:43:22:3c:da:1e:ca:26:d1:b1:79:a9:99:d2:78:47:29:8b:
         ec:9a:c0:e8:8c:a2:e6:2f:f5:f9:45:63:67:82:bd:0a:a1:76:
         79:fa:05:f1:fe:6c:dc:67:f7:af:be:c1:2b:aa:ae:60:4b:1f:
         32:b5:5d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----