Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/6fa62dc8-14a0-32d7-97b2-f39614b6d27e.roa
File:                     6fa62dc8-14a0-32d7-97b2-f39614b6d27e.roa (raw, json)
Hash identifier:          tzuodPZRNZgizhDncS+W8oJp8VJ/U9XKJx/OTf8Wm6U=
Subject key identifier:   8A:71:91:F4:84:E9:6A:26:05:B6:69:9B:B4:4A:97:B0:DE:68:88:29
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F432858443C935AFD9110FC338D572B00
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/6fa62dc8-14a0-32d7-97b2-f39614b6d27e.roa
Signing time:             Sat 16 Dec 2023 17:44:32 +0000
ROA not before:           Sat 16 Dec 2023 17:44:32 +0000
ROA not after:            Fri 15 Mar 2024 16:44:32 +0000
asID:                     14618
IP address blocks:        2602:f9ec:fda::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:3c:93:5a:fd:91:10:fc:33:8d:57:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Dec 16 17:44:32 2023 GMT
            Not After : Mar 15 16:44:32 2024 GMT
        Subject: CN=23e9765b-c90c-4352-8686-3dd76f713a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5e:1e:b0:bf:3b:8a:9f:c4:c3:c5:9a:b0:4d:
                    60:7c:c3:55:60:be:02:f9:d8:65:d6:43:88:04:d9:
                    e8:90:7a:0f:ff:6f:43:ec:72:51:75:77:54:4b:45:
                    47:b4:a8:ad:93:50:12:b9:28:f1:59:ae:c5:81:c9:
                    16:b2:c5:f6:b0:81:d7:c0:bf:79:25:7c:a0:9d:f1:
                    8a:6a:7f:c4:04:8a:1e:b6:e6:e2:59:a6:44:6c:f0:
                    1b:e3:f8:ae:2a:3c:31:a7:71:13:6a:e9:d5:20:70:
                    11:23:64:6a:48:31:8d:1e:14:52:b6:f4:da:9e:4d:
                    b5:f2:41:78:d1:2b:5b:a7:89:b3:b0:43:be:c0:03:
                    7f:ba:fb:98:3c:af:25:67:52:24:c8:ff:6f:e5:63:
                    98:74:ea:0b:f9:83:57:3f:e7:04:c4:42:89:bb:a3:
                    a9:9a:dc:c0:ae:8a:dd:1c:64:8e:34:ef:83:0c:33:
                    05:8a:2b:77:3c:8f:90:29:da:00:4f:4b:17:5c:52:
                    c2:16:20:bb:7b:cd:79:ec:4c:c9:d0:9c:8f:70:62:
                    b9:52:29:0f:c2:39:b6:52:a4:d6:0c:7b:04:8a:02:
                    41:3b:17:4a:f3:66:f2:f6:52:0a:b6:13:eb:ad:94:
                    ec:6f:20:90:be:14:ad:3c:46:27:03:90:bf:44:5d:
                    e7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:71:91:F4:84:E9:6A:26:05:B6:69:9B:B4:4A:97:B0:DE:68:88:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/6fa62dc8-14a0-32d7-97b2-f39614b6d27e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ec:fda::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c6:23:a0:d7:de:0e:f7:a4:b4:8c:71:63:5f:95:00:30:5a:
         8b:66:35:2b:6e:55:11:0f:26:cd:dc:b6:a2:e2:ec:9f:a4:e0:
         da:ec:e1:d8:1f:9e:bd:bd:18:f6:d2:3f:b0:61:06:b4:64:8f:
         a7:5d:2a:f6:62:0b:cc:a8:fc:dd:dc:cc:28:e2:ab:ff:56:09:
         02:1b:61:8f:56:c6:bc:c2:45:73:44:ef:c6:ec:fd:eb:85:a7:
         15:ef:42:e6:f3:38:61:f3:4f:7e:87:1c:41:81:e5:dc:93:7d:
         43:d5:ca:40:25:c6:e7:15:fc:bd:cb:54:fd:1b:46:96:0b:b2:
         a5:02:fd:ed:58:3e:03:b7:73:be:48:43:37:8a:fd:85:ad:b6:
         3d:60:f7:34:a7:9a:4d:00:48:e3:83:08:77:06:aa:d5:7f:c4:
         a5:22:62:02:ec:34:ae:e7:b0:32:37:08:c9:70:67:11:ba:6d:
         10:30:83:88:a3:28:7d:11:35:be:6a:50:3d:94:d1:7d:f2:cf:
         13:1e:05:c1:5d:c4:d4:c3:d9:7b:9e:97:b4:43:bc:3f:3c:85:
         c7:2b:f6:8f:1c:91:93:b1:5a:2d:6a:6e:a8:c8:55:4b:bd:75:
         fa:69:5e:54:d0:91:96:db:0a:b0:38:3f:59:1d:28:2e:f8:e5:
         ca:41:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:10 2024 by rpki-client on console-fra.rpki-client.org