Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/2e1e1f64-7e42-3f44-b20b-b011418257a4.roa
File:                     2e1e1f64-7e42-3f44-b20b-b011418257a4.roa (raw, json)
Hash identifier:          QvRWDIkq03qjHwlVQFu1gVPOVtVKb8fA4PPUeDUNjDA=
Subject key identifier:   DF:44:DD:DB:B0:80:A7:73:E8:62:47:C0:55:B6:DD:1E:23:70:7F:E7
Certificate issuer:       /CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
Certificate serial:       010D0C9F43285844826C4D701C5D6D114A14E080
Authority key identifier: 97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/2e1e1f64-7e42-3f44-b20b-b011418257a4.roa
Signing time:             Wed 10 Jan 2024 18:12:26 +0000
ROA not before:           Wed 10 Jan 2024 18:12:26 +0000
ROA not after:            Tue 09 Apr 2024 17:12:26 +0000
asID:                     44658
IP address blocks:        2602:f9a6::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:82:6c:4d:70:1c:5d:6d:11:4a:14:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6918a60b-2f16-4db9-8d47-dddfafb5fdab
        Validity
            Not Before: Jan 10 18:12:26 2024 GMT
            Not After : Apr  9 17:12:26 2024 GMT
        Subject: CN=4a6705a4-1ec4-4a13-95a2-b61d638ba6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:10:bd:c9:a9:90:87:a0:85:13:58:30:ed:
                    07:67:6f:b5:95:f8:fc:80:21:2f:56:3e:4d:d0:5f:
                    dc:ad:5e:39:e9:43:b2:5e:7c:5f:b7:86:b4:8d:df:
                    03:0e:c4:39:7d:ea:61:89:80:a0:28:92:dd:27:19:
                    04:95:81:49:c2:cd:6b:c6:2e:a0:ab:bb:83:0d:92:
                    64:b9:e8:29:eb:a3:d8:b9:d2:da:87:e5:4b:0e:0b:
                    36:da:b5:55:a7:eb:b3:ce:9a:64:50:c8:f9:46:58:
                    fc:7f:cf:85:8f:cf:bf:ac:dc:ae:94:37:79:5a:7b:
                    00:1d:56:52:89:f6:2a:f4:72:a8:6c:e9:0f:d6:11:
                    44:6b:6d:bc:4e:30:30:cb:c6:4a:76:32:a8:67:aa:
                    72:0d:a9:d0:88:e2:eb:84:cc:eb:ad:bb:e3:69:da:
                    f7:fe:30:54:78:77:be:1c:4c:68:24:ca:21:46:32:
                    ff:2b:ae:e5:f7:58:41:ad:bb:a4:8d:67:c4:84:98:
                    fa:53:1b:7f:05:c9:0d:68:b7:bf:fb:58:41:1a:ae:
                    59:76:3e:b5:40:19:b9:81:53:93:dd:7d:3d:11:dc:
                    a9:33:4d:a5:06:ac:ba:48:1c:7f:7f:3e:81:4c:66:
                    1e:05:c9:f4:81:18:65:7a:b3:99:02:56:53:ab:3c:
                    80:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:44:DD:DB:B0:80:A7:73:E8:62:47:C0:55:B6:DD:1E:23:70:7F:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/2e1e1f64-7e42-3f44-b20b-b011418257a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab/6918a60b-2f16-4db9-8d47-dddfafb5fdab.crl

            X509v3 Authority Key Identifier:
                keyid:97:C3:50:AE:C1:5A:94:36:96:C8:F6:F8:1B:79:01:9D:42:E2:4D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6918a60b-2f16-4db9-8d47-dddfafb5fdab.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9a6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:09:e2:8b:8d:ba:b8:f4:f9:d2:95:bc:66:2f:cf:7e:90:a4:
         89:6c:fe:e1:7b:76:4b:48:ec:eb:7a:5b:f6:4d:8f:26:f1:d8:
         13:c7:38:6d:0f:b1:03:5c:e2:c0:07:44:9d:47:80:69:85:b0:
         7c:b7:a6:e5:7e:a0:d0:a7:4c:a1:23:3d:d5:cd:ea:a4:99:17:
         ca:f8:ec:ec:80:41:9b:6f:9e:9a:57:59:24:a6:f6:03:d2:20:
         b4:4f:c1:d7:fa:b5:ca:02:77:38:01:c7:cb:33:9c:9b:2c:ac:
         f5:9f:9d:0c:da:f2:ea:7e:56:8b:bf:0f:65:37:3c:d5:44:fc:
         69:82:76:53:fb:c6:a0:96:7a:ab:94:d9:31:6f:e2:f1:05:9f:
         18:60:6d:ef:78:d0:2e:ab:4c:41:f4:00:38:6f:a3:53:2d:19:
         82:67:2e:f1:d0:6f:4e:13:59:df:85:f2:f1:6b:63:e6:81:9d:
         0e:3c:3a:41:7c:63:a6:0c:ad:0f:9a:49:8c:51:06:f4:3d:54:
         75:89:a2:c2:34:ce:93:b6:bc:e5:f8:d1:19:0c:c8:6e:b3:20:
         c3:e7:9f:61:a8:56:d7:e0:c2:6b:83:b5:55:25:15:8c:d6:1d:
         d3:4b:5a:05:92:fe:69:f1:22:69:23:2c:35:ea:21:2a:3c:16:
         b5:93:7e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org