Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/cbae3c56-9bba-3910-ae3b-35f1cc1daa40.roa
File:                     cbae3c56-9bba-3910-ae3b-35f1cc1daa40.roa (raw, json)
Hash identifier:          nX6ijgOeQXXA0JKI5nPp9ruStx79wZgtrTqaJwuojoE=
Subject key identifier:   9D:2E:F1:E5:D5:BE:76:81:28:29:77:7E:47:80:32:9C:92:CE:D8:50
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F432858447317B308071FD5CA0B8021C0
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/cbae3c56-9bba-3910-ae3b-35f1cc1daa40.roa
Signing time:             Fri 05 Jan 2024 06:24:51 +0000
ROA not before:           Fri 05 Jan 2024 06:24:51 +0000
ROA not after:            Thu 04 Apr 2024 05:24:51 +0000
asID:                     44324
IP address blocks:        2602:f9f6::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:73:17:b3:08:07:1f:d5:ca:0b:80:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Jan  5 06:24:51 2024 GMT
            Not After : Apr  4 05:24:51 2024 GMT
        Subject: CN=31c5b78e-c4d2-49ef-b010-3d2d467ee79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9c:e5:1c:fe:24:86:bd:79:8e:d1:cc:28:b0:
                    50:13:fa:0a:3c:8b:2e:fc:15:ab:94:12:ed:db:88:
                    df:b7:16:91:04:39:6c:44:2f:ee:59:46:b8:ce:86:
                    10:69:61:f1:0e:47:7a:52:a7:db:be:24:02:5b:43:
                    73:ba:00:27:a1:96:0d:0a:49:fd:69:90:bc:44:32:
                    42:d0:fa:a8:f9:5a:90:a6:2e:e1:62:19:19:59:3c:
                    0d:ce:ba:ce:a8:c6:45:52:70:53:6c:94:b2:ab:55:
                    19:d3:fd:98:6a:fd:df:19:5c:81:c1:65:4c:c9:02:
                    5f:cd:a8:3f:56:14:e6:11:9a:68:1f:2a:b8:e9:ba:
                    ca:eb:3d:9d:35:c8:de:5a:44:88:b6:3d:d4:68:fa:
                    42:66:ac:92:7b:e8:1d:e2:d9:39:30:fb:7a:3e:7a:
                    28:a2:33:b0:19:f9:af:50:06:63:89:45:51:3b:dc:
                    ef:58:02:11:dc:13:f8:97:b4:51:80:60:f8:03:bb:
                    d8:38:4b:39:7b:b0:39:5d:1c:ca:ac:fa:66:d7:42:
                    2d:ef:2e:f2:ee:49:5f:fb:5e:72:4a:6a:c5:a1:85:
                    48:a0:35:c8:51:59:7b:00:79:26:1e:75:01:e6:4e:
                    eb:a2:91:58:a4:3e:16:1d:18:34:43:59:e5:3b:f5:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2E:F1:E5:D5:BE:76:81:28:29:77:7E:47:80:32:9C:92:CE:D8:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/cbae3c56-9bba-3910-ae3b-35f1cc1daa40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:0a:4b:dd:b4:f6:46:2b:06:00:10:e7:9c:99:98:51:7b:a4:
         47:ef:99:1d:0e:5b:a1:d8:a2:53:8a:c4:62:5b:75:ca:e4:c8:
         8a:36:de:e8:75:b5:74:dd:e4:95:5f:b9:bd:2c:99:b4:90:2c:
         77:83:67:c9:b0:b6:fd:7d:ca:2e:ac:fa:55:6a:8f:e5:8e:61:
         bb:1c:0c:64:a2:85:74:9a:a3:0b:4b:05:80:b8:dc:56:ea:70:
         9f:43:9a:0b:47:f6:b4:11:be:aa:fb:c7:5c:13:d9:07:5f:9b:
         c8:83:ac:7f:53:36:07:50:2d:fa:74:da:ab:3f:9a:e0:d8:27:
         95:e2:51:70:79:5b:f5:cd:00:3c:c2:71:e2:c8:b8:2f:12:b9:
         6b:6f:52:68:e3:4b:6c:b2:92:ae:cb:7c:4f:04:e9:f2:fe:37:
         53:92:0a:85:b2:1a:2f:c1:36:bc:6c:f0:86:2e:1c:d2:94:44:
         80:2d:cb:bf:5a:b0:f2:0c:1e:3b:d4:78:3f:47:2c:d7:1c:37:
         68:eb:a5:1f:de:27:15:65:b9:0d:95:ee:4d:4d:34:13:80:5b:
         9f:ec:42:e5:63:84:3d:86:f3:f0:f7:b5:d3:ec:3b:94:fc:e2:
         df:c1:ad:a1:eb:05:a8:c7:77:c7:b1:ea:fd:e1:23:d0:0e:31:
         a8:cf:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:37 2024 by rpki-client on console-ams.rpki-client.org