Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/4e858d42-6c31-30f6-8679-fd93186723d7.roa
File:                     4e858d42-6c31-30f6-8679-fd93186723d7.roa (raw, json)
Hash identifier:          sfVBnRUW97E+j48wEW791bvtpAa2/f94peVCM01ShmE=
Subject key identifier:   B7:2D:F6:DF:2A:CC:D3:F5:0E:14:5A:86:43:04:A4:D8:6F:6B:8B:E4
Certificate issuer:       /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
Certificate serial:       010D0C9F4328584441A09455ECCCB297F3862B00
Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/4e858d42-6c31-30f6-8679-fd93186723d7.roa
Signing time:             Mon 18 Dec 2023 13:10:14 +0000
ROA not before:           Mon 18 Dec 2023 13:10:14 +0000
ROA not after:            Sun 17 Mar 2024 12:10:14 +0000
asID:                     44876
IP address blocks:        2602:f9bd::/36 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:41:a0:94:55:ec:cc:b2:97:f3:86:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
        Validity
            Not Before: Dec 18 13:10:14 2023 GMT
            Not After : Mar 17 12:10:14 2024 GMT
        Subject: CN=1ba445f1-33fa-45f6-904d-01545428d18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1b:5a:67:e0:3a:47:73:71:b7:7d:c2:40:c2:
                    4f:19:63:cf:7c:2b:8a:cb:eb:ca:4e:fb:77:d3:91:
                    78:4f:d6:e8:48:f2:60:16:5a:fd:b3:05:0b:e5:58:
                    a8:f0:33:a4:0c:46:4d:b1:83:0a:1a:34:24:b2:36:
                    57:29:ce:34:a5:e1:aa:1d:a9:f3:f4:c1:91:a7:ce:
                    71:07:5f:5b:6d:8f:7b:d5:7b:bf:21:ad:79:0f:b5:
                    a1:78:ab:c6:6b:7d:62:ca:e6:fe:0a:80:e9:7f:30:
                    2f:3b:65:8f:b8:12:3c:36:f3:ca:39:29:57:ea:2b:
                    64:76:9c:b3:32:55:1b:52:b9:47:30:6e:13:c6:26:
                    44:d5:ab:52:22:df:81:a8:4d:6a:8e:b0:18:e6:66:
                    de:dd:f2:2d:df:2b:9e:d5:3f:7d:3d:b1:f7:7c:98:
                    90:a2:54:3a:70:01:2e:3c:9a:1a:8d:f1:81:bd:c6:
                    bf:00:0e:2f:90:74:8c:92:3a:01:0e:59:29:99:51:
                    ba:6a:79:ea:15:74:b1:cf:f0:31:f4:be:aa:24:6c:
                    61:f6:ce:be:56:3b:b4:10:06:a5:c1:fe:fc:48:cf:
                    d9:92:e7:82:57:3e:e8:86:37:b4:0e:55:b3:d5:b4:
                    77:d7:5c:8c:12:da:4c:cc:a4:ee:b7:52:5b:56:83:
                    60:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2D:F6:DF:2A:CC:D3:F5:0E:14:5A:86:43:04:A4:D8:6F:6B:8B:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/4e858d42-6c31-30f6-8679-fd93186723d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl

            X509v3 Authority Key Identifier:
                keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9bd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a3:fe:43:e2:40:5e:d0:47:ac:4c:dc:cb:3e:e0:b3:cd:eb:
         0a:93:05:ce:2f:11:c3:c5:1a:9e:1c:b0:81:62:06:53:73:d6:
         51:06:41:9f:1e:5c:5f:ac:33:87:1a:36:3c:d9:61:20:7d:b7:
         9d:31:71:98:9e:4e:e4:7b:3b:dd:f9:68:88:06:d3:c7:81:17:
         3e:ea:53:d3:57:72:e9:84:ef:11:f3:a2:cc:fd:42:4e:e6:5b:
         7a:b7:cd:e8:5a:7b:0e:81:88:8a:0f:75:3a:5b:9c:5f:60:d0:
         fd:d0:bb:fb:4f:6c:99:c1:35:20:4c:2a:e9:f6:52:d3:63:28:
         69:76:4c:95:d3:26:4a:40:34:d3:5b:05:f4:be:43:6e:d9:5f:
         32:92:8d:a6:ec:dd:8d:92:86:39:15:c2:f5:b2:c1:a0:b9:24:
         d0:e4:5f:10:28:14:ca:72:fb:c0:f9:da:f5:06:6d:b4:5f:dc:
         89:62:5a:bf:4e:2d:2d:aa:f5:08:ab:62:c8:9d:bc:1c:d7:3d:
         2d:34:0a:43:8b:89:61:ba:8d:d3:18:5d:1f:d4:88:b0:0b:54:
         71:89:23:e8:1b:17:be:0d:4a:7b:6a:79:86:75:c2:91:88:95:
         a8:68:a7:fb:94:c8:9f:67:c5:af:47:9a:22:52:15:20:f1:db:
         0c:20:68:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----