Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d3084078-18b9-32e9-9c40-72622fb6758b.roa
File:                     d3084078-18b9-32e9-9c40-72622fb6758b.roa (raw, json)
Hash identifier:          6K+fTDSIgci6zLV2RMeBBWkS9DOlej/+QQC5OPhAdyY=
Subject key identifier:   48:89:AA:E7:4E:E0:5B:03:36:FE:69:BD:94:86:87:40:58:B6:BD:48
Certificate issuer:       /CN=d037641d-aa90-4eab-864e-a73e03e24cfa
Certificate serial:       010D0C9F4328584485FE4A67DBDC835396242880
Authority key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d3084078-18b9-32e9-9c40-72622fb6758b.roa
Signing time:             Fri 12 Jan 2024 00:54:01 +0000
ROA not before:           Fri 12 Jan 2024 00:54:01 +0000
ROA not after:            Wed 10 Apr 2024 23:54:01 +0000
asID:                     16509
IP address blocks:        2602:f9eb::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:85:fe:4a:67:db:dc:83:53:96:24:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d037641d-aa90-4eab-864e-a73e03e24cfa
        Validity
            Not Before: Jan 12 00:54:01 2024 GMT
            Not After : Apr 10 23:54:01 2024 GMT
        Subject: CN=2cb270c0-7059-4307-8314-3e71c245440b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:45:c3:8d:b5:8e:12:e8:bc:ff:89:3a:50:14:
                    3f:54:e9:6c:13:85:99:15:aa:03:59:00:af:a0:40:
                    38:26:55:4f:0e:ef:9a:27:67:0e:50:3e:38:af:33:
                    7a:36:22:15:8e:ec:fe:49:8d:22:7a:58:74:7b:e5:
                    33:5d:b6:ec:81:4b:c6:0a:02:1a:0d:23:7d:11:ba:
                    93:49:19:fd:f0:7b:a8:95:d3:ec:12:62:28:4c:b7:
                    5d:dc:47:ff:3b:4b:a5:bd:91:76:d7:db:76:3c:8e:
                    d7:45:0f:53:67:35:82:13:b9:2b:2e:72:c0:27:e9:
                    a5:84:af:9c:76:17:04:a2:ed:3b:80:fe:d3:71:64:
                    92:fe:63:bd:8b:d2:2a:87:31:7c:5f:f8:e3:f6:c6:
                    3d:42:73:67:55:70:e2:99:5b:58:8f:22:56:c5:05:
                    a6:8f:4c:50:64:d8:6f:9c:3f:d1:5b:96:4e:f7:1f:
                    d3:3a:82:89:b6:e3:51:a6:14:3e:dd:46:49:56:aa:
                    7b:09:66:38:e2:f9:41:ad:4f:b6:40:7a:19:e0:1f:
                    6d:cf:00:97:4c:f8:9d:9a:be:69:01:03:d2:56:38:
                    79:3e:44:cd:74:78:b9:ae:55:b5:34:2d:b6:8b:92:
                    d8:07:5e:eb:c3:d8:fd:24:49:9a:e5:85:91:57:f9:
                    91:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:89:AA:E7:4E:E0:5B:03:36:FE:69:BD:94:86:87:40:58:B6:BD:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d3084078-18b9-32e9-9c40-72622fb6758b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl

            X509v3 Authority Key Identifier:
                keyid:B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9eb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:90:a0:5a:37:41:d0:6d:6d:5a:47:39:a3:ac:5b:43:36:50:
         35:ba:ab:bc:26:30:75:1c:7f:37:96:06:6c:09:ab:34:7b:d7:
         fb:f8:10:8a:02:b5:6f:04:4b:fa:a7:4f:bf:a0:54:f9:05:49:
         bb:43:a7:9c:24:74:83:0e:4c:68:0d:26:09:7a:81:84:cc:39:
         e4:a8:c6:10:51:1a:25:cd:71:5f:51:ab:b0:de:23:96:fb:42:
         d7:49:92:1b:8b:6f:15:92:96:1b:c7:ca:df:33:33:f8:02:48:
         99:c1:96:81:26:a0:5a:8e:01:9c:f9:4c:fd:11:ff:8a:bb:85:
         5c:bb:9e:db:b1:1c:a3:96:bb:b4:03:ff:47:84:49:69:f7:66:
         66:af:17:3c:7e:76:9c:f7:84:72:31:1c:3e:38:06:72:da:2c:
         fb:90:df:fc:2d:57:28:7e:37:51:fa:16:a6:06:f8:b1:f1:a6:
         66:f1:60:1d:ed:ee:48:3d:a5:af:95:de:3e:e9:f5:d8:d7:55:
         94:ab:91:bc:36:69:81:a2:ce:74:f5:7a:e0:25:d2:a5:66:9e:
         f0:98:b8:fc:95:14:6b:f6:34:0c:36:f1:8f:ae:b1:9f:e5:8f:
         1f:92:3b:9d:8b:46:74:d4:48:9f:df:07:c2:a8:ac:b5:65:3f:
         8d:ae:92:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----