Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/26d57fe0-ebbc-34bc-9fc5-305ca4f4398e.roa
File:                     26d57fe0-ebbc-34bc-9fc5-305ca4f4398e.roa (raw, json)
Hash identifier:          AoI83cMk+5iMiVyLiaD6j7+TPRnFBCUnXd8q2LW45q0=
Subject key identifier:   38:03:2C:3B:C4:CF:89:94:6B:A8:C6:67:DF:A9:75:8E:B4:29:71:37
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F43285843EDC4201EAAB116280C7B3580
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/26d57fe0-ebbc-34bc-9fc5-305ca4f4398e.roa
Signing time:             Sat 18 Nov 2023 12:13:57 +0000
ROA not before:           Sat 18 Nov 2023 12:13:57 +0000
ROA not after:            Fri 16 Feb 2024 12:13:57 +0000
asID:                     201217
IP address blocks:        2602:f9df:200::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ed:c4:20:1e:aa:b1:16:28:0c:7b:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Nov 18 12:13:57 2023 GMT
            Not After : Feb 16 12:13:57 2024 GMT
        Subject: CN=89137a6a-1c42-4e17-aca6-6c94e4676dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ef:c6:93:68:5e:d8:26:1f:d4:17:62:01:cb:
                    fd:e3:f4:0b:bb:d6:53:21:33:12:b2:59:29:39:b5:
                    f8:6f:1d:2d:88:40:d6:10:ba:79:db:1d:37:2e:1a:
                    d2:e7:9c:cf:da:c4:d3:ec:c8:ab:5b:65:7a:ab:d9:
                    13:ed:d3:d3:7d:7c:6c:21:6c:c8:17:d7:d4:ff:37:
                    09:22:27:e3:c1:6d:96:87:66:80:c7:39:3f:c7:4c:
                    e7:21:0f:7f:68:a9:1d:bf:04:19:d9:2d:e9:46:45:
                    4b:72:16:e3:34:7a:b8:f9:5c:ac:56:0a:68:d7:ca:
                    b2:38:56:ff:1b:f4:7c:ed:75:53:92:02:28:45:49:
                    92:16:08:2a:24:b9:74:2b:cd:a0:99:e6:3e:6e:47:
                    07:28:b1:5c:82:6b:b7:57:87:80:61:d7:8f:3d:3d:
                    23:f4:47:9e:df:5c:8f:c0:af:85:f9:13:d6:40:f5:
                    9d:6d:3f:91:08:42:73:01:86:41:a2:77:ee:51:5d:
                    b8:9b:cd:8f:18:a0:5f:2e:8f:2f:2f:7f:90:02:f9:
                    fb:77:7c:00:91:5c:67:4f:84:2a:46:9e:2c:6e:40:
                    3f:bf:8d:c9:eb:4a:1b:71:07:72:9b:38:d6:8a:40:
                    24:58:2f:fb:8e:f6:be:15:6b:f5:41:4c:d3:f2:36:
                    b0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:03:2C:3B:C4:CF:89:94:6B:A8:C6:67:DF:A9:75:8E:B4:29:71:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/26d57fe0-ebbc-34bc-9fc5-305ca4f4398e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9df:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:f5:99:10:cb:63:0c:f2:5e:41:5e:32:35:75:0c:5e:07:a0:
         ab:1e:c6:4c:2f:bd:10:8e:0a:e6:42:3f:fa:78:ec:7d:a8:90:
         4e:74:a8:d0:09:dc:02:c9:49:2d:5b:07:70:59:a2:0b:85:5e:
         aa:54:30:ed:74:1f:d9:bb:73:1b:40:48:64:2e:15:df:de:f1:
         bd:46:72:06:06:fb:03:47:02:44:b0:d8:2f:08:1b:9d:a0:79:
         c6:01:f5:17:61:c9:50:11:13:34:97:19:26:be:6c:e2:47:f3:
         16:d4:47:f4:34:73:44:19:86:ad:d6:73:b7:31:53:da:18:a9:
         d3:07:93:06:b6:1c:8c:27:31:1b:b7:bc:2f:d4:0e:e3:2d:3f:
         8c:67:c1:60:0b:06:95:e9:23:29:76:1e:bc:bf:92:6f:5e:ea:
         a5:5c:f7:4a:f8:bf:fe:20:ec:0b:e7:cb:3f:35:c5:f6:b7:fe:
         f1:d9:94:fd:9a:0a:32:a0:8e:cf:7e:3e:7a:75:5d:c2:87:36:
         41:38:e6:8e:1c:04:35:dd:0b:98:34:23:ae:0f:81:ae:64:e6:
         74:c0:30:66:49:89:67:2b:1e:55:ab:52:13:99:ac:f3:08:f5:
         98:e7:5b:99:f0:fc:3b:45:06:cd:e8:fc:82:3c:b3:c0:55:bf:
         11:07:e3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----