Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/c316eca6-c138-3849-b937-d982bb18660f.roa
File:                     c316eca6-c138-3849-b937-d982bb18660f.roa (raw, json)
Hash identifier:          WSfeWkLshgm80ouve289mDLAI1M4nWa/Sr5eotmZ780=
Subject key identifier:   FA:3F:C6:9B:66:BB:4E:D8:34:E4:11:8B:6B:56:B8:54:56:62:93:D2
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F43285843EDC2F2F253396FFC69639500
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/c316eca6-c138-3849-b937-d982bb18660f.roa
Signing time:             Sat 18 Nov 2023 12:11:35 +0000
ROA not before:           Sat 18 Nov 2023 12:11:35 +0000
ROA not after:            Fri 16 Feb 2024 12:11:35 +0000
asID:                     203888
IP address blocks:        2602:f9df:300::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ed:c2:f2:f2:53:39:6f:fc:69:63:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Nov 18 12:11:35 2023 GMT
            Not After : Feb 16 12:11:35 2024 GMT
        Subject: CN=90f48392-b649-4864-84e6-21ab965a10dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:46:9e:b6:50:2f:ec:a0:6d:d9:b6:ed:fb:
                    c9:f1:60:95:1a:aa:34:e3:7c:53:b6:de:2f:ad:f8:
                    d8:1c:52:0b:cf:91:01:58:13:d7:0b:f8:6d:95:45:
                    2e:77:5c:e7:3b:d3:46:8a:ba:cc:0b:6e:d9:93:6f:
                    2c:f6:86:a5:fc:9a:40:cd:0c:73:e6:93:98:ec:ba:
                    64:cf:96:ab:21:43:8f:eb:5e:be:86:3c:16:f1:1d:
                    32:20:00:8a:53:b5:09:bb:6b:53:b7:6d:fa:7e:2e:
                    e3:3b:4d:f8:64:51:4d:b3:42:92:62:c2:ed:46:2f:
                    60:bd:e1:18:13:ba:47:41:8f:d2:ec:e1:3b:12:74:
                    d6:45:da:db:c4:8f:8a:37:c7:5c:c1:5c:c7:e4:d5:
                    1e:2e:a5:5d:58:82:53:07:c4:bc:75:45:8c:c4:07:
                    3d:e7:32:eb:9b:08:3b:f2:20:b4:f5:65:ce:e4:16:
                    c6:4d:6c:11:2c:36:f4:00:26:93:ff:0e:18:f3:db:
                    20:08:b7:44:85:c6:ce:23:60:30:0f:cf:9b:7b:a4:
                    c5:99:db:d2:a3:e6:d8:ca:aa:fb:d0:8c:26:db:6d:
                    37:f0:0a:4a:07:db:6d:5e:da:7a:c2:f2:e9:1f:2d:
                    d8:4b:b8:03:e7:19:d6:c5:0a:ea:c6:3e:a6:5b:aa:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3F:C6:9B:66:BB:4E:D8:34:E4:11:8B:6B:56:B8:54:56:62:93:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/c316eca6-c138-3849-b937-d982bb18660f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9df:300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:ca:9e:4c:a0:69:52:a3:49:93:f6:ae:17:d2:1d:80:b1:87:
         8a:9b:1b:06:4b:4c:bd:d6:2c:fc:74:16:94:9b:7e:d1:90:f4:
         3f:34:65:2c:63:6a:3a:2b:bc:a5:93:ae:d9:7f:b6:a4:b2:ad:
         45:a5:2f:35:b3:b4:67:f9:b2:28:8f:c8:43:b1:40:d1:72:9d:
         5a:6c:ca:96:1a:e6:e3:21:c1:8a:ea:b2:73:72:1d:64:8e:c3:
         c2:ed:ca:15:04:02:5c:ca:3e:ac:1b:a3:8e:b1:a0:60:26:ad:
         23:7d:9b:a0:b1:9f:a1:f5:f5:8f:eb:d7:86:c8:d2:92:67:87:
         6e:15:8c:d1:10:9d:c7:c3:8b:f5:90:b6:97:27:47:2f:db:38:
         09:29:d2:b6:0f:f8:db:1c:ec:47:e0:5d:96:4c:ce:9c:41:e2:
         fc:d9:51:da:1a:f3:6f:56:84:86:95:42:35:61:35:c5:18:72:
         e1:ad:f0:ba:b7:a5:a7:c8:29:c6:29:a3:4e:e6:50:cd:b1:45:
         85:f3:3f:0a:0a:64:69:e4:5a:75:b6:d9:cf:71:74:68:55:40:
         d1:57:9f:47:81:37:47:9c:a3:34:cd:ca:63:4e:fe:08:c3:09:
         b1:31:28:21:41:a0:b4:67:9f:86:24:31:ec:11:3d:fb:94:10:
         26:6b:61:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----