Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/edb017e8-7293-3ca5-829a-da0b5db44705.roa
File:                     edb017e8-7293-3ca5-829a-da0b5db44705.roa (raw, json)
Hash identifier:          0YTuKzck1R1YGxtzwAbWZatsAtzJ3aUDmVXxzZK8gyM=
Subject key identifier:   AE:3A:C9:1F:15:B1:00:33:02:09:2F:9E:AD:97:D0:17:67:D8:FD:75
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F43285843FDEDE0AC25C9546CB13E0080
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/edb017e8-7293-3ca5-829a-da0b5db44705.roa
Signing time:             Fri 24 Nov 2023 07:11:00 +0000
ROA not before:           Fri 24 Nov 2023 07:11:00 +0000
ROA not after:            Thu 22 Feb 2024 07:11:00 +0000
asID:                     200954
IP address blocks:        2602:f9df:600::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fd:ed:e0:ac:25:c9:54:6c:b1:3e:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Nov 24 07:11:00 2023 GMT
            Not After : Feb 22 07:11:00 2024 GMT
        Subject: CN=0faaf5cd-af3b-445b-906d-0819583aa282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:70:7e:6f:24:64:68:1a:c2:7f:03:7a:32:56:
                    9e:be:2a:58:5d:58:ae:97:60:d2:60:64:67:66:5b:
                    aa:63:10:f9:b4:0a:a9:3e:29:31:8c:ff:0f:2e:b0:
                    e0:4b:8a:cf:66:46:5e:35:ec:27:8d:de:b7:aa:69:
                    28:0b:cc:66:8d:60:a8:12:79:89:bb:f5:75:f1:91:
                    29:8e:56:4e:e6:77:30:fb:76:31:ea:54:08:2d:2d:
                    46:59:a9:3b:91:2a:28:6b:d5:82:24:1f:c5:25:a4:
                    6b:f4:ae:b0:67:4d:6a:0f:2f:80:a8:a2:09:37:c3:
                    7b:12:a8:87:31:0e:62:ea:6f:67:2b:8b:5a:27:d7:
                    b7:8d:93:a0:ff:72:bd:0a:fe:f6:c8:9e:80:9f:e9:
                    49:d8:88:27:97:42:d0:88:40:0b:4b:94:82:4b:16:
                    d5:e8:9e:56:4f:89:e8:f5:f1:24:36:73:73:0f:75:
                    bc:ec:df:b8:bb:d0:85:a5:51:a9:ea:4b:f0:6b:a1:
                    f3:62:b9:53:f5:aa:91:18:03:c9:34:7f:19:f5:f3:
                    95:82:8d:37:8c:d5:3c:52:9f:3e:eb:a7:4b:be:cd:
                    56:19:76:98:dd:a0:59:bd:a5:bb:b6:ec:bc:1f:1c:
                    c8:42:bf:ba:f4:fa:d5:4a:9a:1d:cb:fe:87:69:23:
                    94:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3A:C9:1F:15:B1:00:33:02:09:2F:9E:AD:97:D0:17:67:D8:FD:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/edb017e8-7293-3ca5-829a-da0b5db44705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9df:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c2:03:0c:eb:28:13:1c:41:1c:85:3c:56:1d:c4:9c:bd:81:
         40:1e:49:1e:e7:4d:75:e8:42:ae:44:8e:4c:fc:47:05:0c:56:
         79:3f:28:4d:b2:00:c6:5a:df:ad:fe:75:51:39:fe:ba:32:d6:
         3d:da:cd:3d:8a:30:d6:c9:1e:8d:7e:be:26:7c:90:a9:de:c1:
         e9:06:4d:40:46:82:5a:d8:ce:54:cf:52:fa:22:59:4a:83:c0:
         65:4e:de:b2:6f:92:db:32:21:f0:1d:ed:4e:6b:0b:a8:ae:64:
         62:b3:7f:f7:43:c1:64:05:23:da:47:3d:11:be:8e:be:90:60:
         7b:6f:3f:f3:2f:80:66:24:29:df:03:f0:47:8d:c8:67:81:40:
         85:cd:74:b6:26:88:b7:95:f3:cc:f8:0e:35:38:8d:87:48:11:
         d0:c8:0e:68:77:35:d8:b8:1a:30:97:4e:95:22:ae:ca:69:17:
         22:71:97:48:97:2d:b1:c1:b6:1d:3a:9a:53:dc:dd:11:42:2f:
         8f:11:db:16:42:2c:e7:b8:4f:7a:c7:c2:25:e3:dd:e9:09:27:
         08:ef:72:43:85:9e:96:e9:1d:ec:c0:6a:41:b4:b0:dc:33:9f:
         33:32:f8:7c:23:9e:97:cb:d4:96:64:f1:94:1c:e9:55:63:d6:
         57:fd:06:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----