Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/171065bb-8af2-3a3b-ab0c-8bf1c1b7bafd.roa
File:                     171065bb-8af2-3a3b-ab0c-8bf1c1b7bafd.roa (raw, json)
Hash identifier:          JU6Qqr+f27nJwklaiBxvVq5fkgq8oFVQTYC2IdkjFXU=
Subject key identifier:   96:67:89:A5:99:69:39:DF:E8:AE:60:3B:C3:64:DD:40:61:63:38:A0
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F432858451C0988E8A0565DC0CECCC1B8
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/171065bb-8af2-3a3b-ab0c-8bf1c1b7bafd.roa
Signing time:             Tue 05 Mar 2024 18:47:55 +0000
ROA not before:           Tue 05 Mar 2024 18:47:55 +0000
ROA not after:            Mon 03 Jun 2024 17:47:55 +0000
asID:                     396908
IP address blocks:        2602:f956:1f::/48 maxlen: 48
                          2602:f956:17::/48 maxlen: 48
                          2602:f956:13::/48 maxlen: 48
                          2602:f956:10::/48 maxlen: 48
                          2602:f956:11::/48 maxlen: 48
                          2602:f956:12::/48 maxlen: 48
                          2602:f956:14::/48 maxlen: 48
                          2602:f956:15::/48 maxlen: 48
                          2602:f956:16::/48 maxlen: 48
                          2602:f956:18::/48 maxlen: 48
                          2602:f956:19::/48 maxlen: 48
                          2602:f956:1a::/48 maxlen: 48
                          2602:f956:1b::/48 maxlen: 48
                          2602:f956:1c::/48 maxlen: 48
                          2602:f956:1d::/48 maxlen: 48
                          2602:f956:1e::/48 maxlen: 48
                          2602:f956:20::/48 maxlen: 48
                          2602:f956:21::/48 maxlen: 48
                          2602:f956:22::/48 maxlen: 48
                          2602:f956:23::/48 maxlen: 48
                          2602:f956:24::/48 maxlen: 48
                          2602:f956:25::/48 maxlen: 48
                          2602:f956:26::/48 maxlen: 48
                          2602:f956:27::/48 maxlen: 48
                          2602:f956:28::/48 maxlen: 48
                          2602:f956:29::/48 maxlen: 48
                          2602:f956:2a::/48 maxlen: 48
                          2602:f956:2b::/48 maxlen: 48
                          2602:f956:2c::/48 maxlen: 48
                          2602:f956:2d::/48 maxlen: 48
                          2602:f956:2e::/48 maxlen: 48
                          2602:f956:2f::/48 maxlen: 48
                          2602:f956:30::/48 maxlen: 48
                          2602:f956:31::/48 maxlen: 48
                          2602:f956:32::/48 maxlen: 48
                          2602:f956:33::/48 maxlen: 48
                          2602:f956:34::/48 maxlen: 48
                          2602:f956:35::/48 maxlen: 48
                          2602:f956:36::/48 maxlen: 48
                          2602:f956:37::/48 maxlen: 48
                          2602:f956:38::/48 maxlen: 48
                          2602:f956:39::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1c:09:88:e8:a0:56:5d:c0:ce:cc:c1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Mar  5 18:47:55 2024 GMT
            Not After : Jun  3 17:47:55 2024 GMT
        Subject: CN=a4ad9a31-1450-4519-95db-d862b3b769c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:92:22:30:2b:c7:a4:99:94:76:df:96:ea:02:
                    7e:5a:d1:37:b2:63:5b:bc:a1:87:af:b9:f6:ae:56:
                    89:c9:da:27:52:2b:df:6c:33:a5:2b:df:b2:95:c1:
                    4e:6b:95:90:97:40:b8:36:fa:3a:1d:fd:9e:2b:a8:
                    4a:07:47:5e:ae:0f:e5:1b:00:44:c3:2b:e5:6c:fc:
                    9e:63:5c:0c:90:14:39:b2:9e:9e:f2:ec:b1:9d:92:
                    4f:2f:df:6b:9d:c3:11:09:71:ea:86:53:e8:21:00:
                    a4:89:93:1f:36:e5:3d:d7:e2:38:ec:3d:ba:80:6d:
                    b9:6b:ee:63:70:84:88:6e:96:60:57:a2:66:db:2e:
                    10:92:77:06:16:e9:47:84:ea:3b:8b:4b:56:09:55:
                    8a:23:03:71:2b:5c:b5:77:28:98:5f:e5:fa:2e:c9:
                    bc:39:7d:4e:42:35:c8:c9:b4:62:1e:0d:3e:35:2a:
                    85:ed:25:20:01:8d:aa:95:69:26:84:64:e6:1a:94:
                    7e:71:22:17:16:7e:7c:57:fc:d2:0d:2d:44:b0:83:
                    11:fb:72:95:27:d1:42:71:4b:13:3c:7a:b2:bd:0e:
                    c2:9c:29:84:b8:1c:b1:db:89:17:0e:3f:63:ee:ed:
                    c3:76:8b:75:29:19:cb:d2:d1:3a:ab:50:8d:2f:f6:
                    61:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:67:89:A5:99:69:39:DF:E8:AE:60:3B:C3:64:DD:40:61:63:38:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/171065bb-8af2-3a3b-ab0c-8bf1c1b7bafd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:10::-2602:f956:39:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:8c:8a:ce:ca:94:0e:8e:92:60:87:f8:c8:0c:84:15:2b:6f:
         93:ff:5b:37:bf:6a:82:10:19:41:80:ca:12:16:a0:95:4e:cf:
         2a:59:88:73:cc:32:f1:62:77:d7:65:a9:ff:32:52:63:06:13:
         75:80:1d:88:bb:42:b7:0a:5d:03:4d:17:26:ba:be:44:8d:31:
         c3:da:a0:3b:95:e3:da:4a:0e:ec:a6:97:c0:6c:7a:1b:fa:f0:
         99:cc:02:a9:6e:2c:9c:16:fc:60:e1:56:18:fb:72:ae:d3:50:
         bc:71:4c:41:f8:00:88:3d:24:b7:74:e7:08:45:99:32:c0:ec:
         b7:86:00:92:88:82:62:f4:9f:14:ec:11:3d:36:2c:a6:44:de:
         00:c3:76:af:b3:70:66:c8:2f:68:4c:20:cf:ae:42:50:84:cb:
         a5:0c:f3:f8:7b:11:ea:33:bb:ba:e8:84:cd:83:48:2b:3b:61:
         91:b9:44:bf:fc:71:53:d9:61:d2:f7:51:89:01:a9:c7:0c:08:
         81:f7:1d:de:14:d3:24:03:33:08:e3:a6:e1:e9:ea:31:45:eb:
         e3:1e:5a:78:c0:05:d7:eb:f7:96:03:0b:90:95:82:73:2b:d9:
         59:c3:a5:2e:94:bc:73:c1:9e:25:ba:9e:a1:34:3d:2a:6e:a6:
         37:fa:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:38 2024 by rpki-client on console-ams.rpki-client.org