Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/1ca55fbf-ef84-3066-a1ba-ed31032a807b.roa
File:                     1ca55fbf-ef84-3066-a1ba-ed31032a807b.roa (raw, json)
Hash identifier:          580a5m1gLMZPBmAZatM2L0u+MJX8P8CcqnMyJbMRmYk=
Subject key identifier:   EF:FD:51:D5:4C:A0:B4:83:11:2F:29:5A:72:43:86:20:43:9A:39:D5
Certificate issuer:       /CN=ec3472d2-073b-458a-8e0f-7ee77169574a
Certificate serial:       010D0C9F432858451A3D736A24448A75CAD18570
Authority key identifier: 72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/1ca55fbf-ef84-3066-a1ba-ed31032a807b.roa
Signing time:             Tue 05 Mar 2024 03:20:54 +0000
ROA not before:           Tue 05 Mar 2024 03:20:54 +0000
ROA not after:            Mon 03 Jun 2024 02:20:54 +0000
asID:                     16509
IP address blocks:        2602:f957:a00::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:3d:73:6a:24:44:8a:75:ca:d1:85:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3472d2-073b-458a-8e0f-7ee77169574a
        Validity
            Not Before: Mar  5 03:20:54 2024 GMT
            Not After : Jun  3 02:20:54 2024 GMT
        Subject: CN=84c36700-8a7e-4f0a-b41f-e1d2a2b7de8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:48:07:07:4d:1d:11:5c:34:ea:a5:02:4f:
                    e2:2e:02:39:d6:97:4b:f8:d8:fd:ad:4d:81:02:ae:
                    03:b7:8c:48:17:2f:88:e5:16:59:ec:77:53:30:36:
                    d8:75:0d:23:84:e9:a8:8a:18:22:5f:b8:a6:df:d6:
                    c6:1f:13:0a:86:d9:38:1e:2b:2b:5a:ca:71:64:0c:
                    67:ec:5e:cb:cb:8b:ae:30:bc:73:d1:13:ef:f1:b9:
                    43:14:9c:5b:6a:f7:a3:d5:a9:e5:9a:fe:b6:b5:55:
                    bf:2a:31:fa:f9:4a:13:00:02:be:43:77:c2:61:3c:
                    ec:99:46:c7:19:f7:66:dc:fb:79:3f:8f:cd:8e:9e:
                    97:56:5b:60:d5:d5:61:eb:5e:38:84:4b:a4:52:f3:
                    57:94:b1:b6:cc:3b:e7:96:f3:ee:7a:ff:71:7a:01:
                    6f:ac:de:69:9c:0f:cc:97:65:6e:db:fe:b4:06:bf:
                    94:05:c2:02:36:4f:08:6c:cc:9f:af:d8:d2:6c:60:
                    1e:ed:77:61:1e:1d:07:c0:81:7c:25:cf:69:77:d4:
                    c7:41:fe:f9:f3:28:5e:82:ee:87:aa:32:3f:06:d1:
                    43:5f:1d:46:2e:17:d4:f4:1d:47:8b:c7:70:dd:32:
                    c8:a3:16:b7:6d:01:1d:67:66:64:ab:64:8e:95:9c:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FD:51:D5:4C:A0:B4:83:11:2F:29:5A:72:43:86:20:43:9A:39:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/1ca55fbf-ef84-3066-a1ba-ed31032a807b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a/ec3472d2-073b-458a-8e0f-7ee77169574a.crl

            X509v3 Authority Key Identifier:
                keyid:72:70:44:BC:98:D7:EE:B4:32:B4:5E:0A:84:F1:84:AE:56:51:A9:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec3472d2-073b-458a-8e0f-7ee77169574a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f957:a00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:03:d1:ad:d2:cf:53:0a:c3:ad:1f:60:42:ab:f7:d5:35:59:
         95:71:45:76:83:98:99:a1:23:df:01:2d:ac:dc:cb:61:3f:28:
         13:83:95:80:a4:e0:aa:06:ce:4e:9b:e0:4c:d8:30:68:4f:07:
         98:91:40:e4:c7:39:e0:2a:b7:6f:be:fb:a2:78:cb:0e:f2:35:
         87:59:85:6c:f5:5d:8c:36:6c:15:f5:71:69:4e:3f:68:91:7f:
         0c:be:5b:b9:32:bc:40:21:59:bb:00:f1:c8:27:7a:f3:80:88:
         d7:6f:76:cd:0e:7d:b1:6b:ce:08:ef:6f:01:94:57:c8:ff:09:
         2f:27:7e:82:cf:7f:9c:94:88:a6:d1:5b:c2:5f:47:12:a1:ce:
         cd:c2:d4:f2:f5:49:97:2d:09:3c:b1:ff:37:3c:b1:dd:ad:9c:
         2d:9d:0c:e2:d2:b5:75:ff:fe:02:b2:26:b9:7d:26:52:56:2d:
         61:30:30:74:bd:9a:1a:e2:1b:f3:82:39:9c:c9:7d:0b:51:03:
         dc:ad:cd:ab:60:d5:8a:d3:f6:37:19:12:d3:32:91:2d:10:ee:
         e9:2c:01:02:cd:84:54:01:d0:cc:70:41:52:2f:f6:44:e5:1f:
         19:1c:27:6a:bd:67:2e:e6:35:0b:7e:a7:b5:2a:03:1f:33:7b:
         c1:27:69:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org