Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/23b74155-326c-3cf7-9b59-341ef52d887e.roa
File:                     23b74155-326c-3cf7-9b59-341ef52d887e.roa (raw, json)
Hash identifier:          sTJpDyYjSIe5+M2JUx0rwMlE68qdOjmXNqFGETj1Z7U=
Subject key identifier:   FD:64:54:C7:64:5C:11:73:02:A1:93:FB:BD:3D:E0:65:24:BD:0D:41
Certificate issuer:       /CN=56b96151-8a90-41ad-aefc-1091ab214a92
Certificate serial:       010D0C9F432858435F83E6BDB6235FAA4D9C7080
Authority key identifier: DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/23b74155-326c-3cf7-9b59-341ef52d887e.roa
Signing time:             Thu 28 Sep 2023 13:19:45 +0000
ROA not before:           Thu 28 Sep 2023 13:19:45 +0000
ROA not after:            Wed 27 Dec 2023 14:19:45 +0000
asID:                     16509
IP address blocks:        2607:6d40::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5f:83:e6:bd:b6:23:5f:aa:4d:9c:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b96151-8a90-41ad-aefc-1091ab214a92
        Validity
            Not Before: Sep 28 13:19:45 2023 GMT
            Not After : Dec 27 14:19:45 2023 GMT
        Subject: CN=79f6a1cb-35e9-4fea-8eda-2efaaa9c60be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:66:9e:d1:35:52:b3:1a:d7:e9:5a:77:ca:
                    c7:20:dc:71:8a:89:c7:11:5f:4d:20:35:69:2d:39:
                    89:c3:84:9a:f8:f2:98:0c:93:93:a5:2a:0f:52:fb:
                    bb:a1:a8:eb:ec:5c:6e:d5:16:65:4b:4a:5f:3c:2a:
                    d0:36:f3:e5:a9:fc:b3:db:3c:ad:91:44:04:cb:44:
                    66:52:1d:23:9b:f9:40:86:62:6e:95:ee:71:11:fb:
                    c8:45:a2:d9:b5:e7:91:5b:64:67:b6:28:d1:a3:4d:
                    ca:60:18:b2:43:e4:36:de:93:24:53:bc:ed:2e:38:
                    3c:a3:94:6d:1d:be:29:8a:7b:f9:f7:46:8a:05:af:
                    91:dd:72:63:ec:52:cc:7c:7a:90:6a:8d:87:d2:aa:
                    e1:41:22:75:70:9c:98:53:72:f0:5d:7c:da:cb:1c:
                    d2:4c:5f:4a:02:e6:60:2e:df:11:74:62:d1:68:68:
                    7c:3b:57:62:31:d3:2c:83:fb:bb:fd:28:c9:f9:61:
                    e9:09:f7:e5:36:c6:f1:a0:ee:6e:e9:34:37:b8:73:
                    c7:98:7d:e7:c8:0c:7b:ae:bd:56:4b:94:79:25:c3:
                    f0:92:de:1d:af:6e:28:76:98:15:1c:a3:d2:f3:15:
                    27:f3:6a:4f:cc:12:02:16:a3:e4:d5:57:3b:13:79:
                    b6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:64:54:C7:64:5C:11:73:02:A1:93:FB:BD:3D:E0:65:24:BD:0D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/23b74155-326c-3cf7-9b59-341ef52d887e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl

            X509v3 Authority Key Identifier:
                keyid:DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6d40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:dd:b2:5c:c4:94:c6:49:5f:a2:56:2f:bc:bb:be:ea:2f:9b:
         7f:ac:ee:f0:4c:ed:89:d7:48:57:20:a5:83:cc:bd:3d:50:4c:
         c1:30:a8:0e:62:2b:17:8a:0e:11:d1:75:29:01:68:f8:04:19:
         d3:04:17:35:b4:87:45:57:12:bf:93:f4:ef:5f:69:32:ef:d5:
         8e:1e:ac:84:09:e1:2d:87:8e:10:dc:6f:60:00:86:86:13:ee:
         d5:da:64:80:05:ea:31:21:5c:07:48:ef:fa:29:ea:ea:f9:06:
         4a:99:cf:af:b6:33:2c:77:a4:b2:91:78:c3:e7:9a:eb:ee:88:
         a7:de:ef:c4:00:66:9d:35:e7:c3:59:84:57:b9:e6:ad:73:95:
         04:cf:cb:f7:83:44:11:8f:69:6e:c6:0d:80:8c:a5:57:38:3a:
         5b:ee:2d:74:82:be:56:01:2f:35:57:03:fc:2f:66:a7:6e:d5:
         db:a9:7d:c8:54:04:47:58:5a:ee:53:f4:a7:94:22:11:f7:6d:
         81:45:17:d1:fe:43:f8:3c:0d:73:8e:bc:8b:3e:aa:8f:08:60:
         60:df:53:5e:e0:06:32:41:f0:06:18:6b:02:cb:75:bc:be:a9:
         88:1d:ee:5a:10:af:ab:8e:5e:61:a8:b3:5d:f1:b6:19:4d:66:
         a2:f8:d2:d7
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWENfg+a9tiNfqk2ccIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZiOTYxNTEtOGE5MC00MWFkLWFlZmMtMTA5MWFiMjE0
YTkyMB4XDTIzMDkyODEzMTk0NVoXDTIzMTIyNzE0MTk0NVowLzEtMCsGA1UEAxMk
NzlmNmExY2ItMzVlOS00ZmVhLThlZGEtMmVmYWFhOWM2MGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmlmntE1UrMa1+lad8rHINxxionHEV9NIDVp
LTmJw4Sa+PKYDJOTpSoPUvu7oajr7Fxu1RZlS0pfPCrQNvPlqfyz2zytkUQEy0Rm
Uh0jm/lAhmJule5xEfvIRaLZteeRW2RntijRo03KYBiyQ+Q23pMkU7ztLjg8o5Rt
Hb4pinv590aKBa+R3XJj7FLMfHqQao2H0qrhQSJ1cJyYU3LwXXzayxzSTF9KAuZg
Lt8RdGLRaGh8O1diMdMsg/u7/SjJ+WHpCfflNsbxoO5u6TQ3uHPHmH3nyAx7rr1W
S5R5JcPwkt4dr24odpgVHKPS8xUn82pPzBICFqPk1Vc7E3m26QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFP1kVMdkXBFzAqGT+7094GUkvQ1BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NmI5
NjE1MS04YTkwLTQxYWQtYWVmYy0xMDkxYWIyMTRhOTIvMjNiNzQxNTUtMzI2Yy0z
Y2Y3LTliNTktMzQxZWY1MmQ4ODdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTZiOTYxNTEtOGE5MC00MWFkLWFl
ZmMtMTA5MWFiMjE0YTkyLzU2Yjk2MTUxLThhOTAtNDFhZC1hZWZjLTEwOTFhYjIx
NGE5Mi5jcmwwHwYDVR0jBBgwFoAU3Py9gXmsF/Ffsd0NchX69k8bld8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81NmI5NjE1MS04YTkwLTQxYWQtYWVmYy0xMDkx
YWIyMTRhOTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgdtQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAb3bJcxJTGSV+iVi+8u77qL5t/rO7wTO2J10hXIKWDzL09UEzBMKgO
YisXig4R0XUpAWj4BBnTBBc1tIdFVxK/k/TvX2ky79WOHqyECeEth44Q3G9gAIaG
E+7V2mSABeoxIVwHSO/6Kerq+QZKmc+vtjMsd6SykXjD55rr7oin3u/EAGadNefD
WYRXueatc5UEz8v3g0QRj2luxg2AjKVXODpb7i10gr5WAS81VwP8L2anbtXbqX3I
VARHWFruU/SnlCIR922BRRfR/kP4PA1zjryLPqqPCGBg31Ne4AYyQfAGGGsCy3W8
vqmIHe5aEK+rjl5hqLNd8bYZTWai+NLX
-----END CERTIFICATE-----