Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/b9835dd4-b913-36e7-9ce4-cc1b411f7cb5.roa
File:                     b9835dd4-b913-36e7-9ce4-cc1b411f7cb5.roa (raw, json)
Hash identifier:          /oDTVBxVT6nAH2L2ed/g/oUQG/zrir364W71Kt3MQl8=
Subject key identifier:   A0:84:CD:96:0F:74:ED:B9:35:36:67:1D:4E:5F:54:6F:23:C6:E1:FD
Certificate issuer:       /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial:       010D0C9F43285844F522C7B8515AD94293F16700
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/b9835dd4-b913-36e7-9ce4-cc1b411f7cb5.roa
Signing time:             Tue 20 Feb 2024 20:22:16 +0000
ROA not before:           Tue 20 Feb 2024 20:22:16 +0000
ROA not after:            Mon 20 May 2024 19:22:16 +0000
asID:                     400936
IP address blocks:        2602:2d1:10::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:22:c7:b8:51:5a:d9:42:93:f1:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
        Validity
            Not Before: Feb 20 20:22:16 2024 GMT
            Not After : May 20 19:22:16 2024 GMT
        Subject: CN=6750b84e-ae43-4df3-a835-63f020d0cdc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:33:eb:bd:7f:36:1a:e7:51:b4:df:ea:cc:
                    69:92:89:5d:45:08:53:95:71:6a:fa:84:4d:0d:8a:
                    5e:a9:d1:3e:93:81:41:ea:af:a4:fa:89:15:23:bf:
                    88:d9:7d:5e:9f:a9:53:a2:d2:1e:b3:4c:05:3c:2a:
                    f9:3c:17:0a:0c:5a:52:d5:26:7a:38:fb:9a:63:85:
                    79:27:ce:c5:e9:be:87:e6:70:de:46:37:32:77:e1:
                    75:bc:91:47:a5:5f:48:e3:e7:04:aa:36:51:e4:5e:
                    7b:b6:2d:1e:bc:59:8a:2b:fc:91:a4:1b:2d:0f:2d:
                    c7:3e:7d:0b:e7:aa:78:9a:71:b3:63:08:d3:a1:43:
                    e4:a3:58:ec:d7:61:e0:65:c7:f3:55:c3:31:86:50:
                    8a:c5:69:99:0c:5f:e9:4d:0d:4f:36:09:94:9f:eb:
                    6c:57:7d:0e:1c:2c:48:79:7f:b8:ff:0d:a5:2b:4c:
                    17:b3:c8:ca:37:df:26:7e:2b:43:52:1b:d9:93:32:
                    4b:b1:7a:85:0a:61:b9:30:93:20:a2:4b:19:9b:6f:
                    fe:25:be:1f:1c:71:b6:7d:20:15:42:56:0a:62:98:
                    33:5b:af:29:4b:c2:51:11:25:40:7c:79:e6:ca:cc:
                    12:a0:89:a7:b2:12:0c:f9:59:d2:ed:ef:fd:26:62:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:84:CD:96:0F:74:ED:B9:35:36:67:1D:4E:5F:54:6F:23:C6:E1:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/b9835dd4-b913-36e7-9ce4-cc1b411f7cb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl

            X509v3 Authority Key Identifier:
                keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d1:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:2e:25:c1:06:85:b0:4c:9a:95:67:b3:84:88:0c:da:07:23:
         93:b6:37:61:7f:53:5d:39:9b:e4:82:92:ee:3d:78:61:3c:07:
         65:8c:06:fc:5e:09:26:aa:4f:85:fe:a9:82:0a:15:d2:6b:ef:
         ba:71:1f:c9:74:84:d3:bf:03:cf:65:d0:6c:75:40:f5:07:87:
         b1:89:bc:83:0c:8b:0b:70:2f:e9:c7:b2:5b:a8:d7:49:d7:95:
         47:97:c0:53:77:d8:31:43:c0:35:79:60:46:c5:7f:90:c6:03:
         a4:76:30:40:9e:06:da:8f:7e:cd:9a:de:03:af:40:92:e6:02:
         30:ce:2e:5f:62:85:90:1a:dd:32:af:76:1e:fd:26:3c:4f:07:
         a5:c1:c2:a8:d7:b3:e4:e7:4d:e3:10:45:db:9a:aa:73:d9:8a:
         68:78:af:91:ce:16:02:33:f7:64:a8:a3:b7:82:c8:65:d5:94:
         b7:0b:0d:a3:a2:e3:9a:c0:67:f4:8f:5d:cb:12:ac:6f:5e:dd:
         ce:31:6d:74:82:62:e3:9e:ad:5e:97:be:0c:36:f7:10:70:79:
         c9:11:30:45:67:81:db:b4:5d:06:b1:03:96:78:6f:c2:82:25:
         89:d9:2b:2a:d6:13:97:46:69:e3:1e:17:2b:7e:ee:e5:68:03:
         c8:a7:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----