Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/1cda1582-de83-3ef5-ab20-f312c374c795.roa
File:                     1cda1582-de83-3ef5-ab20-f312c374c795.roa (raw, json)
Hash identifier:          SxZOg/1c7PqB8WEA65ea30t4dlJ1WwER0OxC05pFJDY=
Subject key identifier:   11:C5:02:47:E3:85:15:DA:9E:36:FF:72:06:76:58:75:2D:12:FF:FF
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F43285844587E6C48BCDB98AACE381A00
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/1cda1582-de83-3ef5-ab20-f312c374c795.roa
Signing time:             Tue 26 Dec 2023 17:45:00 +0000
ROA not before:           Tue 26 Dec 2023 17:45:00 +0000
ROA not after:            Mon 25 Mar 2024 16:45:00 +0000
asID:                     6208
IP address blocks:        2604:fcc0::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:58:7e:6c:48:bc:db:98:aa:ce:38:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Dec 26 17:45:00 2023 GMT
            Not After : Mar 25 16:45:00 2024 GMT
        Subject: CN=434f1529-35ff-4541-857f-61ae9c1b5025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:65:0f:10:fb:f6:11:3a:3d:81:42:44:1d:02:
                    46:eb:6b:23:96:e5:2b:47:d7:92:66:95:df:fa:36:
                    06:39:d3:62:e0:fd:1b:87:33:aa:5b:3b:34:43:36:
                    c8:28:b8:12:3d:c0:7b:2c:18:41:2e:a5:00:98:4c:
                    6a:f4:08:ba:a7:6d:e9:f1:9e:ce:ba:74:33:ac:fb:
                    9b:be:c3:5f:c8:d2:94:66:90:6e:88:88:1e:5c:65:
                    ff:bd:35:7f:16:5f:89:cf:04:40:3f:b7:5e:11:df:
                    07:81:df:0e:18:c2:21:a2:e0:3e:cb:7e:52:b6:d8:
                    d8:4d:50:b9:38:a3:8c:3c:b9:86:30:f9:21:83:4b:
                    e6:17:33:1b:3b:96:a9:6f:46:f8:9c:f6:99:95:5a:
                    2a:fb:2f:14:09:8e:d3:6d:79:a7:fa:c9:a8:0a:dc:
                    00:ee:9b:0c:e8:62:dc:2b:29:b3:09:8e:56:81:f0:
                    c3:2e:18:e3:c7:b7:d3:91:21:17:cc:86:5b:27:f4:
                    f5:50:d5:f8:91:ed:79:3d:a1:e3:ca:13:55:8e:e0:
                    74:26:db:7a:d4:14:7b:79:b5:0b:f7:01:19:f1:3c:
                    35:d0:eb:0d:22:a9:2b:e3:bb:10:6f:a1:80:fd:94:
                    66:f9:30:eb:e8:f2:ad:5e:f3:6b:1e:dc:be:83:97:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C5:02:47:E3:85:15:DA:9E:36:FF:72:06:76:58:75:2D:12:FF:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/1cda1582-de83-3ef5-ab20-f312c374c795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fcc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ab:ef:59:fc:c0:f8:79:1a:81:e4:27:d8:45:12:bd:46:9f:
         9d:d9:d4:a8:40:8f:ff:f0:7f:b7:47:e9:87:cd:a6:da:b9:32:
         f8:4e:8e:52:3d:8b:81:1e:70:22:19:07:5a:af:48:cc:5b:93:
         11:72:0b:9b:02:b2:18:a2:fb:e3:53:8a:4f:73:c9:e2:4c:fb:
         8d:b5:0e:b3:05:1a:dc:ea:97:08:a0:a4:6c:77:f1:99:03:bb:
         30:06:1f:2d:ac:16:0a:af:e2:a9:45:ad:da:16:2d:e2:5d:15:
         05:a7:7b:f2:68:99:46:81:bd:44:55:9c:dd:59:7b:2a:32:99:
         59:d2:30:c2:a3:6b:f8:4d:65:24:a6:fb:64:6a:77:3d:73:03:
         e7:fe:10:d9:c6:a1:e0:de:75:e7:cd:fe:ca:cc:cf:89:05:29:
         a6:ed:ab:00:ad:e1:20:e5:b9:5b:d6:14:0b:5f:a3:9c:ba:af:
         ff:22:27:07:49:ef:b3:48:9a:61:c3:ff:ac:bf:aa:c8:17:17:
         8e:8e:c4:4d:89:07:39:8d:35:49:68:55:d5:5e:c3:fe:95:f4:
         4e:0a:cb:37:05:8a:d3:9e:13:30:f6:b3:01:2e:94:71:44:25:
         b1:84:99:83:25:74:f0:e4:39:ae:d0:91:33:dc:b2:1a:1d:f2:
         e4:fe:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----