Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f7086d2-4466-3e47-a633-34593c0014bf.roa
File:                     1f7086d2-4466-3e47-a633-34593c0014bf.roa (raw, json)
Hash identifier:          pibLzZ1eP200kDeeLVa9nCd5CD4mH2Gck74ZXveAUoc=
Subject key identifier:   FC:96:97:3D:50:6B:B6:98:67:86:0F:7F:09:E2:20:1F:02:7A:52:A8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285846E3DEBA826149EA6231640A80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f7086d2-4466-3e47-a633-34593c0014bf.roa
Signing time:             Fri 16 Aug 2024 01:30:17 +0000
ROA not before:           Fri 16 Aug 2024 01:30:17 +0000
ROA not after:            Thu 14 Nov 2024 02:30:17 +0000
asID:                     142125
IP address blocks:        2001:470:354::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e3:de:ba:82:61:49:ea:62:31:64:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 16 01:30:17 2024 GMT
            Not After : Nov 14 02:30:17 2024 GMT
        Subject: CN=542820db-59bb-475e-ac60-3d64f6a95f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:5e:15:8f:13:1f:f2:24:24:19:e4:fe:75:
                    68:bc:ee:27:8c:5c:fd:ae:88:47:b2:8a:b5:da:8d:
                    49:3c:dc:51:dc:7d:68:bf:4b:38:bd:1b:9e:aa:e9:
                    1e:a2:b8:2d:ee:aa:74:58:de:31:24:e1:e5:98:c8:
                    fa:20:8c:cd:ca:cf:c6:21:86:62:6d:fc:9b:7a:8d:
                    c5:fb:fb:de:f5:43:7f:4a:78:38:5f:67:44:90:44:
                    3b:7f:91:e8:99:50:21:aa:28:62:e5:47:2f:96:55:
                    88:81:e9:a1:f8:97:13:36:c8:7b:c2:fb:dc:7b:eb:
                    39:56:0d:de:47:56:7e:93:2c:ea:a8:63:0c:1b:75:
                    cc:d8:3b:b4:69:de:a6:41:d6:e4:57:fb:c5:ec:cd:
                    a6:c1:76:ab:48:b5:f0:45:d2:05:44:aa:63:99:08:
                    48:13:37:7c:97:01:c0:b4:4b:63:0f:a3:52:73:4c:
                    d7:7c:43:7a:1b:7c:37:1a:82:e3:86:cc:0d:97:85:
                    58:8d:0f:3b:ea:57:51:7e:04:28:d8:33:73:bb:9c:
                    8d:64:7c:c2:40:2c:f3:17:a7:1e:cf:02:fe:69:71:
                    0b:c5:b0:4e:aa:44:0b:55:1a:b4:b6:5b:0c:8d:b0:
                    09:ae:98:b6:5f:e3:d1:60:d0:1e:72:10:3f:17:1b:
                    6d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:96:97:3D:50:6B:B6:98:67:86:0F:7F:09:E2:20:1F:02:7A:52:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1f7086d2-4466-3e47-a633-34593c0014bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:354::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:f8:80:d0:7f:15:36:1c:6e:fb:55:70:7e:0d:d3:2d:46:a5:
         5b:ba:54:d5:7e:63:82:e3:1c:5a:7b:e4:e5:4b:3c:ba:8d:b4:
         2b:50:22:56:1c:14:c1:63:84:dd:e6:27:18:90:96:d3:ee:fd:
         c2:8a:55:cf:30:b4:39:a6:92:10:15:9a:d5:0c:d1:09:1b:00:
         89:05:25:4d:ba:9c:dd:d1:71:a4:d3:74:34:37:6b:e1:e5:d4:
         88:92:2c:e5:da:83:05:f8:e1:1d:58:a9:c1:ea:00:ca:c6:9a:
         1b:2d:10:cc:72:cb:eb:d0:af:6d:1d:fc:00:5e:cb:d4:8b:5d:
         ce:cc:0f:b8:1c:dd:22:fa:b1:cb:30:5f:f7:e1:8c:ae:89:25:
         27:4e:76:70:44:e6:4c:af:64:2a:10:76:1e:1c:5f:ee:18:b1:
         67:f6:1a:f1:29:c2:d4:49:56:b2:73:65:50:85:33:29:c8:5e:
         77:fc:f5:95:2d:00:0c:53:43:83:64:e8:e3:54:1d:4a:8f:af:
         38:07:ce:1e:d9:ff:3f:ce:33:fe:e1:02:94:9b:0d:54:e8:52:
         5d:13:12:29:80:ab:9f:7b:75:62:1a:fe:79:4c:19:bb:3b:2d:
         1e:90:69:6b:3e:ac:19:d5:17:f4:c9:f6:dc:1a:c3:a8:07:16:
         30:3a:4f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----