Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4af24ebf-81fd-3a11-8b9d-9906eddfb809.roa
File:                     4af24ebf-81fd-3a11-8b9d-9906eddfb809.roa (raw, json)
Hash identifier:          fSctXHARZZ4LqtVhVRe9t8PCqI3XQesNJrhEFFZ4dj4=
Subject key identifier:   C3:AE:8C:5A:AE:D0:C1:CD:1E:62:EB:03:EC:DB:25:32:4A:B8:73:19
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B740E00020007F33D1F20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4af24ebf-81fd-3a11-8b9d-9906eddfb809.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     265389
IP address blocks:        2001:470:1eb::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:74:0e:00:02:00:07:f3:3d:1f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=4ea52b6e-8d2b-47bd-bb98-0ec8a4b6c64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ad:66:b5:b5:d1:a0:62:8f:e1:ea:bb:57:89:
                    26:ac:3a:67:e8:bf:94:99:d1:25:5b:9a:a8:d7:04:
                    1d:a7:94:f3:35:be:45:48:d6:20:b1:77:13:d7:27:
                    4f:f7:05:df:c3:77:d8:8d:32:e8:0b:40:4f:91:0e:
                    ac:c6:6d:a9:e0:86:09:24:43:c2:d2:26:69:63:60:
                    6d:7f:82:a6:91:7d:fa:5b:34:0f:02:95:a4:e7:3b:
                    65:6c:6b:30:b6:ba:63:04:bd:3c:95:ef:4e:ab:ab:
                    d7:fb:92:ed:18:7a:f7:c2:bc:3f:aa:9b:c7:60:2d:
                    c6:49:ec:e9:b8:f6:54:f4:00:70:4c:38:2e:24:aa:
                    e3:8c:f1:e9:86:12:68:e2:6a:5a:96:ef:5b:94:27:
                    d9:8b:29:0a:cf:7e:d3:a6:f9:7e:fc:8f:25:36:4b:
                    26:53:57:f5:0f:08:4a:f0:8c:ad:8b:b4:4e:8e:36:
                    1b:83:75:9e:ec:27:23:24:68:39:03:35:3a:46:de:
                    eb:fd:ee:0b:3d:c7:29:84:dd:11:b4:12:b5:d9:f2:
                    67:c7:d7:59:06:76:73:a4:54:b4:de:a4:f0:0b:f4:
                    d9:59:d7:56:1b:7b:82:d4:8f:d4:2d:9f:96:cc:dd:
                    2b:ec:12:84:40:3d:a1:c8:0c:9f:6a:a0:67:fc:45:
                    52:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AE:8C:5A:AE:D0:C1:CD:1E:62:EB:03:EC:DB:25:32:4A:B8:73:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4af24ebf-81fd-3a11-8b9d-9906eddfb809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:bd:64:3c:ad:17:e5:b8:0f:6c:2d:49:99:d1:a3:35:11:66:
         84:8c:e9:08:a1:fd:6e:1a:93:8e:ad:0a:7e:06:ab:f6:04:6c:
         2a:3f:a7:a1:ed:be:5f:9d:4c:71:99:fb:a4:7f:8c:a4:4c:6d:
         94:c7:43:ed:0a:2a:b0:ee:c9:c1:a6:26:41:8f:77:53:85:00:
         36:a8:98:00:92:d3:0f:5f:a8:12:48:cc:be:5c:fd:25:d8:04:
         64:9a:4b:fa:bc:0f:ec:94:a7:7e:3d:53:65:f2:c2:b6:ea:6b:
         82:47:d4:e2:6b:90:50:f9:75:41:71:e4:8e:c9:2f:b6:bb:39:
         e4:12:f2:c7:d5:54:b3:36:2d:1c:21:b1:08:da:74:e5:28:d8:
         e8:dc:f2:e1:34:b1:7a:9d:07:87:97:b7:2d:dd:b9:37:00:54:
         a3:6e:0e:91:b7:b8:a8:b3:e9:a3:6a:ec:6c:85:24:93:dc:1d:
         1a:bd:f7:27:57:43:2a:69:36:56:9f:1c:fb:e5:c4:cf:9a:77:
         32:9a:9c:1e:55:83:37:8e:d7:55:b2:53:31:0d:95:01:f5:8d:
         cf:6b:df:f2:da:7a:9c:46:a7:5c:55:a7:a9:04:54:b9:3f:da:
         f5:1f:81:9a:f2:3d:be:da:ef:ff:5e:f0:4c:a9:61:64:b7:6e:
         11:33:b7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----