Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4fae3b3a-bd68-3c3f-9975-8dc48c725dfe.roa
File:                     4fae3b3a-bd68-3c3f-9975-8dc48c725dfe.roa (raw, json)
Hash identifier:          J0loR4qf/vM/vzynX/Lr2fHolgRqCnm0o2sLqMmvl78=
Subject key identifier:   BB:89:23:2B:B2:58:22:12:99:70:F0:31:02:91:20:D8:DF:96:10:32
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845FAB3FC031FD06D5F374AA700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4fae3b3a-bd68-3c3f-9975-8dc48c725dfe.roa
Signing time:             Fri 24 May 2024 13:00:34 +0000
ROA not before:           Fri 24 May 2024 13:00:34 +0000
ROA not after:            Thu 22 Aug 2024 13:00:34 +0000
asID:                     40217
IP address blocks:        2001:470:24e::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fa:b3:fc:03:1f:d0:6d:5f:37:4a:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 24 13:00:34 2024 GMT
            Not After : Aug 22 13:00:34 2024 GMT
        Subject: CN=c372fa46-eca2-4df3-8be7-842c417e6587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6c:3b:c1:1f:b8:3b:6e:a5:03:d9:d9:79:b7:
                    49:8f:e8:60:c8:cd:5c:66:b9:19:c0:d7:84:a3:5d:
                    d4:fc:6f:b5:73:d7:e6:68:7e:0b:7e:8b:03:be:17:
                    c8:4a:c9:f8:c3:c7:23:33:38:01:35:cf:f5:16:b5:
                    77:e3:d2:c3:bb:cd:9c:d3:92:9c:66:0e:d3:72:ba:
                    5a:13:1f:c1:58:d1:32:13:b6:55:b4:e4:41:20:61:
                    6b:2b:d7:7e:44:0e:c6:21:82:cb:73:17:b1:d0:b3:
                    0d:ae:13:a8:af:54:42:9c:29:32:44:bd:cd:00:14:
                    51:2e:b1:4c:3c:cb:2a:89:50:11:77:36:cc:e5:22:
                    17:91:42:ea:e6:49:7f:30:bc:78:7a:98:d9:dd:ed:
                    f5:9e:ab:92:f0:15:c3:68:f0:49:54:a5:e1:55:5c:
                    f3:ef:64:70:f4:35:12:78:8b:fd:fb:77:20:a4:41:
                    3f:99:e3:9f:68:a2:d6:22:e0:c6:76:65:3f:26:be:
                    03:0b:c5:87:17:ac:4e:c0:5c:e3:22:66:36:e0:bf:
                    4b:28:9f:d9:49:8a:07:ca:40:81:72:6c:d9:12:9a:
                    d3:cd:28:bc:27:04:a2:06:3b:95:55:96:ce:63:8f:
                    77:89:a3:9f:8d:71:bb:74:d4:f9:ae:84:d4:4e:c9:
                    9d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:89:23:2B:B2:58:22:12:99:70:F0:31:02:91:20:D8:DF:96:10:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4fae3b3a-bd68-3c3f-9975-8dc48c725dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:24e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:af:a1:87:da:16:22:9c:b7:4a:48:91:83:10:e6:f6:2b:6c:
         a9:2d:6d:b2:44:d2:38:a1:b7:27:77:07:bd:99:32:30:4d:de:
         ce:de:dd:48:10:8a:00:af:42:da:5a:35:04:73:c1:0c:41:b1:
         f0:b1:62:b9:a7:48:4c:1c:44:c7:44:c7:4d:8c:12:a4:40:70:
         7a:74:68:2b:7f:c9:06:d8:c2:c4:cb:a8:b3:08:2f:3c:b4:55:
         08:0f:1a:c2:16:8b:39:d7:f3:31:4f:c1:84:0f:ed:1d:28:73:
         c4:8a:18:f0:ac:5e:ba:9e:a3:6e:b0:58:f2:5a:0d:a5:02:d4:
         5b:6e:2b:9b:83:b4:f8:57:99:a1:a8:2d:7b:af:16:3f:2f:70:
         ef:be:97:46:63:25:2b:bf:84:c8:7f:8c:d4:2b:0a:7f:d9:a7:
         65:73:eb:5b:03:5a:86:d5:72:0d:74:b0:77:2e:da:02:f8:79:
         e5:3c:68:76:5c:be:06:45:61:f2:47:62:95:b0:51:fe:5a:29:
         5d:66:b8:d1:1b:51:d2:cf:08:a4:63:4f:a1:11:f9:5d:f3:bd:
         bb:76:c4:10:43:d3:54:2a:2f:9f:e4:7e:c2:ae:cb:31:55:ef:
         d0:75:43:47:7b:8b:03:1c:04:80:39:88:0a:7f:69:63:43:9e:
         41:ed:82:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----