Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dac5ca51-2297-3abb-b0e9-8cb97bbc59ca.roa
File:                     dac5ca51-2297-3abb-b0e9-8cb97bbc59ca.roa (raw, json)
Hash identifier:          n8r0rFZ43nXnOfbDyujUZawkEo3gZZQ5oci/4yXylsM=
Subject key identifier:   2C:A0:D7:94:15:C2:1D:CC:23:C8:36:E9:0C:F9:FE:AE:3A:E6:82:21
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A519AE5944E98C47CFBA2C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dac5ca51-2297-3abb-b0e9-8cb97bbc59ca.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     63959
IP address blocks:        2001:470:62::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:9a:e5:94:4e:98:c4:7c:fb:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=e9488cd8-85a9-4765-96b4-ea749d87fbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:28:86:5d:6f:df:3d:1e:8f:fa:3f:70:37:
                    cf:28:f4:e9:23:46:87:ce:3d:9b:31:4e:69:a2:77:
                    a6:7b:6a:ea:63:80:0e:39:3c:d8:68:88:90:fb:fe:
                    b1:31:c6:d1:75:7b:99:62:0c:f9:77:f1:1b:3b:2d:
                    9f:42:2a:d7:18:c2:ce:69:46:e5:a1:cd:dd:1b:20:
                    61:7c:79:54:47:13:26:39:37:62:f0:a4:7a:44:91:
                    fe:69:fc:5e:ab:7a:36:5c:03:cd:57:a6:3e:c5:92:
                    52:df:0a:f2:31:e2:b6:fe:62:bc:29:8c:60:44:45:
                    20:d4:66:c5:14:11:c8:98:8a:58:e6:32:28:24:cb:
                    b8:c6:b2:27:1f:f3:b1:37:f7:af:1a:e8:95:90:5a:
                    73:61:b3:87:ea:64:1e:af:8a:9a:05:f7:91:99:21:
                    30:e9:8c:70:d0:d5:63:1c:fa:52:aa:5c:76:1c:04:
                    28:3a:fe:0e:e8:a1:8b:02:02:b4:22:36:a8:06:08:
                    c6:0c:88:df:74:b4:4b:d5:e2:4d:4e:a7:1f:56:ce:
                    ed:de:af:97:e3:49:57:e2:20:32:9e:85:09:85:2e:
                    cc:55:93:4a:6e:14:a0:4c:c5:01:ed:1c:3e:c0:ce:
                    90:5f:a9:df:39:8e:39:fa:e8:86:79:c8:99:99:80:
                    9f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A0:D7:94:15:C2:1D:CC:23:C8:36:E9:0C:F9:FE:AE:3A:E6:82:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/dac5ca51-2297-3abb-b0e9-8cb97bbc59ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:94:c3:12:a0:54:12:5b:65:d1:96:b8:9a:25:76:18:f9:fb:
         1e:f1:dd:c1:d7:af:f1:f4:7c:ed:1b:e1:e1:e9:96:3b:e5:ce:
         e8:b6:26:b2:f5:3d:a5:03:0b:7d:1d:76:ce:50:ee:26:b9:57:
         03:15:9f:ac:54:05:65:21:e0:86:2d:44:b9:9f:82:93:95:d2:
         9b:27:e9:8d:fc:2c:0a:d9:66:75:0e:15:ca:3c:20:a0:af:23:
         30:16:3d:f4:0f:bc:d1:f0:ed:6d:ee:85:53:3b:db:2c:e1:bd:
         72:f5:76:50:cf:02:2f:9c:6c:0f:9c:74:67:8d:3f:4a:28:a1:
         58:68:b2:7e:f6:05:b7:f7:72:91:4b:ed:b9:c2:68:75:f5:f3:
         14:25:0b:0a:97:eb:b8:4c:b3:b2:cf:4e:4f:91:a6:de:ca:a2:
         47:a4:60:1d:ad:b5:b5:cc:38:11:34:82:41:f9:3c:a0:38:b2:
         2c:94:cd:87:db:86:43:2e:17:06:cb:cb:c4:98:45:16:5a:8c:
         15:4d:5d:ee:93:7e:6d:e7:a3:50:fa:5b:f2:a8:30:78:20:b7:
         b5:f7:ef:9c:d9:0f:04:ef:42:e4:98:07:44:f8:d6:2a:a6:8a:
         26:24:1f:54:f3:f6:4d:ab:87:8a:94:06:1d:c9:16:0a:5b:47:
         29:5f:56:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 04:04:05 2023 by rpki-client on console-fra.rpki-client.org