Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/0b4a7402-1242-3f3c-9ad0-f35a02e4ebed.roa
File:                     0b4a7402-1242-3f3c-9ad0-f35a02e4ebed.roa (raw, json)
Hash identifier:          2wABSyxXjSH2pm/t3a1xVnVxXkrm307T5mC23DeTZiw=
Subject key identifier:   62:D2:01:B8:A4:1E:90:29:0B:0A:55:C8:6A:1F:7D:3B:FD:82:AD:C5
Certificate issuer:       /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
Certificate serial:       010D0C9F432858470C3D0F6CA983CFE212FCDB00
Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/0b4a7402-1242-3f3c-9ad0-f35a02e4ebed.roa
Signing time:             Fri 30 Aug 2024 12:32:41 +0000
ROA not before:           Fri 30 Aug 2024 12:32:41 +0000
ROA not after:            Thu 28 Nov 2024 13:32:41 +0000
asID:                     46733
IP address blocks:        2602:f9f4:14::/46 maxlen: 46
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0c:3d:0f:6c:a9:83:cf:e2:12:fc:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
        Validity
            Not Before: Aug 30 12:32:41 2024 GMT
            Not After : Nov 28 13:32:41 2024 GMT
        Subject: CN=9a3b18c9-043e-4ac5-a771-12a78c7467bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:86:e2:44:71:25:6f:04:42:b4:6b:94:27:
                    8f:5a:9b:fd:bc:28:a8:ec:67:b1:41:f3:8c:99:7b:
                    8c:4b:d7:ec:19:87:93:c5:9d:2a:da:5a:34:88:5d:
                    26:f9:53:50:40:ba:bd:10:41:e8:07:c8:00:9c:08:
                    64:0b:4e:e4:42:92:85:0a:9c:d1:de:25:e8:2a:00:
                    2a:79:bf:1f:ea:8b:b5:de:60:be:30:db:a7:64:0c:
                    15:7c:18:f9:1b:37:7c:c7:f8:56:15:d3:26:bd:19:
                    2b:ad:17:3d:26:81:16:58:5c:f3:b2:8f:74:45:d8:
                    b4:c7:7d:62:f3:a0:37:74:22:a6:8a:e7:54:74:3f:
                    8a:23:31:52:8d:a0:a0:64:0a:77:91:9c:ad:c8:54:
                    ae:9e:c8:9a:dc:52:67:23:61:53:b1:2e:eb:db:3e:
                    94:57:69:30:4b:d5:e8:a2:83:49:fc:96:9b:a3:13:
                    88:15:76:77:f5:64:92:9b:a2:5a:5d:1b:97:6b:65:
                    c6:ae:66:b4:bd:d9:d1:b3:26:17:e4:b5:e4:d8:57:
                    e2:69:80:cc:a0:4d:bf:86:72:00:63:b6:e4:17:33:
                    cd:42:de:07:71:d8:95:0a:e9:bf:fa:0a:5b:39:28:
                    43:6f:58:87:7a:51:2a:f4:b1:22:77:f0:19:34:c7:
                    1f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D2:01:B8:A4:1E:90:29:0B:0A:55:C8:6A:1F:7D:3B:FD:82:AD:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/0b4a7402-1242-3f3c-9ad0-f35a02e4ebed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl

            X509v3 Authority Key Identifier:
                keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f4:14::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:34:20:fd:78:33:79:ab:9e:a8:70:d7:bb:12:ac:92:60:8c:
         3c:79:3b:f1:c9:c4:42:f8:15:33:3b:a8:ea:af:18:9c:1a:c5:
         41:8d:b2:bc:0a:b5:5f:84:25:ad:55:1e:ed:57:f8:28:01:ca:
         83:4a:ce:7d:e3:f8:a9:19:91:5f:90:54:24:04:5b:9a:65:b5:
         6e:c7:2c:7f:79:ad:75:3d:da:2a:2a:48:03:23:fa:98:f0:73:
         88:7e:48:01:ef:84:17:3a:17:c3:b1:94:f7:dd:57:c4:94:f9:
         e0:70:aa:22:29:4b:f9:3c:a3:e0:f8:8e:99:4e:15:9b:6c:0a:
         c2:d9:21:17:1e:4c:1f:1f:9d:03:05:b2:f4:46:5c:e3:83:8c:
         5e:50:55:6f:0b:b8:26:6a:79:38:43:b8:a0:f1:49:2f:95:f1:
         35:93:c8:eb:0f:6f:06:25:fb:b9:a9:df:49:d4:8e:ae:30:6b:
         4c:55:8d:87:58:01:31:81:31:a8:5a:5a:5e:59:ec:d6:69:47:
         49:26:7c:2f:2e:53:66:4a:94:da:72:6b:7c:9e:5f:60:ca:b0:
         cd:53:0c:b6:99:6f:3a:f0:da:ea:9a:d3:2d:87:ba:cd:be:86:
         c8:f5:32:dd:1f:ec:e8:2a:13:9d:6a:36:8a:82:85:78:e7:0a:
         c3:cb:25:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----