Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53c68106-39f2-412b-bf7e-089bbe80fc42/11ba812f-cd58-343a-b4a9-9df16b0732f8.roa
File:                     11ba812f-cd58-343a-b4a9-9df16b0732f8.roa (raw, json)
Hash identifier:          fstseAQlRCSC19B1SMJZxV50z+5IwKJ6N5BSIi/EBvo=
Subject key identifier:   04:81:6A:6F:1D:83:DF:39:CE:94:5F:21:95:B1:B3:20:17:A4:81:DE
Certificate issuer:       /CN=53c68106-39f2-412b-bf7e-089bbe80fc42
Certificate serial:       010D0C9F43285848B27EC872901889333DD39400
Authority key identifier: D5:17:74:F1:B6:E6:63:80:0D:59:92:75:35:A3:51:9F:5B:B5:D2:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53c68106-39f2-412b-bf7e-089bbe80fc42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53c68106-39f2-412b-bf7e-089bbe80fc42/11ba812f-cd58-343a-b4a9-9df16b0732f8.roa
Signing time:             Tue 28 Jan 2025 18:36:14 +0000
ROA not before:           Tue 28 Jan 2025 18:36:14 +0000
ROA not after:            Mon 28 Apr 2025 17:36:14 +0000
asID:                     40676
IP address blocks:        2604:6600::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b2:7e:c8:72:90:18:89:33:3d:d3:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c68106-39f2-412b-bf7e-089bbe80fc42
        Validity
            Not Before: Jan 28 18:36:14 2025 GMT
            Not After : Apr 28 17:36:14 2025 GMT
        Subject: CN=f219f04e-845b-41b5-bef9-bd1a1d2a8a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ad:1b:4d:4e:19:47:d7:4c:d0:56:35:4b:da:
                    10:7f:53:41:e5:64:78:9a:f3:41:38:5c:89:17:2e:
                    88:64:6e:44:73:41:0b:ef:c9:79:55:52:bc:2a:c4:
                    ea:20:7b:8a:03:a3:73:c8:1a:63:c0:20:5c:7c:d7:
                    02:f8:97:03:0d:9a:7d:85:f4:25:81:1e:4c:fc:b4:
                    ea:c7:2b:a8:de:c1:e9:f6:5d:c3:39:fa:68:1f:cd:
                    4b:c3:59:e3:7b:79:b9:e9:ff:49:5e:cc:63:30:df:
                    b5:4b:8c:2f:43:30:ef:9b:84:18:51:62:fd:fd:26:
                    b7:12:37:72:40:e3:62:60:24:c2:a7:e3:df:5a:d1:
                    6f:2a:fd:6a:b4:41:b9:33:3d:85:a2:e6:0e:c6:7d:
                    02:63:6d:7e:9a:a8:51:90:f9:ac:6f:93:d9:75:ca:
                    8b:2e:07:35:f8:63:61:fd:1c:10:c2:0c:3b:37:6c:
                    f9:a8:19:21:34:e0:b9:16:38:74:92:ee:6a:d6:be:
                    33:bc:50:72:34:cf:bd:05:77:88:f2:f5:0d:08:f6:
                    cc:1e:f8:df:8a:1e:0c:96:78:40:0c:d7:ff:3b:96:
                    4b:df:21:56:97:c9:20:68:d8:ec:23:00:68:f5:ca:
                    c6:07:7d:dc:c8:b5:5e:d3:af:fc:ef:0b:14:13:d3:
                    bd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:81:6A:6F:1D:83:DF:39:CE:94:5F:21:95:B1:B3:20:17:A4:81:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53c68106-39f2-412b-bf7e-089bbe80fc42/11ba812f-cd58-343a-b4a9-9df16b0732f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53c68106-39f2-412b-bf7e-089bbe80fc42/53c68106-39f2-412b-bf7e-089bbe80fc42.crl

            X509v3 Authority Key Identifier:
                keyid:D5:17:74:F1:B6:E6:63:80:0D:59:92:75:35:A3:51:9F:5B:B5:D2:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/53c68106-39f2-412b-bf7e-089bbe80fc42.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:6600::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:2f:23:ad:78:80:53:d5:6f:df:22:c1:a1:5c:f0:af:94:3f:
         db:51:bf:1b:fc:8c:8e:39:7b:f0:e5:75:26:06:68:91:68:2e:
         f5:7c:c5:9b:23:eb:9c:c6:66:dc:5b:9f:f9:96:97:86:b8:03:
         7a:38:4c:c5:c8:41:3c:8a:53:76:bc:d7:ed:d2:f0:02:3a:41:
         7a:d3:c8:c7:bf:f0:15:59:7f:6b:f7:10:f9:8b:96:49:56:e2:
         b0:fc:99:b8:09:7c:f0:10:f3:9a:93:9a:31:2e:6f:ad:a9:62:
         29:b9:51:ee:be:7b:85:26:0d:b4:a3:5d:c4:8a:2a:19:ce:ca:
         77:3e:8b:72:26:95:24:3a:02:de:9d:71:ea:96:ab:d3:52:db:
         d0:9f:8d:62:a9:0a:e8:6d:6a:25:4c:25:81:e7:d6:2f:42:a6:
         75:b9:0d:57:28:30:e7:54:2d:40:23:f6:6e:cf:b1:ba:65:44:
         99:c5:34:7b:26:64:10:1c:e1:e1:b7:ac:bf:f7:c4:e3:48:66:
         4e:5d:61:15:28:35:0a:52:3c:d7:53:90:0c:a3:f0:e3:6f:3d:
         7a:35:a6:fe:f1:1a:fd:1f:ff:fc:d0:5c:a1:93:df:37:b0:b9:
         f6:bf:de:3d:f4:87:bb:cb:e0:4a:f9:70:10:25:06:01:d0:fc:
         5d:ac:21:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----