Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/2ca9ae16-8082-3d53-86ec-a69bff3ddc20.roa
File:                     2ca9ae16-8082-3d53-86ec-a69bff3ddc20.roa (raw, json)
Hash identifier:          iVwFdk83Bl6YuU/3+Vzhil2AWSisUWhBqD0D4I3FYnw=
Subject key identifier:   7A:B1:15:0E:F1:B4:70:1A:D0:35:11:98:87:4B:DC:BA:99:61:EC:9F
Certificate issuer:       /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial:       010D0C9F4328583C339F0BB121A08C864BDACA00
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/2ca9ae16-8082-3d53-86ec-a69bff3ddc20.roa
Signing time:             Thu 11 Nov 2021 05:00:00 +0000
ROA not before:           Thu 11 Nov 2021 05:00:00 +0000
ROA not after:            Mon 13 Mar 2023 04:00:00 +0000
asID:                     399728
IP address blocks:        2620:98:e008::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:33:9f:0b:b1:21:a0:8c:86:4b:da:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
        Validity
            Not Before: Nov 11 05:00:00 2021 GMT
            Not After : Mar 13 04:00:00 2023 GMT
        Subject: CN=0452e9b4-434b-471b-9e8d-ea5ad18c9630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:a7:f9:43:a5:be:01:90:cd:24:9d:02:2c:
                    9a:98:66:a1:e8:23:f1:78:a6:a5:60:bd:bc:cb:3e:
                    a3:c6:87:db:71:cf:de:53:01:3b:ec:75:e8:f4:84:
                    5b:98:fe:d8:0d:28:ee:df:02:22:21:50:7e:90:28:
                    04:8c:10:44:97:2d:9d:9d:7e:f1:34:42:1e:e6:7f:
                    c7:86:8f:49:15:8d:3c:3b:ad:ae:13:64:a4:ac:cf:
                    ca:b8:08:e8:02:c1:b5:7f:2e:80:f2:0c:c0:0e:72:
                    65:74:4a:3c:15:db:d8:9c:c5:af:57:a5:96:05:2e:
                    1f:ef:1b:ed:b8:c8:fb:80:fd:30:a2:93:b7:b7:a7:
                    47:42:54:6e:20:3f:70:b1:a3:f8:ad:e0:49:af:12:
                    53:8b:2d:d1:95:f5:ea:33:d1:43:d2:9c:0e:5f:56:
                    19:fa:40:24:7d:0a:6b:88:d3:c0:ed:51:10:a5:d2:
                    88:d9:ea:85:03:b1:4a:b2:ef:ed:1c:06:83:45:c6:
                    25:5d:c5:c2:9f:e3:8a:a8:fd:f6:8c:4f:dc:a6:0f:
                    65:29:29:bf:bc:f7:23:ef:84:b7:67:a3:b7:b3:a5:
                    42:ab:fc:b0:df:32:36:c5:83:8c:26:53:66:d3:91:
                    5a:44:17:78:72:b1:41:9a:d3:0b:37:bd:31:f8:78:
                    2e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B1:15:0E:F1:B4:70:1A:D0:35:11:98:87:4B:DC:BA:99:61:EC:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/2ca9ae16-8082-3d53-86ec-a69bff3ddc20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl

            X509v3 Authority Key Identifier:
                keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:98:e008::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:16:e5:45:a5:78:e7:5c:53:b2:d2:b7:cb:6e:cd:ab:b6:67:
         8f:72:fc:33:4c:71:8f:53:b4:42:e5:45:f8:41:11:49:66:53:
         50:3a:66:3f:4c:57:4c:2b:54:59:46:45:5a:a0:1a:13:15:e2:
         b8:eb:b0:00:8f:df:ba:d0:d2:38:90:a0:34:eb:c6:c7:cd:36:
         af:5e:98:3a:87:71:ce:ae:46:29:ca:90:ec:28:8b:27:7d:d4:
         76:c3:6a:b6:76:1b:3c:1f:1d:6e:4d:fd:f2:5e:21:e4:30:01:
         ca:92:67:c9:5a:32:3a:a5:37:99:30:93:61:1f:bc:af:26:6d:
         42:4c:96:9a:05:bb:19:7d:d6:e0:71:17:f7:80:82:c3:7c:d7:
         b5:58:79:0f:cd:da:10:23:f6:25:b4:bf:60:c7:76:6a:19:a9:
         e6:a8:3c:10:61:7b:59:10:b7:55:6c:e1:9c:3f:f9:f7:00:b4:
         17:81:a9:d3:bd:80:01:79:24:c8:1e:69:28:3b:c0:cb:e8:ad:
         db:c2:f9:8a:fa:f5:78:cb:d4:31:b0:42:52:87:8b:d1:06:f2:
         a0:9d:05:c2:73:19:07:b0:3b:b0:d1:9d:52:0a:97:02:53:1a:
         04:e5:46:a6:26:e9:02:f9:f0:6f:92:ec:ad:4e:ae:d3:e3:a6:
         be:90:52:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----