Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/908033a8-2b64-357c-8bc1-7cca1093b0d5.roa
File:                     908033a8-2b64-357c-8bc1-7cca1093b0d5.roa (raw, json)
Hash identifier:          vClTh6Ped+NFqQcs5w2lp2mGJ2XiU3nQZ2uehW+ZRfU=
Subject key identifier:   90:BA:9A:94:48:08:A6:8F:04:EA:56:A3:3C:C0:F9:80:4C:D6:B2:6B
Certificate issuer:       /CN=6c7a9179-b71c-4608-b6ad-37c021ece676
Certificate serial:       010D0C9F4328583CA60F23ADF84B80D5063FEF80
Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/908033a8-2b64-357c-8bc1-7cca1093b0d5.roa
Signing time:             Wed 19 Jan 2022 05:00:00 +0000
ROA not before:           Wed 19 Jan 2022 05:00:00 +0000
ROA not after:            Thu 19 Jan 2023 05:00:00 +0000
asID:                     20473
IP address blocks:        2602:fbd9::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:a6:0f:23:ad:f8:4b:80:d5:06:3f:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676
        Validity
            Not Before: Jan 19 05:00:00 2022 GMT
            Not After : Jan 19 05:00:00 2023 GMT
        Subject: CN=76e9136f-9f41-4bc2-9ab1-70222a237139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:de:b7:f9:ce:f3:0d:93:73:1d:29:ef:95:
                    45:be:77:66:14:b8:fd:db:29:6c:29:7a:f0:37:03:
                    cc:fd:34:aa:53:4f:40:7b:21:50:93:7c:69:3d:63:
                    d0:1e:d9:f4:8b:e8:1a:d4:fe:ec:e6:4b:1a:ac:6a:
                    56:de:6f:e2:a6:b7:2b:13:ed:77:65:1c:ce:34:44:
                    0a:8c:08:b7:85:fd:11:b5:e6:0f:7b:12:ae:1f:ec:
                    e9:7e:7e:70:b4:2a:73:96:76:c7:1c:eb:54:90:bd:
                    ba:3f:21:ec:1a:dc:eb:cb:d5:a5:94:60:a4:d7:43:
                    12:36:72:07:e5:d8:fe:81:fb:31:30:b6:ec:a4:24:
                    1b:4c:25:8b:7c:90:9b:35:d5:59:c3:39:10:ff:bc:
                    2e:ce:49:4a:4d:d3:47:ce:41:ce:9d:2b:26:3e:9c:
                    56:f5:29:76:70:b1:f2:13:f5:0d:5e:53:d0:59:02:
                    11:b4:b8:bd:8a:5c:b5:ef:99:ce:22:6e:6e:66:18:
                    b8:47:03:ab:48:12:03:d5:08:76:6c:29:7d:9e:3a:
                    4a:71:ca:d1:b4:4b:67:e1:33:ec:de:21:8b:4f:ce:
                    44:a3:69:55:c8:f2:5e:da:f9:b8:8b:46:b3:2b:25:
                    27:f9:db:09:da:ca:f0:a5:8f:11:ef:e8:3b:24:5d:
                    c6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BA:9A:94:48:08:A6:8F:04:EA:56:A3:3C:C0:F9:80:4C:D6:B2:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/908033a8-2b64-357c-8bc1-7cca1093b0d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl

            X509v3 Authority Key Identifier:
                keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbd9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:11:b5:e5:cf:8a:5f:4a:33:13:1b:61:24:83:4e:84:47:f7:
         86:8d:e2:fa:a4:c8:f5:56:e5:e1:74:58:ad:c3:f3:2d:40:65:
         f0:a4:f3:59:86:16:4b:8e:6b:4e:19:62:fe:4e:54:07:28:34:
         df:c9:84:8b:ae:72:83:fe:2a:67:ab:b6:eb:21:fb:49:d9:3a:
         c3:3d:67:61:69:f1:d3:eb:ee:37:1b:a7:8c:e7:f6:71:ad:28:
         75:57:be:0a:a8:2b:72:f3:8d:4b:82:ec:c9:e9:4e:e3:e2:89:
         40:a2:69:e1:ef:5c:f9:3d:9f:73:f8:11:90:f3:a3:19:f0:a3:
         59:04:1b:57:bc:fc:a9:47:98:a4:3a:57:00:be:bd:95:60:de:
         89:cb:d8:b1:76:3e:fe:3a:c6:0a:34:ae:3e:f3:26:46:a4:f0:
         b3:3a:ef:4e:f8:d0:5f:7f:4c:e9:d1:bb:f4:aa:81:5a:af:a5:
         82:a1:06:f2:1d:2a:86:b5:cb:72:d5:44:11:bb:d6:a2:19:28:
         fe:33:d7:da:aa:f5:84:19:03:a1:cd:ac:a4:cd:eb:a4:be:cf:
         6f:dc:ef:b2:0b:ea:de:26:4e:85:38:79:d8:62:fb:62:21:0f:
         19:e0:73:15:d3:3c:a7:84:7d:58:c0:58:2c:2e:1f:f7:b2:25:
         90:a7:32:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----