Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/5453cdb0-7a18-3777-973a-1db5f4023dc3.roa
File:                     5453cdb0-7a18-3777-973a-1db5f4023dc3.roa (raw, json)
Hash identifier:          gJ12EPemsmBbC7J+j9WLgOSrxhhLzAKL6J318YtmKjI=
Subject key identifier:   95:3F:98:37:7E:36:13:8B:03:85:C4:A9:7E:46:B1:93:B9:FE:1A:B3
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328583B6790FB1BA3D4D90BADF3BA40
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/5453cdb0-7a18-3777-973a-1db5f4023dc3.roa
Signing time:             Thu 09 Sep 2021 04:00:00 +0000
ROA not before:           Thu 09 Sep 2021 04:00:00 +0000
ROA not after:            Sat 15 Oct 2022 04:00:00 +0000
asID:                     210734
IP address blocks:        2602:fd50:1100::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:67:90:fb:1b:a3:d4:d9:0b:ad:f3:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Sep  9 04:00:00 2021 GMT
            Not After : Oct 15 04:00:00 2022 GMT
        Subject: CN=fe38f0a1-0331-4c00-be69-3357620ff7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:d8:49:f6:0a:bf:d4:f2:d8:3e:68:45:53:
                    9b:a7:e6:d7:76:d3:9a:a4:41:42:65:0a:3f:d5:15:
                    b1:06:ad:5a:2a:e3:26:8e:65:83:25:23:55:96:05:
                    af:5d:2c:2a:d2:5e:10:4c:73:42:fb:8e:89:ab:b2:
                    b3:2c:36:6e:e7:48:db:4a:4f:90:53:64:19:26:a7:
                    ef:a7:41:cf:70:d6:61:7f:8c:af:89:c0:93:dd:53:
                    b7:c1:de:50:9f:5f:ea:20:80:3a:1b:59:22:f7:8c:
                    74:79:e8:0e:fe:f9:78:61:4a:6d:04:e4:c0:a3:88:
                    0f:21:37:17:a4:32:05:4c:66:ea:ac:b7:ac:ff:3c:
                    48:3a:2d:a4:c2:14:74:08:5b:89:c6:12:a5:6a:48:
                    fd:ab:7b:69:cc:87:bc:6b:ed:34:93:51:e3:f0:7c:
                    a4:76:6f:6b:4f:d1:9b:a1:db:72:a7:40:45:cb:83:
                    2f:fd:42:7f:29:ff:9c:92:82:0e:0a:78:f8:68:6d:
                    64:b0:3a:5b:97:1e:7b:8b:00:41:82:0b:c1:f3:15:
                    02:c1:3d:c7:d8:10:50:7e:97:b7:c5:99:09:1c:08:
                    af:47:36:45:bf:62:9c:6b:27:d8:79:24:d6:8c:30:
                    6e:38:11:5c:84:df:0b:99:e9:58:8b:d2:42:a7:3f:
                    4d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3F:98:37:7E:36:13:8B:03:85:C4:A9:7E:46:B1:93:B9:FE:1A:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/5453cdb0-7a18-3777-973a-1db5f4023dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd50:1100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:5f:c1:8e:36:d4:ed:05:c3:a6:bb:08:36:d8:cf:e6:fa:68:
         8e:24:49:4b:de:cf:3b:bf:a8:4f:e5:db:91:43:6e:0f:28:05:
         73:52:3d:f1:64:94:67:20:f7:8f:ab:eb:2b:ca:ea:17:1f:ce:
         94:02:d1:0e:c2:05:1c:4c:0e:49:90:44:6f:38:5a:df:7f:cd:
         c4:f9:ba:0b:3e:cf:3a:6f:82:ad:38:27:5a:86:26:14:23:e2:
         fe:f0:e4:72:83:5a:a4:0a:2c:20:5e:24:fc:af:1f:3f:b7:3a:
         8d:bc:d3:42:23:81:85:fc:4a:2e:95:55:0f:3f:c8:6c:25:23:
         b3:30:46:22:46:82:6a:cd:9f:ef:54:e0:06:e0:b5:dc:6b:51:
         48:9b:a0:7b:55:b3:2b:4c:eb:ef:7a:4d:53:f0:f0:d2:56:47:
         a5:0c:ac:00:c7:fe:6f:a3:97:6a:36:02:7b:f8:52:29:3c:c2:
         76:3b:75:4c:f9:c9:44:07:c2:d9:bc:6a:de:9d:35:89:54:2e:
         5e:9a:b2:c2:c4:41:8b:50:52:a9:b8:7d:56:1c:4a:db:81:5f:
         f4:85:ab:e4:a1:4e:45:78:e8:57:ad:19:f0:de:46:1e:55:05:
         7c:f8:2b:9a:64:73:80:9c:d8:46:58:57:1c:1c:21:24:a2:bc:
         f5:34:0d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----