Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/96d0a4f3-d1cc-3621-8c92-14c6a8766e0f.roa
File:                     96d0a4f3-d1cc-3621-8c92-14c6a8766e0f.roa (raw, json)
Hash identifier:          F1So1scdlX1/DDaPN0rAViChc1zMayKZ2RgE4V64hGM=
Subject key identifier:   B4:16:6C:5F:FF:67:E2:EA:1E:D4:D8:F2:46:68:A6:F4:86:28:50:26
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328583E53FB02607DCF7C43AC41E600
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/96d0a4f3-d1cc-3621-8c92-14c6a8766e0f.roa
Signing time:             Fri 31 Dec 2021 12:00:00 +0000
ROA not before:           Fri 31 Dec 2021 12:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     970
IP address blocks:        2605:f440:5652::/47 maxlen: 47

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:53:fb:02:60:7d:cf:7c:43:ac:41:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Dec 31 12:00:00 2021 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=f4671651-351f-4b92-ae13-14d5dc6e36d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f5:e9:b0:3d:43:06:b3:09:a2:05:33:68:9c:
                    90:4a:21:17:65:dd:9b:3a:c1:13:8a:44:e7:fc:31:
                    df:a2:32:a2:12:f4:5e:69:46:de:63:45:4b:79:e9:
                    aa:7a:0f:6e:eb:33:a4:b9:2c:76:f9:b5:31:50:97:
                    10:71:8c:bc:d3:ad:d4:87:8c:af:cd:9b:f7:6b:6d:
                    51:f6:2e:93:a1:66:7b:a4:99:92:39:44:94:53:13:
                    7e:05:1e:29:85:03:0f:f0:d0:7e:48:ab:fb:1e:d7:
                    c4:24:55:9a:61:d2:3b:2f:10:d0:61:cf:69:d4:65:
                    b1:85:b1:be:74:7b:ba:43:cc:1e:26:99:13:77:5c:
                    e8:1e:bf:86:c9:2f:15:01:46:53:b4:d5:3f:c4:47:
                    8f:29:69:25:ea:37:0f:ca:2a:27:a7:e5:06:66:57:
                    89:cd:92:1f:f6:74:28:87:a0:52:86:2b:19:e1:2d:
                    5f:c1:9c:ed:ea:ff:5d:00:dc:1e:34:f6:2a:28:1e:
                    be:e3:15:ac:25:84:b3:47:9f:86:9a:37:1f:22:13:
                    23:57:9d:e4:f4:69:55:d3:aa:94:0f:03:8a:ea:4b:
                    db:67:0f:af:37:d9:3f:ae:22:80:8a:c4:43:a3:7f:
                    ba:24:a6:3b:f5:28:96:8f:ce:45:1d:cc:4a:18:f3:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:16:6C:5F:FF:67:E2:EA:1E:D4:D8:F2:46:68:A6:F4:86:28:50:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/96d0a4f3-d1cc-3621-8c92-14c6a8766e0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5652::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:73:be:03:9b:48:a9:55:6e:cd:71:83:85:a1:cb:a2:89:75:
         aa:9e:34:af:fe:e9:e2:f1:99:99:e6:9f:9d:84:99:12:41:e4:
         cf:45:e9:c4:96:92:bd:05:bd:db:77:c5:4b:e4:ac:8b:7f:6d:
         ea:36:a6:fe:82:60:b1:f0:0f:31:31:fa:71:61:52:e2:74:a8:
         c3:e6:61:0b:db:7e:41:eb:d5:b3:b6:0c:bd:c8:7e:ef:e3:b8:
         80:5a:f1:0a:42:93:31:c7:41:b9:cd:96:2c:23:c5:9c:87:26:
         a5:bf:58:77:52:03:59:b8:dd:18:52:f6:27:40:64:d8:d3:ac:
         13:0b:09:9c:92:f0:1a:b0:31:46:8e:b4:1c:f0:de:03:ea:36:
         99:10:9b:49:9d:e8:a2:df:2c:31:ef:db:f5:8a:5f:65:0a:01:
         ea:48:42:d6:3a:5c:11:e1:bd:60:fb:af:7d:17:3b:e4:c8:15:
         65:5b:c6:ec:41:0b:ee:26:42:f3:41:96:a8:86:95:a0:87:b8:
         16:0c:73:16:8a:7e:41:4b:a3:28:f5:d0:69:3d:e2:ee:c3:26:
         98:59:28:94:4a:c9:cc:c6:47:2e:69:cf:ce:62:a0:fa:db:8b:
         eb:43:d0:84:6f:b3:87:7c:88:dc:48:12:27:aa:b8:73:f7:6b:
         ff:3a:17:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----