Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/646a93e3-444f-3105-99f8-96464a76b611.roa
File:                     646a93e3-444f-3105-99f8-96464a76b611.roa (raw, json)
Hash identifier:          pp+CAOJH0rFBS1tXjgoYABVpF/I+WICwk1zenw+NvA8=
Subject key identifier:   85:D2:15:A6:2E:1B:B7:86:8E:D9:10:B4:DF:4C:32:FD:52:88:EA:E2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583C4219F46B36A83EBBC880EE40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/646a93e3-444f-3105-99f8-96464a76b611.roa
Signing time:             Tue 14 Dec 2021 05:00:00 +0000
ROA not before:           Tue 14 Dec 2021 05:00:00 +0000
ROA not after:            Sun 17 Mar 2024 04:00:00 +0000
asID:                     36040
IP address blocks:        2001:4860:1025::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:42:19:f4:6b:36:a8:3e:bb:c8:80:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Dec 14 05:00:00 2021 GMT
            Not After : Mar 17 04:00:00 2024 GMT
        Subject: CN=ba7aec36-e1e7-4a91-82f2-4f6f23958f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:53:1b:f2:9b:b9:33:28:12:32:98:de:7f:ff:
                    1b:ef:40:04:a1:d0:af:bc:e8:d8:46:f1:0a:c7:89:
                    d9:5a:33:4a:01:a4:4b:ff:f8:8c:3e:7b:dc:d2:89:
                    41:e3:4f:7e:f7:d6:39:e9:80:8e:e0:d4:85:44:82:
                    ba:af:b5:da:23:f8:28:f7:c7:71:c7:bb:b5:0e:67:
                    a5:7f:6a:10:ec:40:5c:dc:47:37:e5:75:eb:8b:50:
                    c0:ff:7c:c8:95:72:d7:59:c4:ab:3d:e4:0a:a6:5d:
                    23:62:34:b5:50:4f:ff:f2:67:ba:71:99:4c:9a:06:
                    7d:b8:c0:c0:14:f2:f8:fb:35:52:a9:e1:0c:a3:3f:
                    b1:a6:95:d6:aa:5d:a9:e7:92:cd:c8:53:51:b5:b1:
                    a9:5a:e1:0a:88:de:2b:75:09:b6:a7:da:c1:7d:7b:
                    65:cb:45:0a:7d:7e:41:62:2d:01:c2:3e:b5:5d:24:
                    e5:c9:17:4b:1c:a1:f4:81:c5:f5:06:b2:da:a4:90:
                    41:1c:91:10:7d:75:f3:ed:b4:17:08:4c:9b:80:df:
                    8c:13:a2:1c:f6:be:9a:e2:53:b8:cb:6a:56:79:19:
                    2f:bb:4d:4a:ec:35:d4:61:ea:7f:26:4b:28:98:fb:
                    d9:54:66:88:8f:df:7e:c7:40:4c:47:b8:bd:59:91:
                    a4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D2:15:A6:2E:1B:B7:86:8E:D9:10:B4:DF:4C:32:FD:52:88:EA:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/646a93e3-444f-3105-99f8-96464a76b611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4860:1025::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:81:64:7a:e1:c2:d7:53:43:58:8e:c3:8c:ef:ba:9e:04:c8:
         91:3c:81:34:83:c5:fe:17:a5:38:ee:5a:19:e8:2a:fc:53:40:
         3a:38:23:4b:d7:f8:e4:13:f7:3e:57:c7:00:2e:6c:b2:ea:5e:
         d2:4e:84:2a:72:d8:6b:1d:b0:65:61:bd:50:ad:f9:81:a6:97:
         9d:63:a4:e9:21:c6:9a:03:c9:59:17:83:25:c7:ab:50:ae:04:
         32:a8:51:80:d8:f6:91:76:26:de:39:9e:3f:4b:66:24:c8:bd:
         99:65:a2:55:33:e3:79:71:86:22:3c:ab:a9:54:26:f8:30:8a:
         c7:14:39:ce:26:8b:30:db:bf:2e:6b:ca:a8:46:fd:d2:94:df:
         9d:b4:4a:74:f8:bd:fb:e6:4a:8d:85:b0:cc:ee:ef:9e:28:37:
         f3:67:59:40:34:bc:fd:75:17:77:b2:a0:62:f6:8b:f1:2a:66:
         03:3f:04:9d:08:c8:9a:60:ac:fc:ca:6e:d6:ca:e7:c2:81:f3:
         3c:ea:66:20:1c:b1:26:c9:62:8c:03:eb:3b:4b:9d:31:21:41:
         42:97:4c:c2:4a:f1:70:38:4d:58:2f:9c:a6:74:0f:44:b1:74:
         89:8d:03:71:a1:95:2b:f9:d7:34:d7:7a:97:85:4e:96:1a:e9:
         4e:24:0b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----