Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3a2f33362d3438203d3e203631333137.roa
File:                     323630323a666636323a3a2f33362d3438203d3e203631333137.roa (raw, json)
Hash identifier:          2SNaf2nFBJwgA/r0VZOcc/BfM9OLNoQ0vKQHFDvHxig=
Subject key identifier:   D5:51:1A:78:5A:6B:9B:EE:36:F3:65:59:6F:5A:E4:C2:1B:E8:59:C8
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       16637539C89B23432981A26A6D9590374BCDBEAA
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3a2f33362d3438203d3e203631333137.roa
Signing time:             Mon 28 Nov 2022 11:39:19 +0000
ROA not before:           Mon 28 Nov 2022 11:34:19 +0000
ROA not after:            Mon 27 Nov 2023 11:39:19 +0000
asID:                     61317
IP address blocks:        2602:ff62::/36 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:63:75:39:c8:9b:23:43:29:81:a2:6a:6d:95:90:37:4b:cd:be:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Nov 28 11:34:19 2022 GMT
            Not After : Nov 27 11:39:19 2023 GMT
        Subject: CN=D5511A785A6B9BEE36F365596F5AE4C21BE859C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:1b:6d:97:1f:54:eb:c9:c2:88:ec:1b:70:
                    42:46:6b:bd:c8:9c:32:09:f1:29:a4:28:72:8e:1d:
                    05:1c:32:19:a4:0f:95:87:39:37:2e:a1:c3:26:45:
                    7b:d5:08:b9:ab:69:91:19:12:75:c5:99:0a:8a:d4:
                    e2:20:4c:c5:8d:9e:d7:1f:28:10:31:ef:99:2f:d5:
                    00:6a:4c:0d:f1:48:d2:f1:44:77:92:e4:ce:f4:b2:
                    c9:f4:77:70:d1:00:ba:02:8f:8e:c4:68:de:b8:d7:
                    36:41:d4:c5:4f:57:69:7e:2a:4e:72:ed:f9:27:df:
                    9e:57:dd:ed:0d:c5:0b:d1:4c:5b:35:e8:d0:b5:c5:
                    a5:f0:2f:ae:bb:0f:c0:90:4f:6f:0a:5a:4d:b4:15:
                    a4:15:35:c9:6e:a4:eb:c0:ea:d9:fd:66:c4:f0:88:
                    d9:76:1a:fb:2a:e0:94:49:13:e0:5b:d9:72:36:de:
                    89:dd:4c:13:5c:e9:7f:56:e5:8c:a7:70:aa:59:5d:
                    9e:d1:c0:c4:cd:44:ac:da:7a:de:e2:3a:f4:be:b2:
                    82:a8:22:d5:4a:ee:a9:f0:2b:7d:ad:23:63:55:9c:
                    f8:69:b0:50:64:5c:29:d0:ec:79:9e:ea:02:66:0b:
                    7f:42:90:68:92:31:a5:a1:79:f1:c0:7e:b2:61:07:
                    e1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:51:1A:78:5A:6B:9B:EE:36:F3:65:59:6F:5A:E4:C2:1B:E8:59:C8
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3a2f33362d3438203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62::/36

    Signature Algorithm: sha256WithRSAEncryption
         b9:66:c5:67:19:88:f5:5c:eb:ae:2d:54:8a:06:8b:56:fd:3d:
         93:ab:e9:63:cb:c2:0d:96:24:5b:3b:f4:07:f6:67:2f:ae:26:
         c1:51:5d:ec:72:42:94:45:fd:c1:df:60:5e:a6:4a:40:43:d5:
         a6:52:63:b8:81:e0:f2:8d:c4:8f:08:05:84:e9:f4:4d:f4:37:
         ac:f8:d1:7b:81:98:10:23:f9:77:db:a4:c1:5f:2f:aa:8f:2a:
         04:50:25:ce:f7:f2:46:97:53:dc:08:d4:b5:19:3b:e1:6d:31:
         a9:49:48:e2:42:07:be:79:ac:78:3e:60:4a:cf:7e:b5:9e:24:
         4f:ff:69:fa:7a:01:0a:fd:d0:79:1b:5e:32:1e:98:8f:6b:1a:
         31:a9:c4:d4:5e:a2:4e:f8:3b:41:07:82:ff:2f:09:da:fc:72:
         5b:e1:91:3c:1b:c4:70:2f:02:bd:39:08:de:7d:6c:f5:54:76:
         3e:12:56:3f:51:62:88:93:b4:6c:c8:d2:74:b0:2f:81:64:54:
         15:65:87:f9:cf:6a:af:fa:4f:28:b2:1c:a0:0f:3d:7f:2e:bf:
         6b:3e:2e:ad:6d:2b:34:57:b4:fa:f9:a1:8b:41:50:86:8b:3b:
         bc:e7:17:6f:2d:30:a7:56:b7:e7:4f:57:a1:86:14:74:4b:5b:
         07:17:4a:6c
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUFmN1OcibI0MpgaJqbZWQN0vNvqowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjIxMTI4MTEzNDE5WhcNMjMxMTI3MTEzOTE5
WjAzMTEwLwYDVQQDEyhENTUxMUE3ODVBNkI5QkVFMzZGMzY1NTk2RjVBRTRDMjFC
RTg1OUM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyQbbZcfVOvJ
wojsG3BCRmu9yJwyCfEppChyjh0FHDIZpA+Vhzk3LqHDJkV71Qi5q2mRGRJ1xZkK
itTiIEzFjZ7XHygQMe+ZL9UAakwN8UjS8UR3kuTO9LLJ9Hdw0QC6Ao+OxGjeuNc2
QdTFT1dpfipOcu35J9+eV93tDcUL0UxbNejQtcWl8C+uuw/AkE9vClpNtBWkFTXJ
bqTrwOrZ/WbE8IjZdhr7KuCUSRPgW9lyNt6J3UwTXOl/VuWMp3CqWV2e0cDEzUSs
2nre4jr0vrKCqCLVSu6p8Ct9rSNjVZz4abBQZFwp0Ox5nuoCZgt/QpBokjGloXnx
wH6yYQfhXQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFNVRGnhaa5vuNvNlWW9a5MIb
6FnIMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhM2EyZjMzMzYyZDM0Mzgy
MDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQmAv9iADANBgkqhkiG9w0BAQsF
AAOCAQEAuWbFZxmI9Vzrri1UigaLVv09k6vpY8vCDZYkWzv0B/ZnL64mwVFd7HJC
lEX9wd9gXqZKQEPVplJjuIHg8o3EjwgFhOn0TfQ3rPjRe4GYECP5d9ukwV8vqo8q
BFAlzvfyRpdT3AjUtRk74W0xqUlI4kIHvnmseD5gSs9+tZ4kT/9p+noBCv3QeRte
Mh6Yj2saManE1F6iTvg7QQeC/y8J2vxyW+GRPBvEcC8CvTkI3n1s9VR2PhJWP1Fi
iJO0bMjSdLAvgWRUFWWH+c9qr/pPKLIcoA89fy6/az4urW0rNFe0+vmhi0FQhos7
vOcXby0wp1a3509XoYYUdEtbBxdKbA==
-----END CERTIFICATE-----