Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/323630373a663734303a653633333a3a2f34382d3438203d3e203633393131.roa
File:                     323630373a663734303a653633333a3a2f34382d3438203d3e203633393131.roa (raw, json)
Hash identifier:          8ng/nZHVUEjYBE1zHWUyzFKvR52uKM7Px5Wbm3z4bvI=
Subject key identifier:   79:55:29:40:F8:E1:97:0C:2F:A4:82:01:7E:48:12:8D:4E:F2:F0:97
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       63422640DC6222A49DC23A89D2A53D5545CFB9D1
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/323630373a663734303a653633333a3a2f34382d3438203d3e203633393131.roa
Signing time:             Thu 20 Oct 2022 18:04:59 +0000
ROA not before:           Thu 20 Oct 2022 17:59:59 +0000
ROA not after:            Thu 19 Oct 2023 18:04:59 +0000
asID:                     63911
IP address blocks:        2607:f740:e633::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:42:26:40:dc:62:22:a4:9d:c2:3a:89:d2:a5:3d:55:45:cf:b9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 20 17:59:59 2022 GMT
            Not After : Oct 19 18:04:59 2023 GMT
        Subject: CN=79552940F8E1970C2FA482017E48128D4EF2F097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:33:df:54:ac:04:d6:2b:2b:44:5a:9e:02:
                    f4:0f:97:d1:5c:bc:1a:0e:fd:09:c4:99:1b:8c:85:
                    f8:d0:63:03:47:04:42:79:02:35:df:29:8b:be:f3:
                    6b:0a:7d:25:f3:96:7d:c1:7e:58:cd:f1:49:c9:56:
                    77:25:ab:39:f9:99:42:79:69:21:32:87:8e:de:ff:
                    f7:4b:3d:60:ea:78:ef:fc:d8:a2:fb:71:e0:dd:5a:
                    28:b6:8d:75:86:e1:aa:3a:ed:f3:89:44:b5:9f:42:
                    29:99:5e:88:21:fb:59:86:dd:7f:31:d9:6c:fa:dc:
                    23:e9:3f:9d:8d:3f:b7:ae:ae:6e:e5:44:45:5c:24:
                    ce:b9:26:d5:a0:53:a7:85:2b:be:b1:78:d3:86:83:
                    8c:d7:7d:06:21:64:9f:2b:23:65:d5:43:53:7a:bc:
                    47:41:99:a2:b0:fb:53:1b:c8:0c:4a:76:58:43:cf:
                    dc:23:4e:77:0a:75:32:e3:02:03:c0:d3:c4:b3:4e:
                    8b:f4:b6:c4:d6:41:48:ba:0e:e5:20:1d:6d:ea:01:
                    05:1b:a6:9d:b8:32:bc:cc:33:38:2a:28:14:08:23:
                    16:4b:3e:fd:5c:38:27:97:1a:d1:c7:c0:a9:e6:e6:
                    b5:41:d9:54:cf:4b:00:f9:dd:d3:34:43:11:31:a9:
                    14:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:55:29:40:F8:E1:97:0C:2F:A4:82:01:7E:48:12:8D:4E:F2:F0:97
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/323630373a663734303a653633333a3a2f34382d3438203d3e203633393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f740:e633::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:1f:50:a5:96:9e:64:56:1e:e8:13:95:d6:00:b3:1e:07:4b:
         c7:ff:3f:59:b6:f1:2d:2a:a5:5d:46:3e:eb:5d:43:8c:53:3f:
         09:a2:83:70:c2:e1:81:85:b6:f2:1d:e4:e5:bd:8a:ca:02:ff:
         bb:fc:22:4c:eb:50:30:e0:84:29:b7:50:cf:78:45:e6:5c:1c:
         ea:86:45:d1:3b:62:8f:b4:6e:7c:9b:c3:e1:bf:e3:6a:77:6e:
         10:75:76:6e:64:57:cd:18:7a:cc:e1:a1:c0:27:41:a2:90:a3:
         5d:86:11:b5:fc:b8:98:8e:40:51:52:9c:6f:4d:3f:42:d8:67:
         8e:4b:71:87:75:f1:5a:f4:03:fa:52:eb:3b:69:07:63:2b:db:
         18:c8:8b:cc:e7:a8:23:89:69:e6:19:67:33:70:cf:12:52:f3:
         7b:f2:9d:3b:bd:43:fd:b2:70:93:39:35:1d:84:ba:18:53:16:
         90:56:27:42:8b:b6:91:d2:9a:31:43:3b:03:d3:6e:5e:82:29:
         3b:79:8c:22:60:f3:95:bd:64:cd:88:36:4e:ce:e4:a4:e7:87:
         33:b9:54:ab:17:4c:44:12:3c:ce:53:e8:af:bd:92:8c:78:0d:
         97:bf:c7:57:ce:f7:45:b3:5e:05:d7:6b:83:46:84:44:bd:e6:
         b8:3f:54:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----