Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a38373a3a2f34382d3438203d3e20343030383137.roa
File:                     323630323a3239363a38373a3a2f34382d3438203d3e20343030383137.roa (raw, json)
Hash identifier:          ft5oZjnEtbsMJCWo+L3WzJfdb2lohTADnfKDxnL69gg=
Subject key identifier:   3F:C0:B5:02:A7:5B:DB:52:DA:B9:B6:00:83:32:CD:5F:CE:FE:80:38
Certificate issuer:       /CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
Certificate serial:       2F0F13D029798CF3781D2AC315D064578BE76E6C
Authority key identifier: 18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a38373a3a2f34382d3438203d3e20343030383137.roa
Signing time:             Thu 23 Mar 2023 12:23:04 +0000
ROA not before:           Thu 23 Mar 2023 12:18:04 +0000
ROA not after:            Thu 21 Mar 2024 12:23:04 +0000
asID:                     400817
IP address blocks:        2602:296:87::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:0f:13:d0:29:79:8c:f3:78:1d:2a:c3:15:d0:64:57:8b:e7:6e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
        Validity
            Not Before: Mar 23 12:18:04 2023 GMT
            Not After : Mar 21 12:23:04 2024 GMT
        Subject: CN=3FC0B502A75BDB52DAB9B6008332CD5FCEFE8038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:75:74:c6:10:82:69:0c:b2:bd:66:b2:61:ee:
                    82:84:54:45:50:b8:18:ca:97:60:31:b5:e3:ad:5a:
                    0f:1f:64:71:45:70:91:b4:57:f7:87:12:9a:02:b7:
                    7f:b2:fe:34:31:0c:3c:f7:d0:fc:1f:09:2b:fe:57:
                    02:d2:74:fc:07:7c:16:b6:a7:3f:85:01:90:21:42:
                    7a:bc:16:5e:f4:d1:e1:26:ee:9b:14:93:dd:c4:75:
                    73:7d:1a:5d:d9:3f:b7:d5:24:d4:bd:19:0b:b2:08:
                    f5:97:c8:f9:d1:57:d4:f6:e0:26:b6:67:5a:ea:1b:
                    60:f3:02:88:a9:67:69:80:33:2d:7b:b9:5e:76:7e:
                    61:5e:a0:39:57:dd:9e:83:17:e1:59:03:27:46:4d:
                    43:82:2f:4e:18:ec:4d:fe:31:43:ff:70:65:ed:85:
                    40:65:e1:1d:09:e0:5b:dc:7c:5a:1f:50:2d:cd:ce:
                    67:29:94:00:50:81:96:e5:b3:e4:9f:19:de:14:fa:
                    90:d9:71:22:d0:53:f6:26:5e:d2:05:2a:9a:12:d9:
                    16:4e:01:72:8d:29:9a:bc:75:35:74:b7:a7:8e:ac:
                    39:32:b9:a0:73:32:58:9d:67:bc:b8:7a:3b:5d:90:
                    e1:12:72:0c:76:ab:fb:a6:f8:97:9c:d7:20:3c:cf:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C0:B5:02:A7:5B:DB:52:DA:B9:B6:00:83:32:CD:5F:CE:FE:80:38
            X509v3 Authority Key Identifier:
                keyid:18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a38373a3a2f34382d3438203d3e20343030383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:296:87::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:c3:a5:d6:9f:ed:8b:b1:fd:7c:58:f0:dd:81:1d:9f:b6:1d:
         63:30:7e:52:ee:79:53:25:ef:8a:bc:fd:85:e4:61:b0:d0:78:
         ea:d7:50:d1:ce:66:ff:78:82:07:68:75:3b:45:c9:3e:bc:60:
         eb:16:38:d3:1e:8f:2b:f8:f2:76:95:6c:03:6a:89:b2:b2:97:
         00:06:df:cd:dd:cb:9a:21:04:66:e6:65:6d:7a:47:da:97:16:
         32:57:dd:79:da:6e:9b:40:24:dc:67:cd:74:c7:16:c2:8e:03:
         e2:b0:74:08:5d:76:e5:02:26:24:22:68:c9:3a:6b:30:56:f1:
         75:20:b7:eb:18:72:a2:8c:74:2b:51:f7:dc:98:a4:a6:96:30:
         8c:2a:24:af:b3:ba:56:52:21:05:eb:b8:59:ba:5d:0c:36:b3:
         36:60:ee:d3:eb:df:99:ec:6a:6b:ff:ca:74:b4:aa:0a:4d:ab:
         21:58:cf:b7:22:a9:05:74:62:4a:e1:54:53:d0:8a:5e:50:90:
         1b:a8:d9:fb:97:20:5f:a5:50:71:21:a3:cd:d4:29:c2:a1:57:
         93:08:51:ce:c6:99:a1:6e:60:a8:7d:7e:9c:a3:61:c1:18:0b:
         eb:f4:ab:0f:da:58:dc:ea:39:dc:91:2d:87:c3:31:99:7e:0c:
         b4:88:70:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----