Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a31313a3a2f34382d3438203d3e20333937323434.roa
File:                     323630323a666236373a31313a3a2f34382d3438203d3e20333937323434.roa (raw, json)
Hash identifier:          63ZgVRWwqkWwNabNDOrD2xqlr4iiGve4Mzgbkf4lOno=
Subject key identifier:   C6:24:65:D8:99:4E:01:C8:C1:BE:74:E5:1C:8C:A2:C2:22:18:7E:EF
Certificate issuer:       /CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
Certificate serial:       4AFE0DBFBA81C95D811CCA7B6E8EC82E65042A90
Authority key identifier: 3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a31313a3a2f34382d3438203d3e20333937323434.roa
Signing time:             Sat 11 Jun 2022 04:03:22 +0000
ROA not before:           Sat 11 Jun 2022 03:58:22 +0000
ROA not after:            Sat 10 Jun 2023 04:03:22 +0000
asID:                     397244
IP address blocks:        2602:fb67:11::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fe:0d:bf:ba:81:c9:5d:81:1c:ca:7b:6e:8e:c8:2e:65:04:2a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33
        Validity
            Not Before: Jun 11 03:58:22 2022 GMT
            Not After : Jun 10 04:03:22 2023 GMT
        Subject: CN=C62465D8994E01C8C1BE74E51C8CA2C222187EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4a:84:43:3d:b6:14:fd:7e:44:2b:49:3e:0c:
                    29:2b:7d:f2:a6:b7:52:4d:88:be:ec:1e:b7:1e:a3:
                    b3:bd:e4:cf:8e:ae:a6:6e:a0:e8:23:77:ba:e8:78:
                    2e:9a:ce:8c:39:30:37:32:c3:f6:30:14:75:16:bc:
                    0f:77:b1:1f:ad:0c:20:d3:4a:e7:0d:37:f8:69:fe:
                    fd:41:3e:fd:b2:69:6e:53:b7:f8:e4:c1:f1:bd:99:
                    d7:56:2a:9b:44:c4:db:09:49:fe:9d:9c:b3:0e:2e:
                    f3:9b:a7:e4:51:6c:78:74:7c:6f:86:85:da:36:24:
                    50:b0:9f:e6:6a:57:7f:d9:3d:b8:8b:86:07:a0:78:
                    39:51:a5:02:ac:66:ad:f4:07:5d:92:63:97:b9:33:
                    7c:d4:f8:7c:ec:49:db:f1:41:5f:4e:cc:e7:75:f8:
                    5c:a0:f9:96:64:8f:04:b3:1a:4a:84:e6:e4:90:c5:
                    71:c9:0b:f3:a3:a7:a8:2c:08:71:4e:6b:3b:12:cc:
                    33:97:3c:5b:44:be:43:02:c9:e7:93:b6:22:d3:59:
                    2a:5e:1f:3f:da:94:06:76:ab:cc:74:fe:e7:74:9c:
                    45:9d:d4:fe:e7:8b:ac:94:1e:6b:cb:9f:a3:03:5f:
                    8e:73:62:a4:b1:dc:1e:d2:5a:b0:16:4f:3d:a8:49:
                    8f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:24:65:D8:99:4E:01:C8:C1:BE:74:E5:1C:8C:A2:C2:22:18:7E:EF
            X509v3 Authority Key Identifier:
                keyid:3B:F7:67:28:9F:7D:AC:0C:15:00:93:8E:8E:C9:34:EB:E7:DD:7A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/3BF767289F7DAC0C1500938E8EC934EBE7DD7A80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0010301c-aa2d-4d35-97d4-8d947672bad4/79d88309d02a4bef55764ac7c52b7eef5f1bb0ded1929fac33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca5540181016060d60425/0/323630323a666236373a31313a3a2f34382d3438203d3e20333937323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb67:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:5d:ca:09:70:55:bd:8f:af:11:52:e1:64:38:34:19:0d:08:
         a2:03:c4:9a:14:50:a8:c6:d8:70:9b:ae:c3:75:27:31:98:b2:
         9b:a1:8a:e3:dc:67:c5:72:64:32:22:12:86:18:87:ae:59:60:
         f8:76:3e:45:ff:e2:ee:3c:ea:d3:b5:53:6c:ad:c2:e7:54:8c:
         bd:45:79:c6:26:0d:83:b6:c3:1c:0c:1e:c8:6f:f7:65:dd:03:
         50:35:e9:d7:05:9b:41:d7:05:e6:23:54:f1:0b:a0:5c:04:7d:
         6c:ff:67:bd:1e:f9:71:10:dd:c5:67:af:54:ae:73:c8:85:29:
         51:b8:09:e8:60:88:da:ff:ff:32:8a:78:36:36:57:2b:3b:dd:
         79:84:f7:cc:a1:8f:76:b1:ff:0b:f5:5c:e3:0b:31:df:02:ab:
         7c:c8:0a:8e:75:df:23:dd:2f:69:44:11:73:df:73:bf:f7:e0:
         97:f3:c0:19:59:63:f0:45:4f:dd:2a:3f:4f:1b:47:cc:6b:5d:
         e8:db:0d:62:f9:72:22:9d:d0:dc:64:e2:c4:75:c6:78:2b:37:
         89:b3:68:aa:a6:ab:ac:89:4c:a5:44:4e:98:c4:ed:de:66:4f:
         c1:e6:70:67:e1:cd:7d:1d:a5:30:99:ea:14:3c:a0:29:bc:0c:
         9d:46:73:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----