Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a333a3a2f34382d3438203d3e203535373031.roa
File:                     323630323a666163323a333a3a2f34382d3438203d3e203535373031.roa (raw, json)
Hash identifier:          I8BR1WOQr8mSvPaQ+3uGSWrZkCsZjHq0bg3H+xNCsxQ=
Subject key identifier:   54:AE:E4:65:8E:1E:AA:86:8C:61:79:93:59:DA:1F:40:35:14:23:30
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       588D16F3FB7ABD09071FF27CFED32336932D031C
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a333a3a2f34382d3438203d3e203535373031.roa
Signing time:             Fri 16 Dec 2022 08:04:03 +0000
ROA not before:           Fri 16 Dec 2022 07:59:03 +0000
ROA not after:            Fri 15 Dec 2023 08:04:03 +0000
asID:                     55701
IP address blocks:        2602:fac2:3::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8d:16:f3:fb:7a:bd:09:07:1f:f2:7c:fe:d3:23:36:93:2d:03:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Dec 16 07:59:03 2022 GMT
            Not After : Dec 15 08:04:03 2023 GMT
        Subject: CN=54AEE4658E1EAA868C61799359DA1F4035142330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b5:01:e3:a9:66:d1:5b:67:0c:33:7a:02:02:
                    d5:d8:90:b8:04:57:91:5a:0e:cd:f5:c3:98:79:e8:
                    aa:8e:e2:92:8d:14:39:e6:23:d2:a9:34:bc:70:28:
                    79:76:d9:f0:4f:6c:95:75:cd:06:ac:4f:88:61:b5:
                    ae:a9:54:93:42:4d:04:bd:21:ae:fa:f8:a3:91:3c:
                    a8:5f:05:6a:ab:6a:db:c0:84:e1:53:89:52:30:e0:
                    27:0a:bf:f9:7e:14:57:a9:f6:1b:13:cd:3c:4e:9e:
                    e1:4a:38:1d:55:e7:74:07:ef:b5:35:41:d6:d2:09:
                    2c:78:89:5e:c2:b1:ab:cf:49:f5:e9:db:e3:c2:8a:
                    84:03:2e:ff:c8:6d:56:9d:a7:f9:39:ba:22:43:11:
                    df:26:37:11:56:d0:61:bf:ef:6f:e4:be:bf:7a:50:
                    fd:5a:c0:c6:fe:17:5e:3c:01:34:c8:35:19:0a:19:
                    63:aa:ff:fd:f4:1d:e6:a9:ce:1f:91:96:fe:78:ff:
                    ae:f0:a6:ed:3b:47:42:d7:9e:40:c3:92:61:81:23:
                    eb:73:5b:c6:5e:8f:0e:58:46:2c:10:b8:85:ad:21:
                    d7:dd:3e:f5:1f:01:33:2e:97:38:92:f3:f6:ac:6d:
                    87:e2:df:74:89:aa:58:5d:81:f2:e2:ba:60:dc:f4:
                    bb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AE:E4:65:8E:1E:AA:86:8C:61:79:93:59:DA:1F:40:35:14:23:30
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a333a3a2f34382d3438203d3e203535373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:4b:dc:4c:c6:33:fa:cb:6a:71:77:88:04:91:36:ae:e8:30:
         30:a9:8b:93:09:b7:d7:b3:b8:d3:3c:29:60:62:df:14:f5:2e:
         c2:19:56:00:a5:ef:9e:23:cb:e0:9b:5b:f4:b9:8f:d9:2a:18:
         48:c2:a1:df:47:e5:a6:b6:fd:26:ab:28:45:02:f7:5f:57:a4:
         50:9f:d3:01:de:00:84:7f:24:a6:1b:7d:4f:d7:dd:99:8d:f0:
         9b:25:44:03:0e:3e:e6:ba:16:92:99:bf:82:a3:31:28:af:8e:
         03:48:c6:06:46:0a:eb:c7:d2:27:2f:d8:aa:33:ec:89:fb:de:
         5e:1e:a1:41:21:32:6a:8c:db:35:34:cf:dd:bb:50:00:25:e2:
         af:35:55:19:c5:46:f2:59:43:ef:11:e3:68:18:11:c2:ee:ac:
         fa:db:f9:3b:97:64:b7:5c:be:53:7d:45:dc:2a:0b:96:a9:2f:
         2a:2e:45:96:49:7a:7a:4a:ad:f2:21:cf:73:b2:0f:00:09:12:
         a4:52:80:98:2f:ea:5c:d7:4a:55:8d:25:29:46:c9:49:89:e8:
         5d:b8:de:f4:2d:e2:fd:61:b2:4e:dc:da:a8:b9:21:05:b1:1a:
         3b:c7:9a:00:ca:a6:1f:76:7b:ff:fd:bf:05:70:08:87:19:fe:
         aa:d2:51:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----