Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a3a2f34302d3438203d3e20323030373735.roa
File:                     323630323a666163323a3a2f34302d3438203d3e20323030373735.roa (raw, json)
Hash identifier:          KEZJDNq632vbhbW1Vl7/SmeNBQJ7Sb5VJfASOk6ItVc=
Subject key identifier:   21:EC:9C:95:C5:D3:5E:99:51:D5:E7:A6:07:E6:E0:0F:C4:85:40:3E
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       7E8E729B47509470013C4592D4DD52B01E656507
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a3a2f34302d3438203d3e20323030373735.roa
Signing time:             Tue 13 Dec 2022 12:13:32 +0000
ROA not before:           Tue 13 Dec 2022 12:08:32 +0000
ROA not after:            Tue 12 Dec 2023 12:13:32 +0000
asID:                     200775
IP address blocks:        2602:fac2::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8e:72:9b:47:50:94:70:01:3c:45:92:d4:dd:52:b0:1e:65:65:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Dec 13 12:08:32 2022 GMT
            Not After : Dec 12 12:13:32 2023 GMT
        Subject: CN=21EC9C95C5D35E9951D5E7A607E6E00FC485403E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:85:6c:1a:67:a9:db:ae:4e:46:90:a3:a8:45:
                    b3:22:79:cf:08:7d:fb:1a:24:01:36:d7:aa:a7:28:
                    2d:3a:d7:02:f9:8b:e3:53:39:dd:4c:d7:fd:ec:85:
                    1a:b7:40:d1:90:a6:0b:89:e5:93:f1:94:23:d7:da:
                    78:f6:ae:ce:44:e2:8d:72:25:4c:89:68:49:f3:7b:
                    25:88:5e:57:bb:14:64:20:10:ef:29:44:c9:ad:10:
                    28:fd:5a:ab:44:d1:aa:ac:af:03:57:5f:a0:f3:b7:
                    12:37:2e:78:22:64:6d:ff:6f:b3:d6:05:2c:f2:9c:
                    19:be:bb:78:6f:d8:5b:45:0a:94:ec:1e:04:36:f3:
                    3e:ec:af:51:45:45:ff:4b:bd:1d:ac:e0:b2:2f:cb:
                    15:df:84:97:1f:fa:20:8c:e3:3d:3b:9c:4f:87:1a:
                    c3:4b:01:ea:d5:ca:b7:68:37:2d:1e:ab:a3:43:f9:
                    93:60:21:0e:c8:a7:f2:73:5d:d0:85:97:16:32:ca:
                    e9:82:9c:bc:39:e1:ae:f1:00:66:f1:5c:32:5d:e2:
                    97:76:07:c6:87:ad:c9:19:42:c0:a5:b6:a5:cb:e6:
                    cc:3c:44:cd:3e:17:de:a0:ad:86:12:79:a8:f8:d2:
                    c9:77:15:22:86:0e:ce:0a:2f:ce:de:43:f9:36:35:
                    26:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EC:9C:95:C5:D3:5E:99:51:D5:E7:A6:07:E6:E0:0F:C4:85:40:3E
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a3a2f34302d3438203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:7f:7f:b3:b2:88:b3:83:3d:53:a3:3e:5b:d8:71:29:f9:8c:
         cb:94:af:4e:38:59:8b:f5:54:88:05:7b:da:b9:76:58:85:8e:
         d2:a4:c5:00:e2:49:87:bc:41:8a:53:b4:1a:bf:6e:06:52:7e:
         ab:07:92:d7:7f:c6:b6:24:18:58:31:b5:c6:9a:2a:99:6f:79:
         f5:4a:9d:7e:13:0a:58:cf:9b:f2:77:5b:dd:4a:a4:e9:30:f0:
         7c:75:09:40:5b:27:41:1a:fc:d1:4b:1c:05:63:33:63:39:23:
         d8:b0:93:f5:11:b7:cc:58:f5:16:d5:85:aa:81:0d:9c:6c:4a:
         19:b6:0d:3a:68:51:d9:a6:2e:a0:50:e8:9b:87:e2:3f:ba:f9:
         a5:25:60:98:d6:58:19:24:d7:f9:74:5e:f8:24:fd:03:b8:ac:
         a4:f6:ab:37:32:d4:d0:f6:e3:92:68:18:37:e1:9a:36:2c:a0:
         41:b2:be:f8:9e:6c:58:7c:a9:71:0e:d4:67:6c:b6:12:b2:20:
         38:df:a5:a4:fc:2f:de:83:44:9d:4b:23:7f:cc:34:52:37:82:
         3a:f7:97:24:bd:8b:30:8d:86:d8:16:04:0c:7f:12:ee:80:97:
         f7:49:6b:4b:90:87:69:f3:e6:fc:d1:bf:17:e9:7a:12:1e:c2:
         fa:fb:ec:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----