Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208029.roa
File:                     AS208029.roa (raw, json)
Hash identifier:          Vq7e3mSvHopqMB2Pd8ry8Xdq/HexIl/d691lcZDXvMY=
Subject key identifier:   8A:B9:6D:35:D4:C3:17:09:53:22:94:17:70:86:C5:64:30:1C:0D:21
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       65CDBB3DBC135E94159D57F71A874155ABF728BD
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208029.roa
Signing time:             Tue 03 Jan 2023 02:07:10 +0000
ROA not before:           Tue 03 Jan 2023 02:02:10 +0000
ROA not after:            Tue 02 Jan 2024 02:07:10 +0000
asID:                     208029
IP address blocks:        2a06:a005:5e1::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:cd:bb:3d:bc:13:5e:94:15:9d:57:f7:1a:87:41:55:ab:f7:28:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  3 02:02:10 2023 GMT
            Not After : Jan  2 02:07:10 2024 GMT
        Subject: CN=8AB96D35D4C31709532294177086C564301C0D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:4c:18:29:97:d3:41:ab:fd:b6:68:a8:03:
                    3f:cc:a4:d2:41:53:a9:52:bc:c8:6a:c5:da:15:ad:
                    7a:14:8a:2e:d9:c4:e0:6c:c1:84:75:a6:c1:22:2b:
                    c3:98:0a:e9:53:ee:46:a8:3d:3b:2f:eb:30:47:d8:
                    84:fe:ce:78:01:7b:73:83:65:b7:43:7a:79:c2:66:
                    36:72:75:58:bf:b8:f9:1b:79:0e:67:a3:2d:9a:1e:
                    45:17:55:84:15:8c:70:67:18:0a:d0:9c:a2:8d:48:
                    40:7d:00:12:8e:50:92:a9:f2:b4:3a:2c:2a:c3:d8:
                    c4:67:5f:3d:67:5b:df:5a:e9:60:70:25:f1:67:90:
                    8e:96:60:89:c7:e3:e9:91:6b:0b:81:1f:79:20:ad:
                    a5:f0:9e:68:ce:51:7e:bd:d6:c3:ba:b1:19:ba:0d:
                    43:f0:38:ad:93:e9:2e:e7:bc:cf:54:9f:1b:96:26:
                    6d:66:f3:39:bc:be:f2:4b:55:94:9b:1a:0a:dc:78:
                    b1:41:26:02:4b:de:ca:a9:f1:54:64:2d:2e:14:2a:
                    87:89:ef:9b:43:28:bf:f2:a0:d3:4b:76:4e:a4:74:
                    16:e3:85:75:bf:3d:5e:fc:da:48:df:c9:ef:46:eb:
                    a1:8a:7d:d6:53:21:77:7f:64:37:8d:39:82:d2:b3:
                    ff:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B9:6D:35:D4:C3:17:09:53:22:94:17:70:86:C5:64:30:1C:0D:21
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5e1::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:16:fd:ca:29:19:5d:97:8a:4d:15:24:f6:64:5b:31:1f:a9:
         80:b3:d4:ea:90:6d:68:7e:83:74:96:fe:99:28:66:b4:bc:df:
         2c:e9:3f:93:d0:95:a7:d6:26:ae:bb:f3:b7:57:96:87:fc:a9:
         9d:ed:ec:b6:32:63:0f:22:18:69:b9:e5:4c:5b:b4:c4:35:60:
         98:c1:0f:b6:d3:1c:85:74:e7:0d:b3:0c:8b:e4:e3:c6:fe:a9:
         e1:d2:ed:15:e9:13:ca:a0:12:f8:45:1e:a3:67:cb:51:d1:66:
         ef:c8:73:5b:63:c8:7f:0c:fb:89:09:10:96:f3:62:bb:21:03:
         82:82:e6:1c:53:ee:64:6c:0d:3d:8e:27:ad:94:e0:3f:66:c5:
         56:1e:4e:f4:43:6f:ba:0b:af:f1:cb:84:64:e3:51:2a:41:88:
         c5:7e:b4:a3:9e:97:33:57:88:12:ca:71:4a:a3:29:f3:d5:38:
         cc:fc:c4:af:90:29:68:e5:65:bf:9c:da:59:92:04:09:75:9a:
         60:eb:ad:d9:61:39:ff:78:07:80:61:01:fd:0f:89:0f:8a:3d:
         73:4a:45:f7:a3:54:15:a5:f9:a9:5f:80:78:9d:88:b3:0c:d4:
         cd:83:4e:04:9f:1f:ff:79:8e:74:fd:7b:39:6f:67:6f:03:2c:
         47:86:f6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----