Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9467cda7-3df0-3eb8-900f-439011e40cb9.roa
File:                     9467cda7-3df0-3eb8-900f-439011e40cb9.roa (raw, json)
Hash identifier:          OrxfcH/0mu7Ljt9zUfk/yhB8rD0bu/wLJU7lP8j/VV4=
Subject key identifier:   10:94:31:55:5F:6C:39:5E:18:E4:92:9B:15:B2:14:47:32:F9:A8:0E
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F43285844ED6AA06945C2E60138686440
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9467cda7-3df0-3eb8-900f-439011e40cb9.roa
Signing time:             Sun 18 Feb 2024 02:00:25 +0000
ROA not before:           Sun 18 Feb 2024 02:00:25 +0000
ROA not after:            Sat 18 May 2024 01:00:25 +0000
asID:                     8100
IP address blocks:        2605:8900:3000::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ed:6a:a0:69:45:c2:e6:01:38:68:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Feb 18 02:00:25 2024 GMT
            Not After : May 18 01:00:25 2024 GMT
        Subject: CN=b53962b3-8222-4043-ad51-44a103ef3ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ea:1f:01:70:0e:97:6d:cc:28:aa:4e:62:2e:
                    47:f7:01:49:a7:59:4c:f1:cd:b4:72:2a:7b:46:ec:
                    a5:6d:e2:92:a5:ca:2d:d2:07:13:b4:05:d5:df:e3:
                    f3:5e:c6:71:91:35:4a:f9:7e:2e:a4:f0:20:05:7d:
                    cf:0d:03:ba:ff:ef:13:90:05:46:9b:fb:da:ee:c4:
                    4f:40:de:af:f6:ee:20:d4:92:83:f4:33:db:9e:12:
                    84:43:1d:5e:71:42:b4:35:0b:c3:c6:00:b4:d0:36:
                    ba:b1:03:e1:8f:12:d9:27:a3:3f:34:d9:94:62:f4:
                    25:4e:6b:2d:f2:65:84:a2:3e:03:2e:61:09:9f:bb:
                    f6:73:78:73:66:dd:e9:40:cd:46:dd:a3:02:8c:3e:
                    41:e9:4f:8a:98:e3:1a:38:40:ab:fc:88:3a:11:69:
                    56:b3:e2:67:ca:4c:c6:96:f9:60:87:37:a7:c0:e0:
                    29:eb:56:fc:df:7e:d0:06:90:09:04:ed:35:ba:ff:
                    4e:51:f1:7e:3e:54:29:d9:e6:10:88:32:5d:36:9a:
                    73:ec:d3:f8:50:bd:cd:28:c0:ba:1c:76:e9:16:51:
                    8e:f4:9a:85:68:79:eb:fb:1a:2d:eb:47:66:9b:4b:
                    28:47:75:d8:b2:93:df:9e:c4:ae:41:5b:0b:f8:08:
                    09:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:94:31:55:5F:6C:39:5E:18:E4:92:9B:15:B2:14:47:32:F9:A8:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/9467cda7-3df0-3eb8-900f-439011e40cb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8900:3000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:64:c3:71:04:10:b0:ff:3a:1e:fe:32:da:82:38:30:0e:22:
         7f:ee:e9:92:88:37:c0:9d:7d:9f:d3:f0:fe:79:9b:99:22:93:
         7b:13:a0:a8:8f:24:56:e6:7a:e7:c2:2c:35:1c:5c:f9:d9:47:
         fc:5a:3c:28:53:d0:39:3e:30:20:b8:e6:63:77:63:73:d0:77:
         4c:dd:a1:46:ad:ff:5d:4c:34:36:cf:75:76:c7:4f:3e:5c:2c:
         4f:bc:54:69:15:9c:5c:98:a0:16:98:bd:6e:e8:d5:47:b6:4e:
         b3:94:d2:77:56:1a:b2:8e:60:99:df:22:05:8f:7a:a4:53:20:
         2a:94:ef:ee:4d:00:20:f7:fb:e6:5a:6c:1f:47:b1:66:93:2d:
         d6:80:95:35:2b:61:2f:56:87:ae:1a:b8:1e:69:b8:8c:73:10:
         c2:ac:33:e7:0b:9e:f7:57:3c:83:1b:d1:65:a5:e9:a2:00:c2:
         0e:fb:02:5a:38:10:14:aa:3a:78:d8:97:7c:c0:88:0d:46:0f:
         09:09:25:68:b4:ac:a1:b5:9a:f9:e4:d1:af:47:6c:a1:f0:68:
         cc:ac:ca:93:a3:64:68:76:72:4e:d1:ed:ac:81:2d:ef:f0:78:
         89:17:ee:8b:28:6d:d1:c6:be:52:8d:04:67:5f:36:80:d9:fa:
         82:49:7e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----