Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/e91e2a12-1920-3940-904a-ab670c57b9f9.roa
File:                     e91e2a12-1920-3940-904a-ab670c57b9f9.roa (raw, json)
Hash identifier:          ATrfzPpVlMVrzWjsmRjEpxG1u4V7Y1Di7JMcKqcBsWE=
Subject key identifier:   99:7D:94:C6:53:D4:34:38:0E:AE:FD:27:A4:DA:3E:1B:F1:88:AD:E0
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F43285841E46DFB42B877288B27681A00
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/e91e2a12-1920-3940-904a-ab670c57b9f9.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Fri 14 Jul 2023 06:46:14 +0000
asID:                     36103
IP address blocks:        2606:db40::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:fb:42:b8:77:28:8b:27:68:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jul 14 06:46:14 2023 GMT
        Subject: CN=8fd08413-72db-4e2a-ac2a-d510b82aecd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5f:5e:9d:01:d4:b5:2e:08:0f:55:ba:e2:3a:
                    f4:d0:a2:75:a7:79:dc:42:7c:0d:eb:74:ca:4a:5c:
                    cd:01:58:f4:da:34:28:bd:96:ca:1a:ed:b6:9c:dd:
                    d4:b5:c1:58:46:0f:1f:fc:6d:af:1e:a3:52:73:6e:
                    eb:a4:46:c4:f7:5f:81:91:3f:ec:21:8b:91:16:c6:
                    97:40:4c:94:fa:15:cb:26:c5:5e:67:8a:7e:34:b9:
                    f9:8f:10:d3:1a:bd:69:51:8f:08:ca:3d:ef:44:a3:
                    25:33:5e:ed:c9:78:87:68:0d:0a:76:b5:2e:f7:92:
                    19:a8:03:a9:f0:7c:24:96:35:29:a4:ff:6d:cb:63:
                    f6:02:d0:30:99:66:c6:dd:fd:24:8f:b0:ea:89:58:
                    0b:e6:5a:9d:17:45:9c:d9:03:f6:7e:43:c3:47:70:
                    b2:f7:a2:eb:43:21:b3:1e:d9:25:e4:0f:74:ea:4a:
                    7c:0c:fa:07:31:e1:fd:b6:ff:d1:55:ef:1e:91:59:
                    60:46:94:71:a9:82:5b:08:4b:c3:3e:dc:df:dd:29:
                    33:a0:ab:d6:a9:3c:93:0d:43:69:16:a1:7e:66:63:
                    bd:13:5f:ad:ac:68:98:78:6c:9f:c2:cd:81:a1:5e:
                    c3:76:50:7d:71:b5:43:28:62:d3:14:57:3e:e6:ee:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7D:94:C6:53:D4:34:38:0E:AE:FD:27:A4:DA:3E:1B:F1:88:AD:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/e91e2a12-1920-3940-904a-ab670c57b9f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:db40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:8f:20:8f:01:86:27:18:24:5d:ec:99:59:52:2c:25:77:2b:
         fc:12:95:ad:75:37:98:cf:40:f8:64:0a:7c:24:8f:d7:53:cb:
         f2:c7:b0:ec:31:a8:c5:ac:9c:24:d2:9c:f9:e9:67:e9:af:95:
         4d:da:bb:c5:d6:6c:55:24:c8:3a:2c:81:fd:50:a0:a3:97:cf:
         21:e3:2b:30:2d:47:00:04:b2:3c:d7:93:b8:96:c9:60:a9:cd:
         c7:49:94:35:9e:21:2a:f6:a8:6a:9f:83:51:73:d0:ca:ef:5f:
         dc:42:b8:3d:c7:19:65:60:3a:4d:72:7f:4e:54:5d:df:43:04:
         2f:bf:cf:e8:2d:a0:2b:00:46:1c:ad:4c:47:2a:b6:51:bc:e6:
         0a:f4:c6:21:42:ce:94:d8:e6:95:ab:97:a1:60:24:43:3c:8f:
         1d:64:69:5e:d4:5d:96:92:7c:ce:7e:9a:63:6b:84:98:b0:c0:
         2d:3f:fe:35:74:04:43:b8:cd:8c:c4:51:b9:6b:fe:58:83:06:
         6d:f5:72:94:9c:d7:c4:f9:f0:3a:8c:50:e2:51:54:74:2c:1d:
         1b:0a:5e:18:d8:0e:13:36:7d:27:7f:1f:58:56:de:c7:89:2c:
         e8:9f:1d:dc:cd:3d:77:ba:2b:e5:22:f6:4e:33:4e:dd:60:cc:
         0d:35:84:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----