Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1ce4324d-2aee-30f6-bc34-32a634ed3a81.roa
File:                     1ce4324d-2aee-30f6-bc34-32a634ed3a81.roa (raw, json)
Hash identifier:          SDVbTeNgfvuO3oQvF4UuLugMH7hDXGkyMTe5OGJ4oCo=
Subject key identifier:   C8:2E:94:5A:25:92:2B:CB:8C:6F:1D:B5:47:D0:EB:0B:B4:9E:7E:2D
Certificate issuer:       /CN=1246a6a7-1908-49e7-9777-16290e028fb7
Certificate serial:       010D0C9F4328584221384F16967D729D4D074BC0
Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1ce4324d-2aee-30f6-bc34-32a634ed3a81.roa
Signing time:             Tue 06 Jun 2023 13:00:19 +0000
ROA not before:           Tue 06 Jun 2023 13:00:19 +0000
ROA not after:            Mon 04 Sep 2023 13:00:19 +0000
asID:                     13638
IP address blocks:        2606:5100::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:21:38:4f:16:96:7d:72:9d:4d:07:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7
        Validity
            Not Before: Jun  6 13:00:19 2023 GMT
            Not After : Sep  4 13:00:19 2023 GMT
        Subject: CN=c552fad5-85d0-43b2-b81d-b6f0c175f307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:91:09:02:fb:74:aa:e5:b8:dc:94:93:2a:93:
                    b6:2e:08:31:e5:c6:66:d7:96:09:95:9f:11:db:19:
                    b7:11:31:e4:b2:69:da:f1:41:27:d4:2c:a9:ae:e1:
                    a3:90:cc:d7:9d:1c:30:b4:37:fc:68:47:f1:a8:7f:
                    a2:5f:71:f0:a2:84:aa:7d:f9:f0:c7:a3:5c:14:c3:
                    2e:19:32:cc:df:f4:44:d7:26:52:dd:6d:41:66:2b:
                    49:aa:1f:01:58:03:d6:b6:ed:79:25:12:b9:8a:d7:
                    ad:9d:29:ea:2b:51:23:c4:ea:b8:ba:2b:3d:4a:4c:
                    a5:e6:a5:a2:1d:09:c8:ae:46:71:4e:ef:71:24:bd:
                    3a:78:d4:45:06:e0:93:bd:35:3a:4a:f6:2d:ca:91:
                    1f:80:c0:c4:b4:ee:55:fa:cb:49:d4:3e:55:f2:ac:
                    f9:c0:76:d0:dc:fd:ae:d0:4d:ef:cf:a4:f8:d1:7a:
                    2c:f1:1e:43:87:3c:b6:11:b9:99:68:63:3b:e4:d6:
                    f1:ff:3d:28:25:98:6e:1b:ff:f9:f2:d7:07:be:11:
                    6c:f9:b6:8a:e5:c7:68:bf:0a:5f:82:fb:0a:eb:71:
                    5f:78:28:a1:4c:6a:5a:4c:54:6c:b5:2e:b1:c4:95:
                    06:5f:cf:b8:53:4e:50:db:2d:28:cb:7c:a3:c4:94:
                    e5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2E:94:5A:25:92:2B:CB:8C:6F:1D:B5:47:D0:EB:0B:B4:9E:7E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1ce4324d-2aee-30f6-bc34-32a634ed3a81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl

            X509v3 Authority Key Identifier:
                keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:5100::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:2a:76:7b:3b:2d:5b:95:b6:26:5b:97:3f:c6:12:f4:3a:1a:
         7c:3f:c5:f6:92:4c:80:35:1f:62:1f:22:d6:75:5f:49:cc:14:
         86:8f:d5:92:be:38:83:92:cf:89:14:d7:a7:6f:37:66:eb:46:
         5a:9b:fc:5d:11:02:31:a2:4c:4b:77:5b:16:50:f5:b0:1c:e8:
         66:29:fa:82:0a:e0:fa:5d:cc:d9:59:1e:e8:5b:dd:04:1a:85:
         fb:79:2b:fc:9e:8e:80:c0:56:4c:ec:c1:da:a5:93:da:78:fd:
         25:ba:9a:9e:ea:50:84:f0:48:84:74:5b:7c:20:07:54:5b:db:
         8f:96:fa:23:4a:25:ba:43:ba:52:5f:f1:df:f2:e2:c2:e2:61:
         e5:45:c7:ec:87:c0:03:be:7e:7e:c5:a6:33:7b:b2:d7:f2:e2:
         48:61:7c:3c:db:23:bb:c4:68:f0:dc:65:f5:5c:cb:70:12:10:
         4c:8c:c2:96:ce:89:f1:ba:8c:9c:0d:d0:6d:2a:02:d8:08:96:
         cb:b7:30:12:43:e5:6d:19:c7:4f:60:ae:6d:9c:e9:b6:3e:bd:
         e0:91:42:4b:07:64:f3:4b:b0:44:6f:a6:be:61:48:0a:c9:9e:
         d8:0f:e2:80:ae:b1:01:db:32:c5:99:81:5e:04:6f:84:88:0d:
         b6:f1:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----