Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/c6689f58-ac01-36de-8893-82d8352c6eaa.roa
File:                     c6689f58-ac01-36de-8893-82d8352c6eaa.roa (raw, json)
Hash identifier:          Sf9VO9qtIVLLTwU2BWPKWGTPnKIUdtgWe40txB6YZyg=
Subject key identifier:   13:41:38:45:93:F6:C8:2D:5D:29:D0:0B:6B:76:4B:14:7A:AA:A8:CB
Certificate issuer:       /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
Certificate serial:       010D0C9F432858433038DE00E41D8F191A1D1C80
Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/c6689f58-ac01-36de-8893-82d8352c6eaa.roa
Signing time:             Mon 11 Sep 2023 14:45:35 +0000
ROA not before:           Mon 11 Sep 2023 14:45:35 +0000
ROA not after:            Sun 10 Dec 2023 15:45:35 +0000
asID:                     30938
IP address blocks:        162.251.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:30:38:de:00:e4:1d:8f:19:1a:1d:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
        Validity
            Not Before: Sep 11 14:45:35 2023 GMT
            Not After : Dec 10 15:45:35 2023 GMT
        Subject: CN=e48f3d65-ab33-4fbf-8b49-4e361aed6ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0c:11:90:dd:c3:1c:db:32:99:af:3a:9e:7c:
                    6a:91:91:cd:af:a9:31:11:7f:13:18:56:f4:bd:b1:
                    f8:b2:ac:7b:72:24:34:43:6c:39:cd:31:f5:ba:9d:
                    ae:63:a4:ca:5e:53:d6:e4:44:59:9f:3d:13:87:d0:
                    b1:27:e9:c3:46:5b:0b:55:06:22:05:02:6c:e8:0a:
                    6f:5e:00:d8:43:34:dc:7f:ce:fb:b3:c8:71:44:e0:
                    e7:57:86:a7:f2:3b:09:27:70:e3:9e:19:45:dc:f3:
                    c2:3a:63:94:41:42:88:0b:5f:5a:f7:3f:54:b9:2c:
                    13:1c:3f:d3:4f:24:ff:2d:63:3d:e4:ef:90:16:1f:
                    55:5b:60:2d:99:fa:81:07:94:73:58:45:e8:7e:fe:
                    ac:ea:86:0e:31:2e:b3:46:15:be:47:cd:ec:60:92:
                    18:08:cf:de:e3:c7:bb:5e:ec:92:9a:ef:17:ad:65:
                    54:8a:ac:fc:c5:ec:2f:3a:ab:59:fc:8d:c6:ee:7d:
                    43:c6:86:58:28:0e:84:dd:11:d0:dc:e5:31:eb:30:
                    d5:60:d6:22:6e:09:1d:f4:37:2a:c4:42:98:4d:d6:
                    37:b0:bd:c7:e6:b4:b2:fa:73:25:1b:3d:01:cf:69:
                    9f:54:cc:2a:6d:fa:4f:2b:8d:1d:9f:8a:56:aa:07:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:41:38:45:93:F6:C8:2D:5D:29:D0:0B:6B:76:4B:14:7A:AA:A8:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/c6689f58-ac01-36de-8893-82d8352c6eaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl

            X509v3 Authority Key Identifier:
                keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ef:a3:64:71:0e:cf:b8:2b:10:d1:cf:9c:c0:1e:e8:b3:10:
         22:36:0c:77:70:e8:7d:bf:c2:2d:88:71:52:bf:04:92:40:47:
         2d:96:22:88:cd:0f:63:09:bd:6f:5a:75:34:e6:77:93:40:76:
         38:ec:40:e9:23:e7:f7:9c:34:a7:e3:60:92:b1:89:72:a8:3f:
         b9:28:c9:e7:1d:98:67:b5:b5:e7:f6:84:5c:89:7b:c8:5a:ab:
         95:9f:d6:2f:78:d2:2f:20:bb:9c:be:de:2c:66:d6:bc:bb:6c:
         cf:10:d0:12:f8:10:7b:05:4c:9a:3f:46:10:c5:94:41:d3:a1:
         66:e1:75:06:15:c6:bf:66:c1:90:32:d6:2d:cd:40:e5:22:56:
         c5:07:90:f6:79:26:14:d0:5e:9f:db:ad:98:d0:25:b2:60:d6:
         34:63:ba:c2:3c:ea:f5:bf:11:40:27:ef:2b:23:16:4b:12:b0:
         cc:d8:f6:95:c2:f2:92:c5:15:da:77:78:70:82:75:5d:64:3f:
         03:8c:3c:fb:a5:b1:36:99:68:e1:ba:32:e5:1d:98:4d:75:23:
         4f:63:ef:58:f5:03:0a:e1:a8:84:c3:13:6c:01:f5:73:e7:d3:
         e8:ce:cf:fb:aa:a8:6c:8d:f2:b1:ea:cb:fb:49:b6:7f:26:f8:
         fd:cb:de:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----