Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/f426ff27-a2bc-349f-905d-a109314bb582.roa
File:                     f426ff27-a2bc-349f-905d-a109314bb582.roa (raw, json)
Hash identifier:          5Nnp5cN13z92A5dcpZSTh3aletkykXasKdbOz5+G5tM=
Subject key identifier:   1E:6F:26:45:B3:20:62:6D:F2:7F:9D:E0:8A:65:2D:41:8A:BB:93:06
Certificate issuer:       /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial:       010D0C9F43285842F82F0A1A0B2019BABF55CA40
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/f426ff27-a2bc-349f-905d-a109314bb582.roa
Signing time:             Tue 22 Aug 2023 13:00:25 +0000
ROA not before:           Tue 22 Aug 2023 13:00:25 +0000
ROA not after:            Mon 20 Nov 2023 14:00:25 +0000
asID:                     142632
IP address blocks:        2602:fc15::/44 maxlen: 44

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f8:2f:0a:1a:0b:20:19:ba:bf:55:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
        Validity
            Not Before: Aug 22 13:00:25 2023 GMT
            Not After : Nov 20 14:00:25 2023 GMT
        Subject: CN=0ab2184c-a655-407f-8f86-35c92a4f47e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d1:19:fd:6e:7a:93:5f:3c:d5:d5:29:6a:4f:
                    5f:ff:d3:a6:81:b1:f0:94:be:b1:17:19:88:46:8a:
                    b8:2b:91:20:20:ff:6a:41:ab:4b:22:df:f9:1e:11:
                    1d:25:a4:e0:07:2f:3f:7b:2f:00:73:b8:0c:b2:15:
                    ce:98:c5:11:6a:ca:f0:31:f4:df:d1:1c:2e:78:da:
                    10:0e:70:1d:2b:59:bf:c3:37:6f:f8:45:37:3b:3e:
                    a0:f5:b6:73:e8:1e:de:55:d8:4b:45:88:51:90:8d:
                    a9:a1:8c:53:5b:61:cd:ed:ec:ed:e5:98:31:bd:4b:
                    e0:c5:e3:e9:fe:7c:e3:f3:ce:71:f7:7c:96:74:02:
                    91:da:db:92:cd:f7:77:4d:ca:42:3a:7f:5f:e1:7b:
                    30:30:4f:79:6e:fc:a0:43:e1:c6:cf:de:4b:a8:20:
                    6e:e0:38:2d:75:e6:2a:e8:90:4b:27:55:ca:13:8e:
                    68:c7:e9:ac:ff:77:ec:ac:45:4a:f7:7f:78:b1:74:
                    64:81:95:65:bf:60:ef:cb:7d:24:3a:f6:09:af:73:
                    81:f0:1d:9c:cf:8d:a4:69:1e:9a:ce:2e:93:7a:24:
                    c5:66:e4:99:25:6d:eb:38:b0:90:d9:af:ab:33:15:
                    f9:4f:e8:d5:eb:60:11:ff:09:32:9b:1d:d6:1c:10:
                    54:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6F:26:45:B3:20:62:6D:F2:7F:9D:E0:8A:65:2D:41:8A:BB:93:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/f426ff27-a2bc-349f-905d-a109314bb582.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl

            X509v3 Authority Key Identifier:
                keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc15::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:02:ce:9e:86:0a:ee:bf:74:01:dd:37:87:1d:19:4c:b1:b6:
         60:08:fa:82:17:32:b5:d1:9f:f8:7c:f5:ca:a6:1b:2e:c7:9d:
         cb:ad:07:49:49:98:2f:aa:02:c1:0a:5b:2c:5c:05:38:db:84:
         e8:07:93:b9:2f:57:7f:7b:e5:28:f8:e2:7b:44:d5:d1:57:5b:
         d4:bf:28:e3:cf:94:a4:a0:8b:7a:ed:ec:35:8e:23:fa:e6:b9:
         19:ee:85:21:15:22:fe:f0:1d:64:be:aa:24:c8:b5:f2:93:e5:
         30:bf:59:6c:1c:04:22:04:73:01:af:b0:a3:bb:28:b9:94:83:
         53:b6:5e:b7:a4:7b:50:28:03:e9:bc:5c:23:f8:f7:e0:cc:71:
         9b:08:93:7e:65:a9:cd:f2:cf:c5:5e:5b:5f:c4:3a:67:56:64:
         ba:6b:a6:73:c0:fd:68:77:07:4e:34:47:06:71:f0:a5:ef:d2:
         08:6b:9c:da:cf:29:8c:c4:5f:ea:8f:03:fc:44:ee:f9:4c:34:
         25:c2:6e:8c:9d:d0:aa:0c:4c:fc:9d:bc:74:8a:b5:10:85:fe:
         09:62:9e:63:41:cd:b7:66:17:ee:54:fb:77:65:a1:7b:27:36:
         0d:db:af:59:e2:bf:61:f7:b2:40:cd:5c:2f:00:57:7c:ac:e3:
         4c:f6:6c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----