Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/c2c79d39-aed4-31b4-8604-76693e996750.roa
File:                     c2c79d39-aed4-31b4-8604-76693e996750.roa (raw, json)
Hash identifier:          9gljH5bzasw7mUeki6gcTOm6muAa9WOusFhtPRN9ets=
Subject key identifier:   09:A9:48:20:94:B0:DC:15:E5:07:27:E2:E2:11:7C:52:63:4B:E3:9F
Certificate issuer:       /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial:       010D0C9F43285844B42FB532B13F9952F144BD40
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/c2c79d39-aed4-31b4-8604-76693e996750.roa
Signing time:             Sun 28 Jan 2024 14:00:31 +0000
ROA not before:           Sun 28 Jan 2024 14:00:31 +0000
ROA not after:            Sat 27 Apr 2024 13:00:31 +0000
asID:                     30399
IP address blocks:        2606:ae40::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b4:2f:b5:32:b1:3f:99:52:f1:44:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
        Validity
            Not Before: Jan 28 14:00:31 2024 GMT
            Not After : Apr 27 13:00:31 2024 GMT
        Subject: CN=4c4c2de5-3c08-4fff-a915-d53093a816b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:19:14:e9:4a:18:eb:c9:59:02:fc:48:3b:87:
                    f2:ca:49:fe:00:6c:46:33:85:98:f7:09:e6:c1:43:
                    21:2b:27:a6:f3:38:a5:fa:f8:4d:c0:fb:aa:33:43:
                    e2:3d:96:a7:b1:3a:9a:9c:5c:63:ac:5a:f2:d7:fd:
                    b9:ea:a7:35:df:bf:9b:8d:39:aa:bd:d8:5a:6a:9a:
                    0e:36:d4:0f:a5:3f:81:87:27:bd:ce:98:28:8b:8e:
                    43:9f:38:d5:67:87:56:33:83:2c:54:d4:5c:cf:44:
                    a1:28:8a:80:89:4e:24:e6:b8:2c:1c:25:21:ec:e8:
                    90:c2:5b:9b:7f:5b:b4:44:cb:91:bc:c1:16:49:cc:
                    32:f2:fa:e5:c6:1a:7c:15:b5:aa:6f:37:33:1b:c8:
                    54:75:6b:50:a5:5c:cf:47:b8:6d:30:bb:52:6b:32:
                    f7:d5:ca:9f:b3:cb:02:df:67:a9:3c:0d:67:e3:cb:
                    a8:07:1e:c6:59:04:79:0b:a9:3b:fe:e8:97:49:da:
                    c7:6e:27:db:98:9f:93:26:4e:65:fe:13:09:a2:3c:
                    91:5a:66:18:7d:e8:b7:3f:31:80:07:c6:4f:82:ac:
                    f2:2a:10:84:95:f2:4b:d3:39:7a:a1:bc:3a:06:0e:
                    2e:de:a8:7a:54:ff:f8:c4:08:87:9e:d9:2d:65:bd:
                    f2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A9:48:20:94:B0:DC:15:E5:07:27:E2:E2:11:7C:52:63:4B:E3:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/c2c79d39-aed4-31b4-8604-76693e996750.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl

            X509v3 Authority Key Identifier:
                keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ae40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:01:24:37:49:f6:3e:d5:93:31:4e:fc:e2:b3:5b:e2:81:7d:
         48:2e:b5:74:c5:55:af:d9:bb:d9:88:a2:f8:91:d7:e7:ec:44:
         06:a1:e4:8c:e6:2a:55:43:d7:e7:d3:11:6f:18:cc:90:25:69:
         d3:42:0a:67:93:2d:41:cc:46:dd:5a:85:64:ad:59:c1:2c:fd:
         dd:b4:b9:a0:4f:50:a9:30:f6:b9:02:36:98:2d:e2:bc:2f:97:
         d5:d1:d4:18:a8:dd:db:b8:28:f0:f2:29:b8:78:b7:b7:1d:d5:
         63:81:b3:45:9c:7e:3c:aa:cd:8b:68:b9:65:d9:ca:41:fe:89:
         62:0d:01:3c:4d:8f:42:02:41:90:97:75:b3:31:1a:5b:b7:fb:
         21:b8:de:1e:cc:26:27:dc:07:63:d8:48:ad:be:fa:ad:9e:0b:
         ae:d5:54:9d:61:1b:a8:bf:8c:c8:59:15:40:67:63:78:81:f2:
         09:fe:be:63:7c:27:e2:d1:e4:b4:2b:3a:42:98:9a:b6:0a:93:
         36:23:2c:e3:aa:29:d4:40:91:17:2e:01:c2:7b:a4:b8:d8:43:
         b4:21:ad:3c:4b:e2:cb:20:60:e1:ff:09:6d:d1:02:8a:70:0f:
         bf:5f:87:01:9c:03:a8:32:d5:42:65:22:8b:75:66:59:66:13:
         d7:6a:5c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----