Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/e52e44f8-1165-3d1d-9dc7-22d4adab3a78.roa
File:                     e52e44f8-1165-3d1d-9dc7-22d4adab3a78.roa (raw, json)
Hash identifier:          IyiFBM/BXcosPVSVdCAJWFRi2CQMwffV24u8wlfeldk=
Subject key identifier:   27:3B:44:DB:35:36:D5:39:C2:94:E9:22:FE:70:13:E8:04:44:7F:83
Certificate issuer:       /CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b
Certificate serial:       010D0C9F432858420F2205F81A5D652291BC1AC0
Authority key identifier: 98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/e52e44f8-1165-3d1d-9dc7-22d4adab3a78.roa
Signing time:             Wed 31 May 2023 01:30:56 +0000
ROA not before:           Wed 31 May 2023 01:30:56 +0000
ROA not after:            Tue 29 Aug 2023 01:30:56 +0000
asID:                     46969
IP address blocks:        2602:80c:a000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0f:22:05:f8:1a:5d:65:22:91:bc:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b
        Validity
            Not Before: May 31 01:30:56 2023 GMT
            Not After : Aug 29 01:30:56 2023 GMT
        Subject: CN=7f3478c9-e5e8-4f51-80fd-6015b41ddffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a0:a4:fe:1c:19:89:34:78:63:a3:dd:03:a2:
                    08:e1:9a:79:48:4a:68:3a:c7:88:d0:60:fc:79:29:
                    f7:42:73:b6:7c:27:8b:e2:fb:b1:e8:c3:05:be:aa:
                    7a:be:7f:34:d3:e6:46:63:eb:c7:43:40:ab:51:1b:
                    bd:ed:04:d2:67:a7:b0:a1:67:ef:2a:4e:7d:8a:5d:
                    a6:72:97:ea:38:68:4d:07:b3:6d:c2:8f:35:82:cd:
                    14:32:94:e0:50:59:3d:8b:43:4f:f6:01:77:1a:41:
                    82:b6:0b:e9:f1:51:a2:e8:37:cb:6e:7f:76:d9:4c:
                    ff:bf:a4:c2:8e:8f:c2:ae:e9:13:e5:68:1f:e8:97:
                    69:be:f7:f9:94:f2:33:e0:c7:f5:0b:b6:1c:b9:b6:
                    2b:f0:ad:fe:f9:f0:e3:a0:47:7e:a7:fc:dc:3d:9c:
                    f7:41:90:84:b0:10:63:52:9e:58:4f:96:9b:98:4f:
                    8f:57:b0:cc:1b:01:34:08:31:e5:00:07:6b:40:49:
                    3d:5d:07:85:99:e6:56:6e:42:e5:84:59:43:62:08:
                    35:93:5c:af:a9:c1:6b:9c:a9:f5:cd:62:a2:25:66:
                    94:9b:5a:21:4c:24:50:bb:6b:dd:06:b3:17:16:8b:
                    96:e1:7e:d5:a9:66:3e:22:c0:42:17:fb:07:e1:6e:
                    68:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3B:44:DB:35:36:D5:39:C2:94:E9:22:FE:70:13:E8:04:44:7F:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/e52e44f8-1165-3d1d-9dc7-22d4adab3a78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.crl

            X509v3 Authority Key Identifier:
                keyid:98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1d:cf:eb:00:39:95:83:c1:cb:1c:6a:08:b7:55:42:14:a0:
         bd:3f:4c:3b:97:b0:e7:a8:3e:bb:e2:32:39:6b:b1:f5:37:bb:
         9c:f9:20:c8:ba:c8:78:ad:98:98:67:d6:55:ad:da:31:3d:45:
         8c:9c:4f:ea:ee:5d:5a:20:24:8c:ce:36:d1:b5:b1:8a:63:b0:
         52:ff:ce:11:f3:1f:f6:d2:24:cf:ba:7a:37:d4:85:52:86:d9:
         83:ce:23:b7:ae:52:71:82:1b:5c:08:d6:51:5e:1f:ef:ec:94:
         7b:b8:d1:04:50:1b:3f:3e:f2:dc:e8:0a:3b:eb:3e:e2:11:21:
         c1:0d:dc:04:70:f1:71:bf:c2:2f:ae:a6:b9:2b:6e:f6:5b:45:
         53:4f:a2:ac:d9:15:56:16:18:c4:73:98:55:46:82:39:87:34:
         ac:1d:db:d9:d6:35:1a:c0:e5:03:86:d2:68:6b:04:a3:95:62:
         a4:14:aa:d2:ed:bf:ec:19:b0:f0:4e:f6:68:2c:44:a5:7c:28:
         d2:20:d3:c2:b3:71:91:b5:d9:e4:77:70:75:6f:93:84:34:d8:
         0b:a6:e1:f0:0a:5e:2f:5e:00:5c:2c:b4:76:5d:f7:f7:b1:7c:
         c1:c2:b2:04:cb:07:12:6c:b4:76:be:59:90:0c:54:60:ce:3a:
         5f:3f:95:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----