Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/a20e31f2-0c05-3695-acbf-86f65d854c2c.roa
File:                     a20e31f2-0c05-3695-acbf-86f65d854c2c.roa (raw, json)
Hash identifier:          pweItYHXs6A4BElBjDk+OWXMo/wIYmrbmOwCk+qJzGI=
Subject key identifier:   22:13:11:13:9E:15:61:F7:B8:CE:E8:47:9A:9B:FA:5B:E6:90:A6:A3
Certificate issuer:       /CN=edca2973-b815-4276-ae56-405cc9e280b5
Certificate serial:       010D0C9F43285842B34676C31C743C00870AE600
Authority key identifier: F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/a20e31f2-0c05-3695-acbf-86f65d854c2c.roa
Signing time:             Fri 28 Jul 2023 20:36:56 +0000
ROA not before:           Fri 28 Jul 2023 20:36:56 +0000
ROA not after:            Thu 26 Oct 2023 20:36:56 +0000
asID:                     13727
IP address blocks:        2606:7080::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b3:46:76:c3:1c:74:3c:00:87:0a:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edca2973-b815-4276-ae56-405cc9e280b5
        Validity
            Not Before: Jul 28 20:36:56 2023 GMT
            Not After : Oct 26 20:36:56 2023 GMT
        Subject: CN=1dc8b1f0-eb01-410f-a4a2-3db5936f81b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:04:6e:dd:39:2d:88:50:5f:c8:67:95:d7:
                    a2:42:fb:bb:41:3e:8e:95:55:a2:ad:3c:ff:92:89:
                    1e:ac:60:7a:6b:41:fc:44:60:0c:f9:b7:d0:da:57:
                    d3:18:28:46:6f:fc:60:8c:c7:f3:10:54:76:e6:c1:
                    2b:1c:35:ca:2d:a6:88:55:69:e4:c9:02:c9:8d:ac:
                    4c:e0:54:2e:a7:8f:5f:c2:70:95:3f:2e:d7:11:0d:
                    21:41:6b:b7:9d:2a:61:7f:83:a6:f9:48:df:91:39:
                    17:95:74:8d:85:68:c3:e5:70:f7:51:b2:dc:e1:24:
                    d9:b5:54:2b:e9:ab:60:3c:fd:53:4c:8a:43:fb:e8:
                    6d:71:53:79:d1:39:1c:0e:02:db:57:86:c9:87:72:
                    7c:58:95:78:1d:d6:ce:ab:09:48:d5:a3:99:d4:50:
                    0a:4f:3e:41:fb:85:f5:a4:5c:66:7a:2c:d6:e5:82:
                    78:cb:a7:f2:1a:c6:cb:88:1d:43:e1:bc:fa:dc:35:
                    4a:de:be:c8:2b:0d:3b:38:02:46:83:7b:86:29:b7:
                    af:0f:09:92:98:ca:02:77:89:5c:2f:cf:a9:8b:78:
                    77:98:bc:32:66:75:f9:d5:7d:61:97:0f:78:c3:55:
                    21:e4:70:c6:33:06:22:4f:21:1c:41:1b:5e:44:7b:
                    58:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:13:11:13:9E:15:61:F7:B8:CE:E8:47:9A:9B:FA:5B:E6:90:A6:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/a20e31f2-0c05-3695-acbf-86f65d854c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.crl

            X509v3 Authority Key Identifier:
                keyid:F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:7080::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:73:34:de:2c:05:4e:7a:90:b4:d6:62:42:38:0a:3f:c6:b4:
         db:db:da:af:e5:1c:14:03:4a:13:fd:ff:b6:ed:bb:78:c1:bf:
         98:3a:c7:83:13:65:a8:51:8e:aa:e4:af:5d:17:25:fa:19:50:
         8a:72:e9:58:d7:33:79:56:2d:e8:03:b8:ed:fd:d8:36:0a:9d:
         30:a2:6e:57:54:03:d0:73:46:2b:a0:8d:a9:f3:79:cf:7b:73:
         c2:8e:74:02:d9:4b:bf:73:da:84:78:7c:cf:17:d0:29:2c:90:
         e7:bd:dc:7c:89:06:3c:5d:5f:8f:d8:4d:68:06:0e:07:75:c6:
         75:f9:07:23:22:72:47:c0:90:a9:a6:c4:42:f8:4e:c2:ce:ba:
         0d:5a:a0:e4:49:e2:ec:41:03:47:ed:e4:48:85:e7:f7:d6:fd:
         f6:5f:1c:4a:32:5c:e6:ce:f6:d4:64:d7:20:9c:03:20:f6:54:
         9d:fd:65:34:cf:bb:a1:5e:fa:b6:e5:f7:95:b2:3c:00:af:e1:
         5d:bb:84:19:45:2d:5f:c7:80:50:4a:5d:34:47:50:96:66:61:
         e9:8b:96:13:24:66:b0:fd:8f:c2:15:86:4d:76:ea:b7:59:40:
         31:fc:1b:12:7e:7e:13:43:c6:fb:a8:6b:7e:a4:cd:3f:84:fa:
         08:7c:8f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----