Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/88b6e05f-4c41-3aca-b88d-919b88e5dd18.roa
File:                     88b6e05f-4c41-3aca-b88d-919b88e5dd18.roa (raw, json)
Hash identifier:          vSghS10uExlW2k5QDKVeqDXch4EsBCBbPpS0HomZVTA=
Subject key identifier:   07:88:71:2B:58:36:89:7A:39:DB:5A:0F:5F:D8:20:9D:65:6F:98:65
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F4328584336F182DAF1559EC3A0F92580
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/88b6e05f-4c41-3aca-b88d-919b88e5dd18.roa
Signing time:             Thu 14 Sep 2023 00:32:28 +0000
ROA not before:           Thu 14 Sep 2023 00:32:28 +0000
ROA not after:            Wed 13 Dec 2023 01:32:28 +0000
asID:                     53416
IP address blocks:        2602:fa2e::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:36:f1:82:da:f1:55:9e:c3:a0:f9:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Sep 14 00:32:28 2023 GMT
            Not After : Dec 13 01:32:28 2023 GMT
        Subject: CN=5d16e574-7672-49e0-82bd-783b662542e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:4a:da:a6:66:80:ce:63:02:af:8b:ab:68:
                    d8:fa:c6:a2:04:96:f8:69:16:82:ce:40:a6:95:0a:
                    99:8f:f3:67:fd:36:05:5a:da:b3:7a:96:b2:4e:99:
                    98:40:9d:dc:4e:20:40:87:2c:b0:94:e8:7e:e4:57:
                    99:a2:7c:01:6c:05:e4:a0:88:d7:bb:88:7b:26:f4:
                    93:40:52:39:7a:bb:de:26:cf:23:46:7d:05:6d:1d:
                    1a:8a:f2:ce:61:69:91:dd:93:c8:c5:e5:60:fe:c2:
                    19:2a:62:08:a9:32:c2:a8:7f:ea:11:7a:26:b0:25:
                    df:f6:d2:82:96:eb:76:62:15:82:cb:89:21:fa:6d:
                    b4:7b:8e:2d:60:dc:6d:33:d0:e1:cb:27:0e:f0:24:
                    5b:bc:f2:df:da:90:29:16:1a:de:85:e3:4e:af:57:
                    fc:da:a5:a2:03:09:c8:5d:82:63:ab:d4:b3:84:8d:
                    60:04:9d:0a:01:92:3d:80:41:86:bb:a9:e0:f3:74:
                    81:16:01:0f:61:50:b1:63:ee:0e:a4:05:2b:8a:07:
                    36:3a:0d:85:cd:84:41:42:d5:56:b3:91:bc:1c:aa:
                    0e:9b:c7:37:76:4b:27:a4:8f:e2:f7:85:1d:fc:a7:
                    1c:dc:78:db:54:69:9d:58:ca:56:0c:42:10:08:0d:
                    64:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:88:71:2B:58:36:89:7A:39:DB:5A:0F:5F:D8:20:9D:65:6F:98:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/88b6e05f-4c41-3aca-b88d-919b88e5dd18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:05:c2:84:5e:7e:0d:18:42:d3:98:c7:68:59:7b:0a:cf:bb:
         bb:96:8f:38:d0:1f:21:30:8c:2b:dc:27:9d:e9:4c:dd:75:a7:
         93:96:75:10:cd:d6:77:e3:de:65:f4:b3:db:9e:e4:be:f9:7b:
         eb:6a:3a:af:e0:81:62:72:6b:76:44:09:96:60:7f:00:8a:af:
         bb:12:96:72:64:79:a6:ba:ec:70:c2:1a:37:12:d2:71:ad:a8:
         48:0f:e5:a6:52:e5:a1:cf:1a:af:f8:d7:1d:a7:8e:86:7d:a9:
         e4:5a:3c:b9:18:d1:fc:27:f4:da:38:7e:05:a5:2c:ec:c2:d0:
         9f:6a:ef:97:f6:2a:be:04:02:03:3f:1d:81:38:a7:f5:d1:b7:
         52:fa:1a:93:82:d1:07:6d:db:9d:5d:8b:75:26:6d:49:41:c3:
         03:7b:3c:e0:f6:f3:22:ca:9e:03:dd:7d:13:ba:f9:7a:3b:2d:
         95:e1:41:15:3d:45:0c:40:ba:bc:9f:6c:4d:c5:12:07:f4:7f:
         70:a9:88:b8:21:6d:6d:52:e2:63:7b:7e:bf:d7:40:f9:9b:55:
         55:bd:7d:07:9b:28:51:c2:58:58:d3:4a:a9:0e:a0:22:ec:d2:
         bb:3f:c5:eb:08:5a:e5:d3:ae:b1:53:0a:77:0d:76:8e:17:6f:
         c9:37:50:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----