Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/290397ea-1aab-3827-bc82-358476216647.roa
File:                     290397ea-1aab-3827-bc82-358476216647.roa (raw, json)
Hash identifier:          uETwUUGDtqBHic+abf+F72Et/kJKunI0nX/YLqvFvWg=
Subject key identifier:   DE:22:74:C0:81:DD:20:AD:8E:5D:B1:8F:7B:5D:28:4B:D1:B3:EC:C0
Certificate issuer:       /CN=a2235d90-d905-4ef7-9447-870904044658
Certificate serial:       010D0C9F43285842A45CBB5E0B83C5365B9CAE40
Authority key identifier: 12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/290397ea-1aab-3827-bc82-358476216647.roa
Signing time:             Sun 23 Jul 2023 12:24:40 +0000
ROA not before:           Sun 23 Jul 2023 12:24:40 +0000
ROA not after:            Sat 21 Oct 2023 12:24:40 +0000
asID:                     16509
IP address blocks:        2607:5ac0:6000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a4:5c:bb:5e:0b:83:c5:36:5b:9c:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2235d90-d905-4ef7-9447-870904044658
        Validity
            Not Before: Jul 23 12:24:40 2023 GMT
            Not After : Oct 21 12:24:40 2023 GMT
        Subject: CN=30992329-7bfe-4508-adde-cf302f8cfc84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1d:30:ca:0b:1d:56:b1:d6:00:9f:5d:7b:ae:
                    1f:82:80:51:d5:fb:05:60:90:d0:14:fe:75:db:96:
                    78:f4:f6:ad:7b:cb:ce:dc:0b:d5:2a:b9:3f:94:ba:
                    e1:e4:5b:0f:7f:db:96:55:81:d6:58:78:4a:fa:8d:
                    5d:20:91:b4:57:a6:25:d1:93:5e:d4:60:ef:29:ab:
                    82:cb:bd:c2:09:ea:b0:ac:a0:0a:9c:a7:e0:22:5b:
                    cf:f9:0e:07:01:75:e7:5f:3a:69:df:60:88:08:bb:
                    4d:70:f5:c3:26:7c:a8:56:6a:4c:8b:bb:6e:02:e5:
                    99:2f:a2:16:13:91:a9:e4:47:3e:2b:b7:ba:19:f7:
                    0e:49:21:90:1c:d1:cc:6a:57:bb:53:de:48:df:04:
                    fe:6e:cc:50:1d:78:99:1f:26:81:96:05:10:7f:86:
                    87:06:ff:c7:83:ea:b4:63:86:17:95:d9:34:f2:19:
                    60:28:70:a6:4f:36:2f:b5:43:2d:55:93:fb:39:83:
                    cb:9a:ac:7a:7d:8c:d8:8f:8b:79:a1:a3:81:fc:2f:
                    ae:b3:25:29:24:20:ed:a4:9a:7f:31:04:81:16:83:
                    d6:92:c7:4f:a4:6b:a7:ad:a2:73:d6:ef:b1:c2:f5:
                    27:c3:c1:4e:61:ca:b0:fd:c9:38:83:38:a1:39:5d:
                    8d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:22:74:C0:81:DD:20:AD:8E:5D:B1:8F:7B:5D:28:4B:D1:B3:EC:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/290397ea-1aab-3827-bc82-358476216647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658/a2235d90-d905-4ef7-9447-870904044658.crl

            X509v3 Authority Key Identifier:
                keyid:12:9D:20:82:1C:89:AE:7B:FE:2D:45:F0:6A:9E:F2:78:8B:0C:1A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a2235d90-d905-4ef7-9447-870904044658.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:5ac0:6000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:8a:60:87:29:08:5f:cd:29:be:40:2d:8b:d3:ad:e6:d4:20:
         a1:66:36:f3:17:02:6d:b6:d4:20:ea:55:5a:31:3b:93:02:2b:
         fc:83:79:e6:0c:2b:77:1b:9e:6e:89:bc:aa:74:64:2a:25:97:
         c9:6f:f4:3a:b6:05:40:bf:57:ca:1d:c3:1e:34:1b:fc:e6:ed:
         6c:0e:6b:3b:a2:ff:8f:39:67:6c:d8:06:7c:09:fd:cb:dd:55:
         a0:da:b0:30:f4:c3:12:46:a9:25:a9:15:25:8c:84:d0:19:46:
         f1:d8:18:f9:64:e4:82:b2:78:5c:9e:71:b5:bf:c7:31:51:be:
         23:eb:4c:54:f4:27:f0:e9:fb:1e:2f:78:15:72:ea:be:46:20:
         d1:ba:3a:e8:80:fc:28:4f:11:1d:f4:31:96:47:d2:b8:09:be:
         41:90:d8:0a:4e:da:4e:86:c1:35:57:de:08:24:1d:af:11:a8:
         49:29:4a:9b:70:ee:fb:d1:4e:f1:3e:23:0a:3e:8f:66:9a:4e:
         57:bb:1b:dc:f5:4b:a4:63:4d:6c:80:f9:00:a6:db:0e:c2:f4:
         7a:57:8c:d4:72:09:e1:eb:8c:68:24:9c:64:fa:df:38:5b:f4:
         0e:7b:78:5f:01:67:c8:5a:17:42:bd:d7:01:79:63:f3:10:4e:
         88:68:35:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----