Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/fa217bf2-328c-35cd-b6e2-ef3401a4b0a0.roa
File:                     fa217bf2-328c-35cd-b6e2-ef3401a4b0a0.roa (raw, json)
Hash identifier:          vvhkjgwlGuZK2i7Aosu5alsvYbMsw9ndLGCvPsftezw=
Subject key identifier:   25:DF:4C:D0:D8:C1:2A:3A:B1:85:1C:ED:07:EC:5C:F9:78:82:58:82
Certificate issuer:       /CN=ba2f27f4-9270-4d20-9b84-034ca573f183
Certificate serial:       010D0C9F43285843E168DC8F55B0D9C1A7AD1280
Authority key identifier: 67:B2:53:ED:68:85:C3:B6:CD:96:EE:83:4F:31:0C:4D:D6:BA:6C:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/fa217bf2-328c-35cd-b6e2-ef3401a4b0a0.roa
Signing time:             Tue 14 Nov 2023 02:00:15 +0000
ROA not before:           Tue 14 Nov 2023 02:00:15 +0000
ROA not after:            Mon 12 Feb 2024 02:00:15 +0000
asID:                     397375
IP address blocks:        2602:814:3000::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:e1:68:dc:8f:55:b0:d9:c1:a7:ad:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba2f27f4-9270-4d20-9b84-034ca573f183
        Validity
            Not Before: Nov 14 02:00:15 2023 GMT
            Not After : Feb 12 02:00:15 2024 GMT
        Subject: CN=5bfaed85-f16d-4d15-8af0-a8fb598767b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:19:b7:15:f2:e5:8b:0e:7c:fb:36:cc:7d:ce:
                    2d:58:31:c5:9e:c2:9c:83:f9:ee:b6:e7:1b:60:da:
                    9b:c7:a5:8e:a6:5a:bd:20:dd:5c:7a:df:0f:82:4f:
                    78:6d:13:95:0e:79:cd:aa:0a:fc:5a:5a:93:bc:58:
                    3b:d1:39:d8:3b:ac:5d:1a:a7:6d:f8:8e:ec:ce:5b:
                    9b:98:66:80:62:57:3a:1e:85:22:ab:e3:bd:44:4a:
                    7a:7e:39:32:d4:0b:6b:6e:ad:0f:89:26:04:1c:4d:
                    e9:f5:c3:68:78:c0:98:8f:70:4a:2f:f9:18:72:c8:
                    a7:cb:1f:e5:6a:b3:c8:0a:da:6c:5b:b2:2a:c0:01:
                    be:9c:ce:87:bf:2c:62:c8:52:7b:7e:9e:69:62:8c:
                    a6:68:04:02:90:c5:08:61:e5:ac:51:1b:94:f9:80:
                    14:bc:bc:78:d1:c3:4a:04:00:51:c5:5e:a9:87:6c:
                    0e:63:62:9f:19:98:13:dd:1e:87:38:76:f6:89:14:
                    2d:b9:37:56:1c:86:38:d8:32:a8:16:37:17:86:57:
                    47:53:c1:a2:50:d4:e6:7d:2c:86:71:91:02:3a:03:
                    9b:6b:98:88:dc:f7:25:4d:a9:1d:32:12:72:98:98:
                    5e:c6:70:68:c8:23:b1:b8:4b:29:e5:50:2a:a3:5e:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DF:4C:D0:D8:C1:2A:3A:B1:85:1C:ED:07:EC:5C:F9:78:82:58:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/fa217bf2-328c-35cd-b6e2-ef3401a4b0a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183/ba2f27f4-9270-4d20-9b84-034ca573f183.crl

            X509v3 Authority Key Identifier:
                keyid:67:B2:53:ED:68:85:C3:B6:CD:96:EE:83:4F:31:0C:4D:D6:BA:6C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba2f27f4-9270-4d20-9b84-034ca573f183.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e5:c4:08:a1:01:2f:46:06:04:32:d2:98:74:c5:7e:d5:c8:
         21:8f:3d:6c:d6:a3:37:c1:39:72:dd:c2:97:5b:04:29:fb:73:
         77:9c:73:af:9f:97:c3:b0:79:3d:5f:b7:ea:ec:54:40:bd:d2:
         30:8b:4e:f9:b8:55:b4:66:56:88:17:76:0f:c2:1e:af:99:30:
         35:94:d5:e5:ef:42:33:f4:23:bd:8b:99:3e:42:7d:55:9d:1e:
         c0:bd:29:2f:5e:3c:7f:1c:b0:bf:5b:da:0e:46:61:a8:5e:51:
         dc:f6:91:2a:93:3c:46:7c:a3:51:95:eb:a1:65:83:b0:2f:22:
         e7:b6:7a:fa:a3:f4:76:31:6c:e9:0b:74:ff:90:64:3b:4b:7b:
         8d:ee:f5:2c:64:e9:67:41:78:ca:10:88:2a:c6:d5:9d:49:b4:
         5e:12:2c:ec:bf:48:74:e6:f9:09:73:49:c1:01:9e:e6:10:cf:
         a0:5d:ca:8e:51:84:de:4b:89:7d:1e:e2:8b:15:49:b5:ff:68:
         a5:a0:fa:5d:be:c1:a2:c2:2f:a5:d4:65:aa:57:7b:48:ac:0a:
         17:91:21:a9:e4:73:f1:68:0f:6e:92:8f:4f:06:15:df:12:8d:
         f9:33:44:6f:e9:0a:dc:d8:f3:5a:27:ba:4f:f1:ea:8d:de:e5:
         09:1f:a1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----