Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/27265a6f-4032-392d-a7d6-f2e65c31694a.roa
File:                     27265a6f-4032-392d-a7d6-f2e65c31694a.roa (raw, json)
Hash identifier:          BFkjTlm8ZzQmN8FXmDGvgI7RvI79VCXxZ0VGIgC/jDU=
Subject key identifier:   AB:CC:A8:3A:DD:6A:E5:AE:47:BF:1F:39:94:AB:15:A1:AA:C4:8D:B3
Certificate issuer:       /CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
Certificate serial:       010D0C9F43285842B263DA10F8EDE279A916BF60
Authority key identifier: FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/27265a6f-4032-392d-a7d6-f2e65c31694a.roa
Signing time:             Fri 28 Jul 2023 13:00:19 +0000
ROA not before:           Fri 28 Jul 2023 13:00:19 +0000
ROA not after:            Thu 26 Oct 2023 13:00:19 +0000
asID:                     62833
IP address blocks:        2600:cc0a:e000::/40 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b2:63:da:10:f8:ed:e2:79:a9:16:bf:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127554ab-f00f-4fb5-b5e3-6fc443aa30ed
        Validity
            Not Before: Jul 28 13:00:19 2023 GMT
            Not After : Oct 26 13:00:19 2023 GMT
        Subject: CN=d05c3013-0876-4543-8d72-2de7588c388d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fb:fe:3d:27:69:41:00:88:4c:c1:50:c0:b4:
                    50:02:e5:2e:6d:bc:dd:80:5c:e9:de:b5:97:a8:d8:
                    cf:ca:f5:68:57:1f:f6:b1:44:35:05:81:e8:c2:83:
                    8b:25:ee:56:ee:8f:02:de:05:33:07:7e:44:54:31:
                    95:51:cc:59:a2:d5:6f:c0:49:9f:6f:70:54:a9:a0:
                    5e:cb:52:93:dc:48:fb:d2:b2:10:ff:45:fc:21:b8:
                    2e:87:be:b8:98:94:bf:5e:1d:14:3c:2a:43:8e:87:
                    71:3b:cb:ff:56:af:eb:dc:48:9d:ee:6c:3b:e1:e2:
                    2c:de:5a:c0:c9:3a:f3:db:3a:9c:25:f6:de:d4:f4:
                    2e:48:fb:c7:cd:c4:9d:6f:eb:f1:8f:05:21:5f:03:
                    b8:33:3e:65:2d:3d:77:d5:39:45:0f:3f:5e:31:59:
                    89:04:b7:77:01:99:8d:7d:bd:3c:65:ce:31:f2:98:
                    45:ea:9e:f0:ec:e6:ce:84:83:d9:06:8f:48:ab:54:
                    68:74:f0:dd:3b:d1:6a:1a:59:38:23:fb:ae:b5:67:
                    84:74:98:b5:63:0d:bb:d7:2a:7f:00:25:fd:9b:2a:
                    85:74:d8:af:82:09:1c:71:ac:27:72:e7:de:13:af:
                    7a:ed:51:cc:03:6e:08:f9:e0:87:f1:95:ed:14:10:
                    79:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CC:A8:3A:DD:6A:E5:AE:47:BF:1F:39:94:AB:15:A1:AA:C4:8D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/27265a6f-4032-392d-a7d6-f2e65c31694a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.crl

            X509v3 Authority Key Identifier:
                keyid:FB:07:BF:2F:8D:D0:E4:55:B4:5B:26:B3:7F:A2:2F:2F:0C:68:BD:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/127554ab-f00f-4fb5-b5e3-6fc443aa30ed.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:cc0a:e000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ae:c1:74:49:4c:98:c0:a7:b4:54:98:c4:73:4c:87:d6:0a:
         54:e8:56:3c:db:49:f8:d1:e5:f7:ef:1e:a8:2d:48:7a:88:26:
         f9:58:26:f2:d1:8b:84:c7:ff:28:12:07:88:fa:0c:75:10:a7:
         dd:86:cc:80:a4:e0:a7:d3:b6:93:99:cc:78:88:d3:62:d9:fc:
         d8:9e:67:54:1a:79:87:d8:62:5b:bf:ab:c0:e1:9a:8b:37:49:
         5f:29:78:9f:ea:49:94:0a:8b:25:3d:2e:a8:54:1a:69:b5:00:
         1b:60:72:83:63:03:b4:a5:65:aa:13:11:6d:9b:c1:0e:32:8b:
         c8:3b:c5:f1:e9:80:3b:2b:ea:ab:bf:4d:40:0f:00:9e:fa:31:
         3e:f3:39:0b:ce:84:d2:5c:ea:5e:9a:51:b7:3d:2f:98:3d:45:
         bc:f3:b2:fc:1c:d0:de:10:4b:6d:9a:05:2a:db:75:7e:9d:96:
         f6:d8:13:6f:7f:8a:00:91:8e:53:5b:84:92:48:05:33:0f:8d:
         52:c4:ef:3e:82:4f:b6:b0:84:e9:2d:07:2c:f1:f1:3e:14:3e:
         3c:bd:78:0f:f6:64:78:b3:51:fb:ed:6f:42:62:6f:b5:88:2c:
         d5:ce:2d:fd:a4:08:02:8f:7b:b6:f2:1d:df:79:ae:2e:0b:b5:
         a9:c0:6e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----