Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/c4854b0e-6628-3884-9270-e21596b72f09.roa
File:                     c4854b0e-6628-3884-9270-e21596b72f09.roa (raw, json)
Hash identifier:          ELGNESuwqCgK9uWXVYuaRlI47Ei1upj6P1iQ+iOiOPs=
Subject key identifier:   B1:78:54:AE:82:6B:02:3D:8E:98:10:D1:B6:A1:C6:72:D6:52:A5:60
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F432858405915D377192A64B6DF742F80
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/c4854b0e-6628-3884-9270-e21596b72f09.roa
Signing time:             Fri 23 Dec 2022 12:00:00 +0000
ROA not before:           Fri 23 Dec 2022 12:00:00 +0000
ROA not after:            Sun 24 Dec 2023 05:00:00 +0000
asID:                     203635
IP address blocks:        2602:fd50:1010::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:59:15:d3:77:19:2a:64:b6:df:74:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Dec 23 12:00:00 2022 GMT
            Not After : Dec 24 05:00:00 2023 GMT
        Subject: CN=119752a9-bde5-4d28-8fd9-dd3977d606fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0a:30:2d:03:da:3c:19:8a:87:a1:36:5e:38:
                    57:fc:48:84:19:cd:67:d8:81:64:83:51:a9:cc:5e:
                    48:6c:a4:7b:36:f4:3d:28:1e:84:c4:66:04:01:4d:
                    6d:e2:15:b3:5b:5e:54:53:44:81:0b:9b:62:0c:4f:
                    ef:9b:2f:4a:5c:d7:40:51:a5:f3:43:ad:70:c2:8f:
                    31:b4:39:9d:64:05:9b:a3:21:ed:78:29:eb:f3:0b:
                    a4:7f:3c:8c:02:e8:c0:ec:44:95:64:b6:b3:22:7d:
                    04:8e:85:a0:a2:38:b1:ed:ed:bf:64:82:81:2d:5d:
                    90:b3:a5:0e:e5:68:42:e3:b4:a2:48:33:a2:7b:e9:
                    75:e3:aa:d8:5f:71:bd:fc:3d:25:85:18:cf:6f:f8:
                    c5:e5:09:c1:99:58:24:2b:c0:c0:3f:7f:39:2d:22:
                    f9:81:80:66:5c:d9:a6:18:5d:7a:0d:79:9b:25:43:
                    5c:2f:8a:a1:5b:94:9a:b7:3a:6c:d2:d5:bc:69:54:
                    f6:d9:d4:3d:7a:f3:86:0a:5a:09:ae:d8:da:fd:b6:
                    bf:cd:5e:35:10:96:3d:3c:ad:3d:ea:a7:36:19:67:
                    19:fd:ef:80:dc:71:ec:b4:e2:30:92:8b:b9:d6:d3:
                    8d:b2:91:17:dc:fc:94:79:1b:24:0f:45:ba:f9:9e:
                    43:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:78:54:AE:82:6B:02:3D:8E:98:10:D1:B6:A1:C6:72:D6:52:A5:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/c4854b0e-6628-3884-9270-e21596b72f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd50:1010::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:8c:30:ea:c0:0b:89:b8:b4:93:c6:cb:ba:e2:cd:a4:28:21:
         ba:44:cf:7c:14:e0:30:53:58:d9:7b:1a:3b:05:f3:a3:c2:69:
         7d:1f:ab:02:35:87:3a:fd:be:3e:6a:1c:13:d1:87:41:d7:7f:
         ea:56:34:99:7b:e5:c7:9d:0c:23:db:b4:39:59:e9:c3:16:cc:
         f5:63:60:cd:91:1a:fb:d0:fa:71:5c:6e:3b:c1:b2:9f:00:49:
         9d:08:05:65:78:b9:ee:be:d5:2b:5b:10:12:58:3b:4f:ea:e2:
         d2:27:46:b7:20:44:bf:2e:8f:63:27:8e:98:9a:07:68:b2:40:
         87:9e:bd:40:28:22:45:68:6e:c3:f7:b4:9f:6f:69:a6:0b:36:
         97:7d:2a:be:33:31:c2:66:d4:76:20:87:bc:e3:26:4e:63:36:
         d0:b6:dc:f7:8d:4d:ad:ad:a6:9d:5c:6d:f2:2c:12:04:ef:d3:
         90:1b:bd:32:10:60:58:b2:ff:8a:a3:76:45:6e:bd:6c:1a:c3:
         ae:5e:52:c1:e5:f7:f2:52:93:ce:4e:99:cd:c1:f5:db:a5:27:
         72:86:01:5d:3c:48:09:56:f7:b5:fa:88:7c:6e:56:75:5c:25:
         56:1a:a4:10:cc:15:ab:39:c7:69:4d:4c:ff:b3:2e:d0:d7:ac:
         b2:45:36:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----