Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/00f993e3-e76d-3707-b7fc-f63077b80a72.roa
File:                     00f993e3-e76d-3707-b7fc-f63077b80a72.roa (raw, json)
Hash identifier:          ogLAWf6M4DBrsA5JtCJGS9OIAKNLkb6CWd2y2pbxJfY=
Subject key identifier:   C7:C8:6A:D3:C9:2B:5C:5F:49:B8:6B:EF:97:22:71:53:F9:39:EA:35
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328583C71EAC1B035E38713D193F130
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/00f993e3-e76d-3707-b7fc-f63077b80a72.roa
Signing time:             Sat 01 Jan 2022 05:00:00 +0000
ROA not before:           Sat 01 Jan 2022 05:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     0
IP address blocks:        2605:f440:7000::/36 maxlen: 36
                          2605:f440:8000::/35 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:71:ea:c1:b0:35:e3:87:13:d1:93:f1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Jan  1 05:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=8825a9a8-c872-458a-95db-845f57cd48bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:f0:11:d8:88:bf:34:19:06:54:00:da:a9:
                    41:69:2c:ec:bd:fc:d2:9d:96:0b:a4:46:52:90:06:
                    98:c2:2c:6d:b9:b8:06:fd:a5:bf:66:3b:29:3b:46:
                    c7:62:e1:3f:ba:4f:31:fa:7b:d1:ba:72:7e:eb:42:
                    f9:81:71:71:e1:bc:14:f2:04:03:65:ae:a9:dd:fc:
                    a6:79:91:07:a3:6c:04:40:b8:6c:d1:eb:dc:a1:64:
                    9c:8a:2c:b4:2c:70:5f:a2:6c:9f:03:2c:29:3c:ce:
                    ad:67:6b:73:e0:b7:26:d8:e3:2b:66:b8:9e:64:c9:
                    ea:18:ca:31:cd:8e:51:96:77:01:ed:db:9a:ab:27:
                    e7:d3:07:47:6b:2d:ac:28:96:06:72:a3:7a:d8:06:
                    87:3f:e8:94:e1:4b:c2:ea:42:33:13:4a:21:ef:cf:
                    55:c9:e5:82:a5:54:f0:f2:18:af:02:13:5d:fc:f7:
                    0b:1b:ba:60:c0:1d:40:a7:c3:c0:58:63:4c:b0:db:
                    0e:23:ad:96:e1:35:f0:9b:f4:45:d4:9e:70:e6:8c:
                    19:c1:f2:b1:a3:4d:21:aa:fb:63:68:88:58:b0:0c:
                    24:90:ef:aa:79:47:e7:cf:ff:b7:91:a6:10:76:1c:
                    e3:62:dc:4d:b8:22:a6:35:ef:60:86:24:62:b8:31:
                    46:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C8:6A:D3:C9:2B:5C:5F:49:B8:6B:EF:97:22:71:53:F9:39:EA:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/00f993e3-e76d-3707-b7fc-f63077b80a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:7000::-2605:f440:9fff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:ab:e1:b9:12:30:06:d3:8e:8e:7f:36:87:64:a5:6f:47:13:
         3d:eb:61:b9:86:a7:85:47:3e:f8:11:87:d2:a4:d5:e8:fb:a3:
         50:6b:a4:af:0d:97:4f:5c:86:ef:85:b1:4e:04:3d:97:25:a6:
         3f:72:72:3b:df:db:d4:65:7e:ab:d9:e9:3b:17:ef:b7:9f:d3:
         e9:fb:9c:e9:b5:16:dc:ba:11:d7:f8:7a:5e:cd:a8:28:4c:62:
         ed:d6:78:74:b8:9a:18:b9:c2:44:8b:e3:3e:8b:2e:bc:c1:2e:
         2c:7f:6d:ed:ef:16:67:37:7e:27:99:0a:19:ec:89:2f:80:6f:
         bd:4f:18:7a:0b:37:c8:68:32:cf:2c:a5:e6:24:ed:da:88:59:
         12:54:9e:1f:6d:4b:1b:1f:cd:f5:44:e3:c5:e2:bf:6c:f7:01:
         fc:ec:88:c0:6b:ed:f8:93:b0:4e:04:ec:79:c7:9a:51:93:57:
         c2:8f:47:f0:1e:6e:ee:3b:41:63:3a:d1:cc:73:a1:9f:9f:6d:
         05:74:eb:81:bc:bb:c6:ee:4f:8e:8d:02:b5:26:d4:18:b7:42:
         f5:1a:3b:54:b9:7c:3f:a4:b9:5e:52:6a:e7:2b:c9:44:b7:26:
         bd:da:26:d8:82:2c:10:d5:63:5d:6e:63:aa:98:a4:d1:aa:63:
         14:5d:b7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----