Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/4d34dedd-423d-3a95-acea-2f8663cbc77c.roa
File:                     4d34dedd-423d-3a95-acea-2f8663cbc77c.roa (raw, json)
Hash identifier:          /L169RiRecHJRm0HbxchjhO2uAHdU+RtFVSDMlhVH1I=
Subject key identifier:   1A:4A:66:04:9E:E0:89:9E:73:1A:67:C7:05:0E:C1:4D:BF:15:C9:84
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328583C7436C35E922B8F5330257A00
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/4d34dedd-423d-3a95-acea-2f8663cbc77c.roa
Signing time:             Sat 01 Jan 2022 05:00:00 +0000
ROA not before:           Sat 01 Jan 2022 05:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     50555
IP address blocks:        2605:f440:5601::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:74:36:c3:5e:92:2b:8f:53:30:25:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Jan  1 05:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=feab16f0-11ce-4d64-94eb-b56869f94395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:79:ae:f5:20:9a:2f:0a:52:bc:ce:f1:11:5a:
                    28:5c:13:b4:c5:f0:48:b2:9c:bd:5a:91:91:91:29:
                    ea:59:39:17:30:84:01:90:54:ed:eb:37:85:69:29:
                    de:f7:86:5a:fd:0d:4b:62:81:e3:76:1a:e0:a0:3e:
                    e7:30:66:35:90:45:cb:9b:94:33:2a:79:4d:25:3f:
                    5d:a8:e9:2c:53:6b:75:b5:a4:b2:d5:16:14:d9:1b:
                    9e:46:e1:99:d9:97:c7:5a:22:99:6d:20:70:e4:41:
                    ae:4c:19:3a:da:c4:55:1c:30:d9:f9:c9:77:e9:45:
                    66:f2:28:95:b2:7d:5d:3c:9f:ef:6f:a5:60:0b:78:
                    8e:cd:a8:4c:9a:d6:69:1c:d8:54:34:52:85:54:46:
                    f9:02:3e:ab:28:21:a0:97:5b:c8:dc:3d:8f:f3:c1:
                    41:0b:7b:d8:82:35:7e:92:aa:e8:b1:f7:dd:fb:8b:
                    b4:9f:95:96:84:cb:2c:81:84:a9:69:9e:74:2f:7b:
                    40:e7:8d:26:63:11:9a:85:e0:d3:18:d8:9d:bd:87:
                    72:e0:de:83:64:21:6b:cb:df:25:7f:b9:4c:3c:8c:
                    5c:c4:62:27:07:14:0a:51:47:01:ce:94:05:3e:8a:
                    21:ca:0b:95:be:c4:6f:3c:ed:e5:2a:41:16:dc:ae:
                    bd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4A:66:04:9E:E0:89:9E:73:1A:67:C7:05:0E:C1:4D:BF:15:C9:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/4d34dedd-423d-3a95-acea-2f8663cbc77c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5601::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:5a:39:4d:cf:2f:78:d9:de:ed:99:da:94:3a:94:96:9a:e9:
         34:f4:95:94:41:a0:ed:34:20:ee:2e:98:a6:44:c5:68:25:b5:
         10:26:43:1f:73:50:39:4a:52:b8:2a:c8:fd:54:88:84:4e:47:
         99:30:ae:1a:67:dc:1f:7b:51:f3:95:4e:1a:ac:a1:82:ca:3a:
         9c:d8:bf:9e:77:a5:9d:91:8d:c2:62:59:14:da:b6:5c:18:9b:
         66:e6:24:0e:38:7b:ef:1d:fc:34:45:47:38:2e:44:6b:02:cd:
         43:83:d9:a8:70:72:de:c0:b4:1c:6c:12:4c:2b:96:db:e6:4d:
         c3:83:b2:5a:98:53:3b:2f:ee:3a:0d:2d:a1:37:bd:72:da:ec:
         8b:29:70:89:61:33:6a:e2:19:7d:2f:c9:63:06:35:43:22:66:
         6e:f7:d3:f3:e6:75:a5:c6:6a:9b:c7:39:50:66:a2:c5:2b:c9:
         6d:5b:3b:f6:94:91:be:bc:ea:10:ff:7f:68:fc:51:93:b8:1a:
         66:46:4b:67:9c:82:05:fe:6f:e6:4b:9e:1c:bf:1b:db:55:49:
         d1:4f:9d:bf:e9:c6:68:83:0c:18:47:4d:65:c6:6a:da:4b:5e:
         7f:c7:9c:db:01:c3:5d:e4:fc:4c:1e:40:5f:25:de:24:ec:25:
         63:a3:a0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----