Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/70ee7e86-254f-3dbd-8ece-41012da3b11a.roa
File:                     70ee7e86-254f-3dbd-8ece-41012da3b11a.roa (raw, json)
Hash identifier:          KXh1Rs4UzkwjDA24BdVEKTmNKqFAMph2JKw13LE/1R4=
Subject key identifier:   B1:F2:EA:B8:37:5E:FA:8C:34:48:55:DC:D7:D6:A8:7D:88:48:1F:AC
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328583C71E2DF0AA3DFDB5D57C3C8C0
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/70ee7e86-254f-3dbd-8ece-41012da3b11a.roa
Signing time:             Sat 01 Jan 2022 05:00:00 +0000
ROA not before:           Sat 01 Jan 2022 05:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     21957
IP address blocks:        2605:f440:5600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:71:e2:df:0a:a3:df:db:5d:57:c3:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Jan  1 05:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=6e8b8028-0a44-4ed3-9d03-f85476802720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:20:db:50:e5:2c:84:a1:9b:78:de:e6:90:fc:
                    e7:ee:f0:15:78:b6:76:78:ff:75:c2:2b:bd:8a:04:
                    92:79:24:e8:2b:8e:0e:b0:c7:59:75:de:d0:f4:92:
                    0c:60:33:16:98:66:78:c5:d0:f6:dd:ae:1c:8c:13:
                    b7:e1:f3:6d:f1:b9:c5:d8:9e:f0:67:8c:c0:3f:22:
                    40:ae:54:12:da:b0:fc:be:f9:94:37:e4:13:8e:45:
                    07:48:8e:19:ac:80:6a:23:57:0a:11:db:11:48:b5:
                    56:65:5e:28:79:d2:b8:05:65:e2:78:4e:3e:6a:e6:
                    53:19:09:cf:ce:cb:39:cd:64:73:2c:1a:ce:5c:2b:
                    b5:d2:9c:9f:04:0f:79:3a:d3:5b:df:e2:fb:93:ae:
                    74:2a:24:13:a7:d3:47:dd:52:46:38:ed:3b:66:95:
                    ac:c2:20:e7:71:54:16:52:c8:de:80:8e:db:40:aa:
                    32:ac:f7:6b:bb:cc:a6:b3:54:06:bd:f0:98:2d:a9:
                    85:3a:cd:69:5b:ee:12:09:a8:2f:11:66:53:05:3b:
                    ad:10:fe:9f:63:c5:2d:01:47:ef:ce:02:ab:a2:7d:
                    36:b4:c8:6a:4c:21:02:7c:ab:84:d0:14:23:22:df:
                    87:12:bc:97:1d:d7:b6:5e:69:09:d1:2d:75:ff:8c:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F2:EA:B8:37:5E:FA:8C:34:48:55:DC:D7:D6:A8:7D:88:48:1F:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/70ee7e86-254f-3dbd-8ece-41012da3b11a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:a0:bd:d8:d5:e9:97:50:cd:2a:9a:72:46:1b:03:2c:1f:5f:
         97:f4:b2:9d:c1:8e:52:84:9a:82:16:61:5a:6f:ec:53:c6:61:
         29:c7:9b:7c:63:7d:b8:62:08:30:ad:7c:a8:fc:75:76:4a:b8:
         4a:de:85:a9:aa:4b:21:c8:a4:56:b7:d4:a3:5d:e8:c0:9c:ed:
         e4:1a:5c:c0:59:38:ac:d3:5b:67:29:de:86:a5:25:a1:5d:62:
         c0:e6:1b:69:78:64:3b:8a:85:f5:3b:51:ef:a2:10:74:c3:01:
         4b:06:af:2b:4f:99:68:6f:16:ac:88:ab:2b:72:c7:f1:30:90:
         c4:de:78:a5:b6:49:10:b2:38:67:72:55:ea:2a:71:1f:c3:8f:
         74:2e:8c:5d:2a:02:6f:a5:cd:8e:0d:6d:85:c7:0e:fa:03:5c:
         5d:39:17:b6:46:46:48:4f:b7:1e:aa:9d:c9:26:23:27:6b:a1:
         fd:f6:75:81:39:87:e8:8b:4b:2f:ff:f5:05:e8:31:70:41:7f:
         fc:d1:f3:9e:b6:d0:f7:7f:46:e6:47:7e:b2:07:17:52:42:3d:
         5e:e2:94:a3:3b:9e:be:0e:2a:db:7c:6b:6a:b6:ef:d8:3d:95:
         fe:36:88:1a:92:56:32:3e:e5:75:04:9e:93:c5:70:c0:fa:6a:
         0f:e1:1c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----