Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/98738889-cebe-3c1d-86c6-5e77c15f7903.roa
File:                     98738889-cebe-3c1d-86c6-5e77c15f7903.roa (raw, json)
Hash identifier:          9OaKr8BSWxGHYltCItfZoOBU0oiYyJmnZWMESKhTHB0=
Subject key identifier:   54:06:7E:03:01:B7:0D:FB:B7:83:95:4E:FC:75:F7:A1:54:BD:75:4F
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328583C71EDA42133623A6B95B66800
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/98738889-cebe-3c1d-86c6-5e77c15f7903.roa
Signing time:             Sat 01 Jan 2022 05:00:00 +0000
ROA not before:           Sat 01 Jan 2022 05:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     54874
IP address blocks:        2605:f440::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:71:ed:a4:21:33:62:3a:6b:95:b6:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Jan  1 05:00:00 2022 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=ae59e771-5bd9-477e-b6e5-a5513aeab03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:53:27:59:25:d8:96:09:23:51:39:6a:77:71:
                    28:ec:de:91:6b:e4:e6:0e:dd:af:58:ac:93:0f:52:
                    46:43:95:2e:ca:5a:36:f1:2b:0b:06:ca:7c:7e:62:
                    94:f6:89:38:c1:e7:7f:24:df:f8:82:1f:d1:d8:2a:
                    2c:e2:c9:02:aa:45:6e:07:6b:21:4a:f5:17:83:5f:
                    df:45:f7:6e:d3:c2:44:c3:61:f2:a1:ae:c6:c2:96:
                    21:32:ed:48:31:32:81:48:5a:d7:7f:72:e1:95:bf:
                    d4:f2:56:3e:27:ed:09:ad:2a:1c:e1:c9:2e:f4:bf:
                    99:87:a1:c6:80:0d:ba:0c:24:44:e4:89:95:13:f4:
                    3f:3b:6c:40:09:ac:6a:ce:0d:7a:9b:3f:13:d5:b9:
                    b1:9d:ea:0c:a7:3e:b1:8b:f7:49:77:5f:72:ba:86:
                    78:24:56:8e:a7:1d:7e:c9:8d:90:26:cd:a4:bd:78:
                    51:bc:1a:8c:04:7e:28:73:bf:78:9f:9a:4f:0a:83:
                    19:30:34:33:a7:64:c9:a6:17:67:1d:c4:42:20:c3:
                    71:1b:0d:89:2f:9b:90:8d:eb:84:48:0e:4f:67:22:
                    13:7e:5c:ff:43:65:ef:08:f9:7f:5c:67:80:b7:88:
                    03:8a:ac:e0:f4:de:0a:bb:a9:c2:d8:cf:2b:23:6d:
                    42:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:06:7E:03:01:B7:0D:FB:B7:83:95:4E:FC:75:F7:A1:54:BD:75:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/98738889-cebe-3c1d-86c6-5e77c15f7903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ef:cf:69:63:0b:d8:a0:cb:1a:10:a3:ee:b6:7a:42:b6:42:
         bd:61:66:98:df:89:49:53:e2:1f:44:0f:19:15:b2:ad:44:45:
         6c:db:f7:40:48:82:a2:e9:0c:7d:bb:70:ce:7c:32:d9:eb:41:
         73:a3:6f:87:eb:82:89:c8:23:ac:b8:46:37:07:e9:04:1a:ba:
         55:3c:b6:43:24:2e:48:8f:af:5a:f4:a4:21:cf:95:22:23:6d:
         e6:81:de:b5:d9:e3:ca:15:31:d0:d2:07:d5:a6:4e:29:c8:de:
         12:a1:c1:3b:3b:48:6b:b9:9d:27:dc:01:36:c2:4b:cc:ca:5f:
         61:c5:17:1c:18:c1:e9:c2:12:1a:71:59:9a:e3:c9:3d:2d:f4:
         1d:27:4d:04:af:ee:f9:00:ea:34:7f:60:1e:6a:c6:67:62:e2:
         e3:77:62:77:eb:36:72:a3:8d:31:16:0c:08:fe:db:7e:61:81:
         b8:41:cb:78:9a:f6:de:d0:fe:29:9c:97:10:c7:4b:1a:75:bb:
         30:39:e2:66:9b:4d:bf:c9:42:09:26:e7:a0:11:76:e6:4c:64:
         a3:02:26:d6:85:95:29:85:41:d2:28:40:61:54:9e:e1:2d:3b:
         05:27:fe:b3:0f:93:9b:fb:75:c7:3e:43:f4:02:11:c7:fc:e8:
         5b:34:af:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----