Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/ccbb418a-3d18-3b74-af8e-11bc02852b33.roa
File:                     ccbb418a-3d18-3b74-af8e-11bc02852b33.roa (raw, json)
Hash identifier:          yWgS06MAiKrdv6IUQ+kgAWq43rRI8pXx2N7Xu8u5pN0=
Subject key identifier:   23:A2:1B:2F:A9:3D:D8:B2:2B:41:37:8D:85:41:E8:0C:29:0C:E7:01
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328583E546F1DB2F30A5B55068C6FC0
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/ccbb418a-3d18-3b74-af8e-11bc02852b33.roa
Signing time:             Fri 31 Dec 2021 12:00:00 +0000
ROA not before:           Fri 31 Dec 2021 12:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     21957
IP address blocks:        2605:f440:5600::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:54:6f:1d:b2:f3:0a:5b:55:06:8c:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Dec 31 12:00:00 2021 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=780f022d-fff0-47df-bd50-f21f920332b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3c:74:a9:36:41:ea:68:ad:37:63:50:e4:5f:
                    83:8a:32:96:60:4b:13:e2:9b:82:31:d4:31:cf:34:
                    38:f6:6a:92:61:54:b0:3d:74:e4:b3:08:89:28:5e:
                    49:dc:7b:ea:97:4a:a4:d5:90:57:51:50:db:00:99:
                    0c:77:02:b4:ab:5e:25:94:42:5c:77:f4:75:9f:09:
                    a2:05:2c:f7:51:9d:2c:62:c3:08:a1:51:96:5b:d0:
                    13:d5:a7:db:bd:6e:f7:47:14:77:36:fc:f2:d3:ac:
                    3d:33:db:91:90:66:a7:12:33:87:d0:c4:e6:0b:f8:
                    56:a4:a1:67:18:25:c3:43:c9:4b:69:d2:4a:e9:10:
                    74:e1:1d:be:b7:2f:52:57:71:af:11:cb:bb:fd:7c:
                    93:fe:0a:40:9c:9d:ec:d7:1f:44:8e:3d:8c:3d:56:
                    75:63:4a:f2:2d:ad:4a:6e:29:d9:e4:52:f7:70:c9:
                    e0:49:ca:29:e8:2e:3d:a5:60:a0:59:83:72:68:13:
                    db:17:5c:1a:36:bc:c5:4b:c7:d2:d6:8f:46:23:36:
                    64:30:a9:eb:e7:76:09:e0:81:cf:7b:17:98:79:09:
                    0a:0e:76:6b:23:e4:01:d3:17:46:06:93:d6:9c:79:
                    f7:40:6a:4b:bd:35:3f:d5:2f:1c:a4:b5:7f:32:5f:
                    8d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A2:1B:2F:A9:3D:D8:B2:2B:41:37:8D:85:41:E8:0C:29:0C:E7:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/ccbb418a-3d18-3b74-af8e-11bc02852b33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5600::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ff:b3:70:f7:e8:d9:46:4f:3b:58:b4:0d:52:42:ee:4a:f8:
         cd:dd:7b:1c:fb:da:7d:01:6b:7c:ed:e0:ba:c8:2e:c9:ed:f9:
         1c:0d:c4:4b:56:9e:44:44:48:7e:0c:f3:3e:94:27:94:16:2e:
         97:06:a1:bc:9b:2c:81:3c:63:01:03:49:67:ae:94:4d:f5:81:
         af:bc:6c:e3:93:78:71:d5:51:5f:95:6f:41:da:e8:fe:3f:dc:
         ca:67:66:c8:40:e9:e0:59:ca:ae:99:d0:53:5a:1e:db:68:97:
         89:a3:d2:54:36:e9:8c:22:2a:ea:88:3e:dc:af:ce:ab:d9:5c:
         30:29:73:e1:9f:b2:95:02:69:f3:0c:28:c8:12:da:02:24:f1:
         1b:19:16:6d:39:c6:b9:08:50:1c:a2:b4:41:4c:c6:c4:3f:6b:
         4d:fd:88:10:90:cb:6e:ad:b9:fc:a8:00:8e:45:af:44:23:b6:
         3f:16:1d:9f:a9:96:e1:ec:57:4a:f8:ba:83:e2:b8:22:e8:9c:
         98:34:89:90:da:48:ed:6e:62:3c:30:7d:27:ae:dd:4a:be:83:
         5a:7e:69:38:0d:e6:d4:dd:ad:98:57:06:61:12:03:a3:93:e2:
         7c:cc:1f:c4:b7:87:4b:a2:2e:6e:62:c6:5e:95:2d:9e:88:49:
         b4:87:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----