Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/d381cf39-f9b6-351b-8de2-779ac1636731.roa
File:                     d381cf39-f9b6-351b-8de2-779ac1636731.roa (raw, json)
Hash identifier:          Sg54FVTpZbM5Qqd0lYC7IC9lixOTvKx3TTHBZ0NDBac=
Subject key identifier:   29:00:FF:80:CB:71:08:97:10:C8:08:2C:58:9E:4F:17:29:FA:82:2C
Certificate issuer:       /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial:       010D0C9F4328583E53F9F70EBDA5357196214340
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/d381cf39-f9b6-351b-8de2-779ac1636731.roa
Signing time:             Fri 31 Dec 2021 12:00:00 +0000
ROA not before:           Fri 31 Dec 2021 12:00:00 +0000
ROA not after:            Tue 10 Jan 2023 05:00:00 +0000
asID:                     970
IP address blocks:        2605:f440:5600::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:53:f9:f7:0e:bd:a5:35:71:96:21:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
        Validity
            Not Before: Dec 31 12:00:00 2021 GMT
            Not After : Jan 10 05:00:00 2023 GMT
        Subject: CN=4bf129ea-0723-4b69-be27-194a5e78a53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:67:a3:0a:99:77:e7:ca:c2:45:91:23:97:
                    0a:a3:2d:99:ae:58:1a:c5:c9:0e:c0:9b:df:63:1d:
                    d9:4a:ad:0e:b0:b4:27:72:a2:28:7b:4a:b2:57:2b:
                    1f:36:53:91:6b:cb:a0:5f:64:8d:af:6e:f9:90:82:
                    b4:71:a4:9e:eb:60:b4:64:71:d9:e7:d4:0c:0e:9c:
                    87:a5:99:71:ee:c7:07:e2:80:6f:97:9a:0f:31:9d:
                    36:e1:9f:b4:3f:14:35:c8:21:6b:32:44:ff:aa:21:
                    93:f6:61:74:b9:f4:6c:d8:1f:79:c5:59:ca:3a:13:
                    d7:4b:70:41:cb:3f:0f:78:90:03:0e:1e:23:e7:b5:
                    68:d8:ba:04:48:15:a6:d4:72:90:0c:d1:f4:d5:94:
                    d6:d8:58:d4:1b:53:a2:96:15:5c:eb:0f:34:f3:de:
                    92:31:e3:3d:b6:f6:ee:9d:7b:4f:7f:17:25:04:7b:
                    41:ef:52:5d:6b:f9:39:44:98:d9:bd:7d:13:96:6d:
                    a3:94:7f:6f:7d:a9:c7:fb:cb:bf:ff:3e:c0:44:b6:
                    7f:fb:8b:71:2c:9c:93:f5:8b:bb:3e:46:28:01:8e:
                    13:76:4d:84:e7:db:13:2f:78:d4:11:08:e3:eb:50:
                    23:3e:a3:8d:9f:01:8c:57:03:5c:64:e5:57:f1:af:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:00:FF:80:CB:71:08:97:10:C8:08:2C:58:9E:4F:17:29:FA:82:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/d381cf39-f9b6-351b-8de2-779ac1636731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl

            X509v3 Authority Key Identifier:
                keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:f440:5600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:da:ec:f5:a3:f7:93:75:a7:d3:cc:f7:37:b3:2e:11:2a:d0:
         0e:da:94:0a:99:21:67:73:59:11:ff:39:0b:a5:af:ad:34:20:
         7f:d1:ce:32:cc:1e:88:e8:51:de:4c:a4:cb:f1:0e:b4:18:49:
         1c:03:71:38:c7:9d:12:46:55:53:48:6c:2a:26:56:6d:7e:ac:
         2f:59:c1:57:cb:b3:23:b5:da:94:0d:e8:0e:14:94:1c:b7:f2:
         6a:11:cc:3b:d7:cf:01:56:f6:8b:2e:5d:4d:96:e6:12:57:27:
         c0:c4:52:85:97:a3:7c:92:b7:33:e5:b9:9d:84:b9:60:26:0a:
         ea:1e:a1:60:7f:47:4f:88:bf:35:8e:2b:f3:7d:90:bc:7d:23:
         0a:6b:b3:2f:01:3b:e9:92:92:18:b1:11:ba:bf:39:2e:e5:0b:
         70:aa:b7:c5:a2:16:db:1a:22:be:3d:13:aa:a9:8a:38:99:d2:
         88:64:6d:ec:5c:33:2f:01:d8:94:6f:33:38:db:95:8f:7b:1d:
         71:51:90:23:30:2a:aa:e6:5d:c4:e2:eb:57:07:18:a7:7d:de:
         72:ad:c7:75:10:30:53:59:60:e6:7b:4c:01:d0:dd:26:12:12:
         09:68:6d:c4:f6:b3:ec:43:1f:cf:7b:a4:f4:29:f8:cc:f3:48:
         e6:eb:47:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----