Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/7d1bd68e-2deb-3819-9564-a08076943d3d.roa
File:                     7d1bd68e-2deb-3819-9564-a08076943d3d.roa (raw, json)
Hash identifier:          Tz77zI0Xt5ce7lk59Q8fD2GW0OsxX4j4r3EUTsECMbw=
Subject key identifier:   27:CA:12:33:8F:1A:09:51:1C:F8:9A:62:8B:48:E4:F0:BA:7F:DD:37
Certificate issuer:       /CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5
Certificate serial:       010D0C9F4328583CDD2C1F9ED1665CF5454E8200
Authority key identifier: 33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/7d1bd68e-2deb-3819-9564-a08076943d3d.roa
Signing time:             Wed 26 Jan 2022 05:00:00 +0000
ROA not before:           Wed 26 Jan 2022 05:00:00 +0000
ROA not after:            Sat 31 Dec 2022 05:00:00 +0000
asID:                     16509
IP address blocks:        2602:fbd3::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:dd:2c:1f:9e:d1:66:5c:f5:45:4e:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5
        Validity
            Not Before: Jan 26 05:00:00 2022 GMT
            Not After : Dec 31 05:00:00 2022 GMT
        Subject: CN=ada444bc-96e2-42cc-9da4-487300db8083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:ef:02:ca:0d:3a:7d:a2:df:6f:33:b1:60:
                    3d:16:a5:84:81:44:53:7c:0d:6d:d1:37:26:6d:c8:
                    68:75:31:30:a7:2b:eb:eb:0c:b5:3c:b9:7b:1b:5b:
                    b8:67:b7:ab:00:28:99:0d:f3:bd:70:1d:2d:e6:65:
                    99:f0:68:7e:c4:86:66:2d:5a:94:12:42:a3:22:e8:
                    6a:a6:c5:c4:51:9c:e7:67:e7:a1:8d:e7:e4:ed:aa:
                    93:95:6a:59:db:4f:3e:42:57:74:95:24:e6:1d:22:
                    e4:1e:c5:63:33:f4:db:bb:b5:44:56:2e:55:c0:0f:
                    b2:95:d3:3c:a4:d6:d3:1d:6f:a5:43:42:0e:ad:5f:
                    74:3d:f4:cb:8e:1d:c0:fa:76:08:c8:60:77:78:96:
                    02:4c:2e:4f:1c:75:cd:46:7c:c9:0a:2c:af:9a:a1:
                    6f:74:17:b1:6b:99:f1:74:5b:9c:b1:59:f7:9b:bb:
                    0f:9a:bb:6f:40:8e:c4:7d:00:46:51:e3:c8:62:00:
                    6c:dd:26:72:72:47:c5:4f:4c:b3:a1:fe:71:1f:a0:
                    a1:7f:45:fd:3a:7d:00:9a:cd:3c:a8:20:58:42:74:
                    a9:91:03:e8:ed:f4:d7:ca:2f:6f:f8:87:19:f0:82:
                    7d:9b:cc:89:4d:f3:34:0b:6b:59:ad:8d:6e:34:9a:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CA:12:33:8F:1A:09:51:1C:F8:9A:62:8B:48:E4:F0:BA:7F:DD:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/7d1bd68e-2deb-3819-9564-a08076943d3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl

            X509v3 Authority Key Identifier:
                keyid:33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbd3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c1:b1:d5:29:6c:1d:d5:ee:71:4a:55:75:17:27:ce:56:f6:
         b6:70:e9:66:5a:1f:48:29:07:80:3c:7a:a4:80:c4:a9:c4:b4:
         05:be:6a:fb:3d:90:67:ad:fe:68:45:a7:d7:07:61:91:b4:30:
         05:65:e6:ce:b7:69:49:e8:ca:55:23:41:8f:51:6d:1d:c8:99:
         7a:36:d3:2e:3c:56:0b:8c:aa:fd:9d:db:24:a1:73:96:3e:22:
         8e:b7:da:4b:27:ec:59:98:a9:6a:b0:b8:aa:d3:3d:4d:bf:29:
         18:63:a0:83:ab:f2:3d:87:55:4f:70:09:4b:8f:58:b0:6f:0d:
         94:fc:2b:ac:b6:2d:b6:97:c1:96:fd:fd:b8:1e:e2:50:f4:16:
         64:7f:d1:ec:31:e7:22:14:5d:8f:a9:29:fe:dc:2e:b5:d8:90:
         b2:25:92:9a:a4:8a:04:b4:6a:e9:01:26:81:ea:01:2b:a4:85:
         a1:cb:e0:8c:8e:ce:6b:f1:dc:08:11:54:1c:ba:ab:67:99:c3:
         67:86:7e:24:f2:18:8b:9f:ed:81:c6:51:f5:71:81:b6:45:8d:
         12:9a:73:67:70:fe:99:96:b5:30:29:3d:91:40:a9:e0:7b:55:
         a3:9d:22:2d:82:26:3b:65:db:08:c1:e6:ed:56:30:5e:2d:22:
         5a:ce:ce:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----