Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/9685db81-91d2-3959-b92f-9ccb04acf7e5.roa
File:                     9685db81-91d2-3959-b92f-9ccb04acf7e5.roa (raw, json)
Hash identifier:          +3tapG+NQpC4JE43GxDctTwZH8X1bjRyN0Qx4jjHPGE=
Subject key identifier:   6D:79:7A:5F:C1:28:16:0B:CA:87:60:35:21:55:4E:C0:3F:8F:1A:D2
Certificate issuer:       /CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5
Certificate serial:       010D0C9F432858445BD296A962D625683A8D4200
Authority key identifier: 33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/9685db81-91d2-3959-b92f-9ccb04acf7e5.roa
Signing time:             Wed 27 Dec 2023 22:22:00 +0000
ROA not before:           Wed 27 Dec 2023 22:22:00 +0000
ROA not after:            Tue 26 Mar 2024 21:22:00 +0000
asID:                     54825
IP address blocks:        2602:fbd3::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:5b:d2:96:a9:62:d6:25:68:3a:8d:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84bfb9e8-1bae-4540-9cae-b6811ecadff5
        Validity
            Not Before: Dec 27 22:22:00 2023 GMT
            Not After : Mar 26 21:22:00 2024 GMT
        Subject: CN=502f3fc0-4a05-4e43-8fad-027cf31062bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d6:db:32:c0:5b:0a:ca:1c:f9:6d:4f:98:bd:
                    e9:60:c3:a1:ca:ca:32:1a:45:79:c2:b1:59:f7:65:
                    63:d8:78:62:8b:f0:1e:4c:d5:63:bf:12:5d:43:59:
                    15:45:7c:0a:49:c5:45:a7:27:97:f7:fe:18:f1:6e:
                    19:9a:6d:77:27:f8:6e:f7:e5:65:a1:b2:2e:42:ed:
                    45:f3:37:15:87:eb:41:90:bd:ee:fb:f0:9c:71:e1:
                    41:24:26:d0:40:79:d2:79:65:5e:4f:c0:ba:24:66:
                    ce:9a:8f:90:ee:35:e0:9a:34:af:88:25:5c:1f:28:
                    2b:31:99:81:74:20:d8:a1:f6:2f:00:5e:75:ee:44:
                    6d:e4:1d:f0:4d:e3:f0:c0:6c:7d:a9:d1:3b:32:1c:
                    d1:7c:c5:5e:76:7f:56:4a:ff:97:4e:d0:8e:f2:71:
                    ee:d3:ca:16:26:bf:b7:ec:c0:a5:26:81:fb:2f:41:
                    d3:05:5b:71:69:1b:7d:43:55:de:4b:e0:a6:fa:7e:
                    01:94:b7:91:f3:51:d0:b0:e2:1d:9f:22:79:01:49:
                    e9:55:de:06:f0:31:00:f9:db:7f:dd:3d:d8:17:52:
                    1d:8e:98:27:5c:cb:69:5c:5f:7f:58:59:4f:8c:0d:
                    75:fb:6b:78:af:e1:c6:05:1f:5f:31:be:3e:f1:66:
                    ed:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:79:7A:5F:C1:28:16:0B:CA:87:60:35:21:55:4E:C0:3F:8F:1A:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/9685db81-91d2-3959-b92f-9ccb04acf7e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5/84bfb9e8-1bae-4540-9cae-b6811ecadff5.crl

            X509v3 Authority Key Identifier:
                keyid:33:87:39:DF:1C:AC:F8:79:BB:E8:E9:5D:84:6F:84:56:83:2C:A5:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/84bfb9e8-1bae-4540-9cae-b6811ecadff5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbd3::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:80:17:f5:e0:b7:44:4e:ae:eb:5f:7b:1d:23:bf:d5:bf:29:
         3a:0d:e0:c0:82:55:a3:c0:a6:dc:a7:ab:11:55:b6:32:05:ea:
         18:b5:1a:05:54:1f:70:d0:6d:cc:a8:30:83:54:1b:c6:c0:00:
         aa:4f:fa:84:a0:1f:f1:e7:75:ed:46:88:2c:62:91:e5:ff:1d:
         75:c5:fa:c6:a2:e7:92:c3:f0:3e:76:20:96:4d:03:3a:6b:92:
         f5:48:9c:56:03:5e:e1:43:fc:ba:c0:47:b2:84:b6:f3:8f:bc:
         7c:b4:08:ce:77:2e:b7:cb:a4:48:2a:55:ed:26:e7:7a:f8:2b:
         a4:ff:ef:c0:fa:2d:91:8a:79:86:9e:6d:0a:b5:47:57:68:37:
         b3:87:eb:45:b5:ee:f0:0b:1d:06:e0:98:bd:3d:e3:4f:85:90:
         16:56:fe:89:25:d7:78:07:dc:3b:e4:26:5b:ef:be:c7:57:c8:
         5a:04:bc:15:e9:52:4b:87:10:1c:9b:a7:cd:de:ed:c9:df:ab:
         5d:6d:71:d0:a4:a0:16:3c:a6:ef:64:c0:f0:23:d5:4b:a4:e5:
         02:ed:5f:ca:4d:27:ba:ab:8a:5c:95:80:78:5a:6b:00:09:f8:
         d9:40:df:65:eb:e3:b6:44:0f:bc:1c:f4:f6:e7:5e:c3:64:9a:
         90:da:cb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----