Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/c73f198a-9caa-3a2c-aea4-b0736e510e6c.roa
File:                     c73f198a-9caa-3a2c-aea4-b0736e510e6c.roa (raw, json)
Hash identifier:          3oBbgzm2fhlqQAKf2QeAvcTjtCqgxmIf/qt2eDAQQLc=
Subject key identifier:   93:AC:E8:5E:EA:3D:44:55:67:34:F6:E1:70:F8:E0:FF:E9:CF:0C:E1
Certificate issuer:       /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial:       010D0C9F43285841E46D3A3DA7434F0367403D00
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/c73f198a-9caa-3a2c-aea4-b0736e510e6c.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Wed 21 Jun 2023 12:59:50 +0000
asID:                     210630
IP address blocks:        2602:fc24:17::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:3a:3d:a7:43:4f:03:67:40:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 21 12:59:50 2023 GMT
        Subject: CN=bb5040b0-9e32-48bb-9f56-754323b04839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:bf:59:e8:83:9b:e1:9b:6c:c9:02:5e:ef:ff:
                    0a:72:a9:dc:76:e4:b9:bd:b2:1c:80:28:a4:b0:48:
                    88:79:83:b3:58:45:51:ad:4c:d5:3f:5e:ce:8a:a8:
                    79:8e:31:68:14:33:ae:13:5c:b5:83:e9:8d:40:f2:
                    7a:24:12:6f:ee:c9:62:34:91:0f:03:5b:d7:bd:65:
                    c7:7c:7e:35:8c:93:1a:c1:17:a8:74:8d:b4:4e:20:
                    c4:91:52:68:73:f5:68:7a:70:36:ca:2b:c7:e4:1f:
                    8d:72:97:ad:7f:02:e1:1a:f0:ec:a4:d7:20:77:fc:
                    6c:c2:1c:eb:23:5d:31:31:00:8a:73:3a:df:35:1e:
                    f0:3c:9a:e9:4e:a8:54:39:8a:b5:fc:ad:ae:b0:86:
                    0c:2d:bc:e5:32:b7:7b:65:55:2b:3f:e2:66:4b:a8:
                    49:4e:2e:60:85:76:40:02:d6:d8:92:a5:d1:b1:a5:
                    e5:f1:39:6a:66:a1:ec:39:45:49:ac:af:69:6f:28:
                    e1:68:40:d4:48:48:04:ea:88:d1:8a:40:da:d6:75:
                    8f:d3:eb:fb:cb:27:ca:09:27:18:29:cd:18:17:1e:
                    58:1a:dd:a9:9d:a7:1e:89:6b:f0:cb:fd:ac:a7:fb:
                    dd:4e:a3:43:85:43:00:fe:4f:ec:14:7a:e5:80:66:
                    69:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AC:E8:5E:EA:3D:44:55:67:34:F6:E1:70:F8:E0:FF:E9:CF:0C:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/c73f198a-9caa-3a2c-aea4-b0736e510e6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl

            X509v3 Authority Key Identifier:
                keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc24:17::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a5:7b:d6:aa:15:d4:c8:1c:0c:9b:ab:b5:7f:56:f5:bc:e0:
         ae:a6:5a:03:54:19:e4:7e:44:ad:d0:5a:95:b1:f6:94:78:f5:
         9b:0a:04:1e:8f:df:2b:c2:62:27:f5:72:3a:f5:99:d1:d0:58:
         7d:8d:ea:c1:98:35:cb:23:54:6b:89:5f:d5:4d:04:64:85:24:
         5b:e3:a2:ad:2a:55:f3:fe:9f:c9:aa:d9:0e:ea:09:9d:23:25:
         2c:f4:c0:c8:1e:11:dd:3c:a4:c7:ee:94:cb:03:08:40:b4:9f:
         13:8d:90:e2:e0:44:36:f0:d8:bb:10:78:5c:72:0a:d6:1c:b6:
         1b:8b:78:5d:d7:d6:91:73:84:17:2b:a6:ec:fa:63:27:d9:62:
         4a:31:41:9e:9f:fe:34:40:43:b8:cf:87:c7:be:57:b6:28:42:
         81:d2:b8:2e:f9:97:38:16:67:90:8f:00:1f:73:d5:d6:6f:21:
         8c:77:4d:6f:6a:b1:58:0b:f9:5d:92:e1:4b:92:5b:ee:de:fb:
         54:7a:5d:02:a9:03:9f:5a:bb:61:3a:87:5b:5a:84:85:e0:3c:
         44:37:f3:be:2a:f4:2a:82:75:3a:05:38:0f:74:cd:21:46:47:
         e6:92:54:09:df:55:e7:01:a0:85:2f:71:4e:ff:7b:04:be:d3:
         d2:96:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----