Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/0f7e67be-0deb-3532-937a-bc38da0ea2f5.roa
File:                     0f7e67be-0deb-3532-937a-bc38da0ea2f5.roa (raw, json)
Hash identifier:          MrU8qAGQcH5BmXUsjzqlma5QS4WIKil6NmHDkj+7FIQ=
Subject key identifier:   F2:AE:3E:7D:F8:C1:4B:3D:78:FA:BA:C9:F4:F0:AE:5B:C3:58:98:28
Certificate issuer:       /CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
Certificate serial:       010D0C9F43285841E46D69A7D0233B71D73389E0
Authority key identifier: 64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/0f7e67be-0deb-3532-937a-bc38da0ea2f5.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Wed 28 Jun 2023 11:34:12 +0000
asID:                     31849
IP address blocks:        2607:2a80::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:69:a7:d0:23:3b:71:d7:33:89:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86f0f6f-da67-4fff-a83e-60e91fcd9f41
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Jun 28 11:34:12 2023 GMT
        Subject: CN=e9eafa39-5eb7-49f8-9d2d-08a7834fdc02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f0:6a:88:a5:e2:10:18:ef:6f:97:fa:f8:6e:
                    3e:e0:47:05:1e:dd:34:dc:0d:ae:41:10:38:91:84:
                    8b:4d:f4:18:f5:e3:17:5b:7a:6e:3f:30:97:76:0e:
                    fc:48:c1:a0:75:90:25:cf:23:db:cc:3c:26:a2:24:
                    24:99:33:30:79:e9:4c:af:3e:71:42:3c:b6:03:8f:
                    a0:54:bd:81:00:24:15:87:9a:92:5f:c9:6e:d7:9e:
                    ca:e1:72:29:e7:5b:75:b4:7f:24:c7:69:dd:d7:52:
                    05:12:33:8b:a3:9e:21:fb:92:78:f5:2b:35:73:12:
                    04:a9:53:92:3f:12:9d:6f:0e:76:03:61:78:86:c0:
                    0c:2a:b6:ca:69:09:29:aa:29:28:35:d6:1c:f1:6d:
                    fe:99:77:f8:12:b8:ff:1d:a6:38:fb:96:5e:23:9b:
                    3f:95:a4:6b:08:ae:f4:a3:07:4a:4a:44:bc:53:70:
                    28:c5:9a:a5:bf:93:c6:cd:44:47:f7:88:2e:7c:bc:
                    9f:58:ef:f6:70:6e:c0:5e:e7:1c:16:a6:e7:cc:ba:
                    04:00:4f:c7:6f:71:a6:00:32:fe:1b:7f:23:75:3c:
                    9f:f4:4d:f0:a0:9e:1c:67:f8:3a:a6:dd:14:1d:e3:
                    88:10:7b:06:27:71:6e:f2:f7:13:cc:d3:93:fd:eb:
                    81:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AE:3E:7D:F8:C1:4B:3D:78:FA:BA:C9:F4:F0:AE:5B:C3:58:98:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/0f7e67be-0deb-3532-937a-bc38da0ea2f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.crl

            X509v3 Authority Key Identifier:
                keyid:64:A0:D2:C8:EA:78:48:D5:6A:1E:F0:50:B0:C1:51:90:4E:20:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a86f0f6f-da67-4fff-a83e-60e91fcd9f41.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:48:89:ac:7a:cb:2c:f6:b9:da:06:4f:4f:af:f7:39:3c:d2:
         82:3d:7b:61:69:ad:e6:5c:22:f3:e1:ab:40:35:ee:7e:d7:ca:
         cd:72:95:29:1f:20:29:bc:e1:3b:ac:2a:a8:ec:b3:c8:ea:6c:
         70:64:4e:07:ed:bd:00:61:80:ff:41:6c:12:9e:b9:d7:a1:34:
         89:e6:c5:74:7c:99:c5:68:c6:91:9e:e1:3c:f8:e0:b5:17:95:
         5b:6c:1c:96:e0:7e:27:75:03:32:b3:80:65:b0:d3:b4:24:02:
         2f:f3:e6:1c:99:03:2a:40:c9:0c:72:44:a2:e3:fa:ee:b2:f5:
         18:4b:23:db:f7:7f:35:6b:9c:5e:54:f2:2d:31:39:3e:bf:41:
         2a:0f:1f:03:da:e8:3b:35:27:54:68:51:9f:c0:f6:a2:fc:21:
         7f:7a:12:10:e3:f6:f9:0c:78:f6:6b:8c:10:ff:91:5d:db:dd:
         00:aa:94:d1:3b:95:b5:22:8f:f1:4e:ac:f3:26:bd:fa:a3:c8:
         11:ff:e5:db:73:e3:65:90:62:d0:e0:b5:32:e9:0d:be:61:6d:
         50:1c:5e:8f:09:b8:6e:10:57:9c:7f:20:41:93:9d:0b:73:9b:
         29:69:82:a5:7d:4b:8f:c6:9d:b9:08:cd:4d:bc:ec:1a:8f:88:
         94:af:5e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----