Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/154b3b08-692a-39bf-be31-bc337633c1d2.roa
File:                     154b3b08-692a-39bf-be31-bc337633c1d2.roa (raw, json)
Hash identifier:          dbGcw3yWDgeJdsTXbNLH+obVLnkdsiZQpuW2kIZfem4=
Subject key identifier:   C5:52:C5:33:A3:33:67:27:8E:72:9D:15:63:2C:FC:17:D4:B6:8B:40
Certificate issuer:       /CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
Certificate serial:       010D0C9F432858438C1B1DAB3838F2EC9D031E00
Authority key identifier: 3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/154b3b08-692a-39bf-be31-bc337633c1d2.roa
Signing time:             Sat 14 Oct 2023 12:40:00 +0000
ROA not before:           Sat 14 Oct 2023 12:40:00 +0000
ROA not after:            Fri 12 Jan 2024 13:40:00 +0000
asID:                     2637
IP address blocks:        2610:148::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:8c:1b:1d:ab:38:38:f2:ec:9d:03:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030d92cb-74bd-4d6d-9f79-bb93f91d83af
        Validity
            Not Before: Oct 14 12:40:00 2023 GMT
            Not After : Jan 12 13:40:00 2024 GMT
        Subject: CN=d5465b3a-bc4e-4e2b-a59f-9e93d36334b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ad:21:f5:f9:30:b1:9d:ef:16:9f:f5:37:1c:
                    07:d9:b7:75:99:fe:7b:5d:26:8e:c0:ab:69:2e:b3:
                    9d:84:92:20:97:f4:f1:1a:1e:ed:65:af:40:8e:04:
                    33:2f:c8:cc:6f:63:b5:0b:62:0e:20:00:70:7f:c6:
                    5a:00:a6:27:31:0c:37:5a:9b:7d:35:2a:96:12:fd:
                    3b:63:b8:b8:3d:a7:c9:07:8c:a3:d0:1f:2f:12:53:
                    53:db:e2:8c:55:94:6f:0c:db:29:a7:70:22:6f:75:
                    cf:7f:d8:fe:b7:5e:3a:84:21:34:4c:ab:aa:ee:d2:
                    fc:80:7b:a7:53:e0:57:7c:6f:3c:38:ad:eb:c0:c6:
                    9f:87:27:94:da:69:b0:6b:4d:02:8d:e8:53:f1:3f:
                    6a:f5:7d:dd:96:af:24:ab:a5:21:a0:7f:81:35:14:
                    6d:ac:fd:f4:1e:a3:71:a4:7b:8e:46:92:fa:4f:4d:
                    55:ad:14:ce:c5:f8:6e:98:82:36:80:88:59:0d:7e:
                    da:34:45:84:46:b5:df:26:c6:85:16:21:f3:4b:e0:
                    47:3d:6b:46:02:99:e6:5e:21:63:2c:1f:2a:c9:02:
                    84:57:f5:d2:14:54:6b:58:ae:ac:e1:01:76:e0:fb:
                    f0:94:af:dd:e9:84:2a:41:30:b2:b3:9a:46:79:a5:
                    19:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:52:C5:33:A3:33:67:27:8E:72:9D:15:63:2C:FC:17:D4:B6:8B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/154b3b08-692a-39bf-be31-bc337633c1d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af/030d92cb-74bd-4d6d-9f79-bb93f91d83af.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A4:6D:4C:CB:6F:4E:11:80:CE:11:5E:3C:3E:01:B4:5F:FB:83:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/030d92cb-74bd-4d6d-9f79-bb93f91d83af.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:148::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:dd:4e:c3:6b:03:75:e4:be:bb:38:e6:20:66:01:89:fa:8e:
         a0:21:1f:ca:2b:a8:2c:c9:d9:45:d7:74:71:1a:0e:a1:d7:f8:
         ed:88:f3:df:4a:f2:d7:9d:ce:b8:08:b2:45:00:23:fc:2f:8d:
         7c:a1:3c:01:74:c1:88:46:b9:4f:58:f7:55:1d:78:f5:f6:a5:
         16:9a:a8:04:4a:b0:70:02:38:c3:ee:51:d7:f8:0a:9e:1e:49:
         7b:b4:ef:6f:c4:36:48:ac:cb:b7:8c:e6:c6:e7:30:4c:4a:e7:
         f8:40:4b:9a:9e:84:32:82:99:c5:1b:31:04:cc:3e:ab:84:18:
         77:b9:61:8d:9c:78:44:48:a9:b1:b4:9b:e5:50:d4:e6:d9:4e:
         b6:08:56:03:7e:4d:2c:77:b2:e4:30:af:e8:7f:48:9c:42:d3:
         4f:5e:fb:3d:19:6d:02:37:c0:7f:d4:a6:d4:c1:d6:30:90:7c:
         e5:a0:58:1c:aa:c1:51:d3:05:50:1e:07:22:64:83:4e:50:e6:
         88:12:06:6d:e2:c1:2d:cb:b4:d5:15:bf:f6:42:5a:f8:40:35:
         27:36:34:59:a7:bc:c2:66:29:d2:ca:0b:2f:51:85:98:bc:49:
         5c:85:d4:0f:7a:95:9a:f5:ee:aa:43:79:86:f7:a3:96:12:00:
         66:e3:68:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----