Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d0ba9c09-2129-3630-ba20-46e1751f70f5.roa
File:                     d0ba9c09-2129-3630-ba20-46e1751f70f5.roa (raw, json)
Hash identifier:          aF5Q4UUmLhA9J+2JTnSVavoq5WI/gXJyjJjAOaQdWpI=
Subject key identifier:   BB:EF:1D:43:57:C9:22:D7:CB:2E:6E:3C:50:4D:88:38:51:E2:D5:6C
Certificate issuer:       /CN=d037641d-aa90-4eab-864e-a73e03e24cfa
Certificate serial:       010D0C9F432858445F07A91172F3B6E830225280
Authority key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d0ba9c09-2129-3630-ba20-46e1751f70f5.roa
Signing time:             Fri 29 Dec 2023 01:56:22 +0000
ROA not before:           Fri 29 Dec 2023 01:56:22 +0000
ROA not after:            Thu 28 Mar 2024 00:56:22 +0000
asID:                     396982
IP address blocks:        2602:f9eb::/36 maxlen: 36

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:5f:07:a9:11:72:f3:b6:e8:30:22:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d037641d-aa90-4eab-864e-a73e03e24cfa
        Validity
            Not Before: Dec 29 01:56:22 2023 GMT
            Not After : Mar 28 00:56:22 2024 GMT
        Subject: CN=6ad345ca-c851-4078-934b-44646d5d36b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f8:c8:26:e7:63:83:16:4e:f8:7c:8d:fa:e3:
                    07:8b:c6:ea:7a:0c:21:0b:ae:3d:cc:cb:53:96:eb:
                    36:9e:c3:f0:0e:79:23:cf:bb:cc:bf:0f:67:c8:1f:
                    47:8f:1f:c3:1c:48:64:70:e8:48:57:66:bb:42:ac:
                    e0:6d:af:2c:11:13:c0:31:ce:2d:b4:e2:99:69:3c:
                    e7:59:f8:6f:a3:2a:55:b5:d8:4b:ec:3c:98:bf:d1:
                    bd:e1:58:7b:ed:af:9a:0c:b9:6d:87:05:36:5d:23:
                    ee:7e:c3:ff:bd:80:59:94:55:a3:07:ea:8d:b8:33:
                    2e:8f:f9:2a:81:23:42:06:da:b4:53:0e:59:ca:6f:
                    05:9d:eb:f9:c1:58:fd:d8:ce:aa:18:b9:ae:2b:cd:
                    5b:af:4f:82:41:3f:81:0c:c4:50:7b:8d:0f:2f:05:
                    44:a3:78:b2:c0:98:59:f2:4b:e0:49:ea:59:10:cf:
                    08:a1:87:46:0b:03:d1:9c:8b:e8:cf:2d:fa:7c:35:
                    c2:f7:7c:e8:29:c1:c6:c3:48:25:55:8e:dc:bc:27:
                    1c:ff:dd:c9:f7:a7:1d:7c:a2:a5:87:82:5c:60:34:
                    f4:4e:a8:c2:25:8d:ee:5f:e7:15:bf:d0:0e:77:30:
                    f4:dc:ef:0c:d4:43:78:bc:b7:43:e7:2a:db:9a:62:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EF:1D:43:57:C9:22:D7:CB:2E:6E:3C:50:4D:88:38:51:E2:D5:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d0ba9c09-2129-3630-ba20-46e1751f70f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl

            X509v3 Authority Key Identifier:
                keyid:B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9eb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:08:c0:bc:a7:26:c1:82:76:b9:8e:14:5e:56:df:e8:38:69:
         82:b9:44:5a:d3:8f:4d:f2:15:4b:5d:d2:5a:3d:5a:db:6d:53:
         c4:ee:4a:02:dd:2c:92:23:4d:dd:9b:a6:72:a7:eb:34:dd:57:
         32:c8:31:6b:b1:ce:bb:86:21:d9:63:bd:dd:f8:53:fc:a5:50:
         9f:7e:03:04:37:36:82:6d:a7:d3:8c:45:69:91:74:b3:14:7a:
         b9:cf:86:d5:15:40:97:12:9a:2a:ab:ae:83:b9:2c:a6:c0:d8:
         43:59:12:ad:ed:6d:df:a5:8b:84:ac:5a:1e:8d:f9:02:b5:6d:
         f8:1a:9f:4a:1c:7f:d2:02:d4:b6:89:13:3d:5a:17:f9:87:ea:
         ed:5e:bc:35:b3:6c:f6:a8:61:e5:20:bd:76:d4:81:77:3b:90:
         48:dd:39:eb:85:2b:aa:a9:de:93:74:2f:c9:84:c4:df:0a:8d:
         c8:82:95:bd:e9:6e:b3:7e:93:cc:dd:00:f9:7a:fc:1f:18:c9:
         4c:69:cc:24:63:0a:4e:2f:23:14:1e:9b:3b:23:d7:0e:8c:4d:
         85:d1:01:1b:72:92:0c:b9:79:97:32:10:9f:60:a3:33:fe:d7:
         32:6e:8b:e5:42:5a:62:f1:e8:40:ed:d4:11:9f:2e:d8:de:7b:
         e6:17:4d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----