Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/1d69e42e-82e6-3630-b61b-cdf2fec16799.roa
File:                     1d69e42e-82e6-3630-b61b-cdf2fec16799.roa (raw, json)
Hash identifier:          yDyAp7ifXCp72SYPz0DF8OLGiTCzeSGpgQqAwWUieG4=
Subject key identifier:   EA:30:A3:6A:50:B4:33:64:F3:ED:7A:58:C1:4E:83:86:B8:4A:D4:64
Certificate issuer:       /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Certificate serial:       010D0C9F4328584424588C5C1171045EE38E9480
Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/1d69e42e-82e6-3630-b61b-cdf2fec16799.roa
Signing time:             Fri 08 Dec 2023 01:26:39 +0000
ROA not before:           Fri 08 Dec 2023 01:26:39 +0000
ROA not after:            Thu 07 Mar 2024 01:26:39 +0000
asID:                     16509
IP address blocks:        2610:e8:3100::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:24:58:8c:5c:11:71:04:5e:e3:8e:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
        Validity
            Not Before: Dec  8 01:26:39 2023 GMT
            Not After : Mar  7 01:26:39 2024 GMT
        Subject: CN=00827af3-e666-4723-8c85-2c61ac48c830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:39:cb:3f:db:59:26:0b:ac:0e:ee:96:7c:
                    a2:13:af:e2:8b:b7:f7:f0:bf:8d:50:7b:d6:00:aa:
                    6c:eb:a0:a1:13:b5:8d:8f:f2:af:55:7c:21:73:bb:
                    34:e0:84:d5:b8:83:4e:6b:b7:b4:ca:2b:dc:a6:40:
                    7c:0b:08:4a:bd:b6:60:6e:86:47:7f:e2:62:19:77:
                    5c:bb:31:ba:50:49:77:f5:47:1c:ce:a1:aa:ab:ea:
                    cb:21:29:56:87:b7:67:e1:43:0c:d3:f8:33:8b:6e:
                    76:da:c0:15:25:09:43:f2:3a:89:9a:ea:e3:69:d9:
                    58:d1:78:04:3d:5c:b9:31:ec:d3:b7:40:d8:cd:38:
                    67:78:eb:e0:de:dc:31:c4:2b:fa:bc:45:a9:96:28:
                    30:90:85:2d:a9:52:14:7d:16:78:5d:f7:bb:87:41:
                    7b:95:82:86:51:5e:f4:16:36:d2:44:70:ff:81:86:
                    d0:d3:6d:3f:e9:b1:a6:bf:4d:99:88:c5:bc:8b:84:
                    e6:21:c2:a5:97:ef:2b:cf:af:fa:7f:95:6b:89:07:
                    df:82:38:98:cb:b0:48:b2:de:33:32:08:88:a6:b2:
                    25:ab:61:a3:6a:73:2a:fb:dc:47:f2:b6:92:0a:4e:
                    89:ec:01:48:0e:38:ac:c2:ab:00:00:53:84:be:b5:
                    04:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:30:A3:6A:50:B4:33:64:F3:ED:7A:58:C1:4E:83:86:B8:4A:D4:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/1d69e42e-82e6-3630-b61b-cdf2fec16799.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl

            X509v3 Authority Key Identifier:
                keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:e8:3100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:26:a5:93:4c:21:86:a8:d6:3b:ed:eb:d0:3b:35:9b:89:90:
         56:e7:b6:e3:eb:e8:55:3c:1f:eb:44:68:da:33:cf:c6:1e:13:
         e0:52:03:08:2e:14:98:84:e4:5c:66:6a:6e:f2:97:8c:bb:37:
         eb:26:b8:fc:73:cb:04:7d:f5:c1:63:25:81:49:bf:d7:3c:0e:
         2b:b2:64:7b:a8:a8:0f:83:31:88:25:93:6c:8a:a6:fc:87:f3:
         5d:78:47:dd:12:9d:9f:be:1e:d0:0c:f2:33:fb:f8:a1:f0:0d:
         50:2e:4a:79:a0:5d:a4:4d:e9:e2:dd:9c:3d:e0:be:62:c7:47:
         6a:af:a4:53:86:04:d0:8f:c5:17:65:fa:34:09:32:f7:c0:86:
         81:e2:5d:70:ab:d7:c3:a0:f1:6c:ae:47:07:01:5f:d1:e9:b1:
         49:e1:ee:72:ad:4f:db:42:b8:46:8d:ed:be:4a:2b:0f:a3:9a:
         dc:26:bb:6f:cb:ce:e3:da:3f:46:98:34:46:da:90:37:d7:61:
         b1:6d:8b:c5:4a:fe:f1:0c:eb:0d:bf:73:13:82:9a:c3:83:12:
         51:5a:68:e7:62:7c:65:a7:2a:b2:9a:20:10:7a:cf:b8:15:0f:
         2d:a9:c0:3c:04:6a:6f:28:df:bd:e4:5e:dd:d7:58:a5:e4:e9:
         df:60:b4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----