Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8/3503b1a6-9fab-347d-bfc9-9241c0b30a60.roa
File:                     3503b1a6-9fab-347d-bfc9-9241c0b30a60.roa (raw, json)
Hash identifier:          7boNcbcNSumiVFtVS0DfrjL6Gac7qu8WHNE0zDsCI60=
Subject key identifier:   EB:C9:62:8A:F5:2B:EE:07:8F:0B:EF:86:B5:03:34:24:F1:FB:F4:62
Certificate issuer:       /CN=46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8
Certificate serial:       010D0C9F4328584297DE5BAD1FC22B1DCB97CA00
Authority key identifier: BA:DC:38:37:D4:3A:B1:5D:33:5D:B8:FF:5F:82:64:1B:DC:95:31:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8/3503b1a6-9fab-347d-bfc9-9241c0b30a60.roa
Signing time:             Wed 19 Jul 2023 01:00:17 +0000
ROA not before:           Wed 19 Jul 2023 01:00:17 +0000
ROA not after:            Tue 17 Oct 2023 01:00:17 +0000
asID:                     53486
IP address blocks:        2602:2a6::/40 maxlen: 40

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:97:de:5b:ad:1f:c2:2b:1d:cb:97:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8
        Validity
            Not Before: Jul 19 01:00:17 2023 GMT
            Not After : Oct 17 01:00:17 2023 GMT
        Subject: CN=0e6a03cd-c113-46a6-a4da-1a41c86917d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f5:cb:83:a4:f2:6a:40:00:89:e7:6f:fe:04:
                    a6:84:47:f4:4d:02:7f:ce:45:f4:5c:ed:ff:bb:5b:
                    91:cb:2e:7d:a1:9f:81:aa:da:b6:1d:d3:99:bc:02:
                    c9:29:ce:a4:40:0a:c6:69:b6:78:4f:52:a8:43:b8:
                    e9:ca:c3:b7:42:65:f3:58:8c:c2:22:d4:f3:7b:c1:
                    53:2a:6b:b7:85:b0:4f:cc:2d:a7:b7:cd:49:82:cd:
                    1b:92:03:f5:2b:10:4e:b9:53:31:df:a7:43:ba:bf:
                    20:a4:fe:b7:ed:96:c8:13:b1:5b:18:fc:2e:fb:ad:
                    b9:61:f3:a3:08:0e:cc:af:8f:12:bd:95:2f:f4:76:
                    98:92:1b:a0:8b:cc:78:b8:75:f5:33:25:dc:93:b3:
                    1a:bf:00:8b:e4:96:ec:c1:16:14:c6:4f:0d:8f:30:
                    3d:96:60:75:48:4a:b5:23:65:82:cb:3a:19:27:ab:
                    fe:30:a8:18:29:eb:7d:10:65:7d:14:bc:82:1d:db:
                    b4:c3:8d:95:ad:df:79:6d:30:49:37:b2:e1:be:34:
                    5f:24:c6:da:fc:fd:2a:75:77:3f:cd:8e:5a:09:c4:
                    3e:e1:5d:e1:c0:8f:a5:db:48:62:98:e0:49:7e:b0:
                    d6:79:33:b3:dc:68:35:f5:04:83:56:81:71:c0:7f:
                    a3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C9:62:8A:F5:2B:EE:07:8F:0B:EF:86:B5:03:34:24:F1:FB:F4:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8/3503b1a6-9fab-347d-bfc9-9241c0b30a60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8/46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8.crl

            X509v3 Authority Key Identifier:
                keyid:BA:DC:38:37:D4:3A:B1:5D:33:5D:B8:FF:5F:82:64:1B:DC:95:31:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46eaa1b2-dcf5-4e51-8447-b9f73acaf4c8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a6::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4f:95:3d:7f:eb:1a:d6:b3:29:01:d9:5a:ab:de:86:32:c7:
         15:36:6c:c7:69:68:43:af:fa:2d:16:18:91:60:b3:3b:60:be:
         0b:9b:0c:1b:70:e1:7e:6e:3c:19:a8:62:26:78:ba:33:4d:ca:
         8a:6d:27:62:e4:6b:2b:d1:62:81:d8:e2:55:e6:11:0a:f6:a2:
         d4:25:64:c6:98:1f:57:4b:d3:67:99:d2:46:4d:c2:aa:ee:6f:
         6c:d4:56:df:6d:fe:52:5e:b5:39:bf:d9:c7:6e:51:62:5f:a3:
         18:84:4d:95:2b:4c:ab:30:51:0c:15:a1:08:4d:ce:77:fd:91:
         97:cd:15:1b:43:8b:fc:df:a2:35:f0:b0:cf:32:80:dc:e9:91:
         86:7e:45:c9:61:37:93:1e:8f:b3:fa:ba:61:e4:28:54:d1:fc:
         7c:47:4f:c2:e7:52:32:3d:67:46:27:cb:17:a8:e9:cb:da:39:
         49:df:a0:b0:f8:44:ea:03:75:82:91:aa:60:0c:9f:7e:8e:1d:
         24:93:9e:bc:3e:1c:00:78:d5:a7:0a:52:0d:5c:ae:f0:ce:1c:
         e6:38:91:62:00:aa:f1:47:99:7d:d5:76:87:db:d4:a3:5a:e9:
         a4:17:5d:c0:5e:da:74:94:f8:b3:33:0a:40:31:c2:83:b6:31:
         80:e6:2b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----