Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/b7da2647-2462-3f09-8034-59b9e23f5876.roa
File:                     b7da2647-2462-3f09-8034-59b9e23f5876.roa (raw, json)
Hash identifier:          QZVHIr7YkR9T/ni71CsypdjdCeCrUxS+WEQ7WIkFv6A=
Subject key identifier:   6B:07:0B:68:16:A3:54:13:B1:E4:BC:FF:0C:36:79:F0:F4:67:D0:0B
Certificate issuer:       /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial:       010D0C9F43285841EC75F7F5CC5385AE85D6AA2C
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/b7da2647-2462-3f09-8034-59b9e23f5876.roa
Signing time:             Thu 18 May 2023 15:26:47 +0000
ROA not before:           Thu 18 May 2023 15:26:47 +0000
ROA not after:            Wed 16 Aug 2023 15:26:47 +0000
asID:                     394907
IP address blocks:        2607:3240::/32 maxlen: 64

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ec:75:f7:f5:cc:53:85:ae:85:d6:aa:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
        Validity
            Not Before: May 18 15:26:47 2023 GMT
            Not After : Aug 16 15:26:47 2023 GMT
        Subject: CN=dc97b08b-afb3-40d8-9b1e-653a4508b18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:de:30:2d:71:2e:16:65:bf:78:f8:33:5e:
                    04:25:57:fb:b2:ed:8c:ac:d7:4f:1d:32:48:62:65:
                    f6:59:2b:db:ac:4e:50:43:38:fd:e2:93:d8:d0:ae:
                    72:69:16:f9:ff:37:6b:cb:f4:47:88:9a:e4:e6:9b:
                    2a:4a:99:cb:2b:b6:33:2f:20:90:0c:27:a1:b4:70:
                    3b:b0:ad:75:c8:a1:c1:e3:23:28:6e:91:27:a9:14:
                    d8:ae:4f:7d:12:07:ac:9b:03:36:90:35:73:03:05:
                    18:7e:dc:85:83:9b:ba:34:cf:fa:d6:cf:50:2d:5e:
                    db:b1:12:83:35:f4:d1:13:50:6f:24:ef:48:1f:3d:
                    fd:46:c1:bd:80:86:53:2d:3b:13:83:61:80:18:ec:
                    2f:4c:f6:7e:d9:d9:fc:a3:6b:56:2a:9c:75:6d:1f:
                    a4:25:02:10:a8:cb:33:41:30:12:f9:78:34:7f:e7:
                    98:ad:71:3e:45:0e:05:49:df:80:d2:83:56:e1:62:
                    a0:4b:59:02:ad:76:2f:e2:a9:a3:26:76:1b:01:65:
                    b6:13:9e:18:81:13:7a:ee:e8:4b:91:0f:a5:73:d5:
                    86:53:4a:53:36:44:7c:73:81:09:0b:95:6f:ae:f6:
                    6c:d8:bf:7c:9e:cc:e6:d1:c5:71:ee:35:6e:1a:44:
                    6a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:07:0B:68:16:A3:54:13:B1:E4:BC:FF:0C:36:79:F0:F4:67:D0:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/b7da2647-2462-3f09-8034-59b9e23f5876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl

            X509v3 Authority Key Identifier:
                keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:3240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:08:67:f7:0a:e3:ec:5d:94:3d:60:8f:93:5b:03:d7:8d:bb:
         da:a4:27:b2:71:09:7c:8d:4d:87:a7:9c:27:aa:07:94:81:48:
         fd:d4:d3:8d:6d:1b:5b:f1:df:8b:51:e2:53:6c:79:c5:cf:91:
         5d:44:8f:64:ba:da:e8:9c:01:41:51:21:35:9f:e9:48:d0:8a:
         ba:32:5c:fe:bb:a9:34:7e:0e:5c:72:ea:69:8a:13:2f:98:ff:
         6a:83:4e:a0:f6:76:2a:ad:68:c7:e9:cf:b0:37:83:c0:33:a4:
         1f:23:3d:7d:1c:8e:2c:ca:ed:e0:66:c5:2d:18:75:17:98:40:
         25:4e:64:d7:13:92:f1:22:77:ec:79:e0:89:ff:6f:78:73:f5:
         bf:2f:4a:9b:f0:12:74:65:47:8e:5c:18:4d:1a:5d:a0:64:c8:
         b5:bb:85:44:c6:9b:da:c1:df:fa:f1:09:54:82:ac:ad:cf:38:
         aa:01:b3:f4:2f:b1:c1:4f:28:bf:91:db:0b:b0:6c:f2:e6:bd:
         63:a1:72:48:ba:97:d7:3d:b6:c1:b5:18:ec:4c:8b:34:bd:59:
         ea:e6:38:b8:ba:cc:6d:81:1b:26:60:8b:cc:da:7f:5d:4d:16:
         92:d0:a6:65:ca:6e:2b:b2:eb:ed:17:79:22:a3:c0:6c:60:b1:
         7b:95:c6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----