Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/0728bb3f-4877-333a-bc4f-b6b9339f5974.roa
File:                     0728bb3f-4877-333a-bc4f-b6b9339f5974.roa (raw, json)
Hash identifier:          3YonlgG4spnCcNHq3m6mhO/uYQxV49B/VTIDKfFTYUQ=
Subject key identifier:   10:ED:50:CF:82:D0:E9:19:94:40:1C:1C:98:71:25:B0:EE:2A:75:61
Certificate issuer:       /CN=643914aa-5306-4352-8a01-3ac381827191
Certificate serial:       010D0C9F432858420DFC6B1DA23EE083D105C880
Authority key identifier: EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/0728bb3f-4877-333a-bc4f-b6b9339f5974.roa
Signing time:             Tue 30 May 2023 15:39:22 +0000
ROA not before:           Tue 30 May 2023 15:39:22 +0000
ROA not after:            Mon 28 Aug 2023 15:39:22 +0000
asID:                     400442
IP address blocks:        2602:fbc7:7::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:0d:fc:6b:1d:a2:3e:e0:83:d1:05:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643914aa-5306-4352-8a01-3ac381827191
        Validity
            Not Before: May 30 15:39:22 2023 GMT
            Not After : Aug 28 15:39:22 2023 GMT
        Subject: CN=d35dcb6d-7953-4c83-a6b7-23bad98639ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:95:ec:4c:44:12:2b:77:07:7f:72:07:c7:5c:
                    b3:20:0e:39:f0:9e:ed:73:39:50:08:28:a6:75:72:
                    48:50:55:fd:c2:76:cf:21:5f:84:ec:b0:70:83:16:
                    b3:94:8c:ab:e2:aa:9f:36:1e:77:55:c8:b1:b6:05:
                    e1:36:e1:18:d2:df:c6:00:cd:3a:2c:a2:5e:7e:38:
                    cd:39:ba:2f:5e:b6:77:34:d4:36:a1:93:15:4a:0d:
                    93:42:aa:97:51:9d:8c:f6:0a:87:bd:05:23:c5:fc:
                    e8:8e:2a:ad:80:5e:a6:de:44:66:27:c3:6f:81:02:
                    80:ea:1e:72:eb:60:99:95:f9:17:cd:1b:65:f8:d2:
                    47:dd:4d:22:33:1c:a1:ba:7d:8b:b9:22:72:6e:51:
                    03:e9:de:57:e7:bd:0b:4f:bb:ec:0b:6a:29:7c:53:
                    5d:51:07:6b:66:c5:9c:5b:77:39:10:65:8c:95:60:
                    a9:1b:bb:36:3b:47:96:b3:d4:e4:8e:bb:40:d2:2c:
                    22:0b:f6:ac:a3:23:f2:6e:19:93:c9:17:de:d2:5d:
                    42:f5:4d:12:05:18:04:0a:42:38:f4:ff:b7:b7:72:
                    76:62:2f:33:7a:00:32:a5:71:0b:45:d5:6e:79:e3:
                    b8:f3:92:8c:39:da:81:16:3f:84:a0:c3:d4:d3:b7:
                    15:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:ED:50:CF:82:D0:E9:19:94:40:1C:1C:98:71:25:B0:EE:2A:75:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/0728bb3f-4877-333a-bc4f-b6b9339f5974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191/643914aa-5306-4352-8a01-3ac381827191.crl

            X509v3 Authority Key Identifier:
                keyid:EB:2A:47:49:E5:CE:F0:85:DE:1A:D7:92:C9:A9:2D:B4:E5:73:17:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/643914aa-5306-4352-8a01-3ac381827191.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbc7:7::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0f:23:81:ab:7a:b9:29:7a:c5:4e:31:50:d0:f4:02:18:8a:
         ed:b1:41:b9:bb:f2:2f:c4:45:01:2b:99:f8:ef:f6:a8:13:d3:
         1d:18:82:31:7f:3c:b6:47:df:94:c0:95:bf:7c:80:a3:f9:a0:
         91:0f:aa:ec:d6:14:74:03:28:9f:8e:89:1c:35:c0:54:5c:f3:
         98:ec:24:bb:3e:de:f4:dc:80:74:c7:ec:5e:69:df:52:33:dc:
         ba:a3:72:6c:de:d6:7c:28:a8:e0:f0:5a:be:0a:fb:87:a0:89:
         e0:39:4c:63:df:19:e4:21:9e:c5:cb:f9:e7:31:a2:b1:2d:83:
         8c:8e:ca:23:2f:0f:d2:a4:62:46:87:ee:b9:1c:b5:7e:44:80:
         7a:0a:3d:8a:f7:e7:2b:d9:f5:a7:7c:ee:a3:cc:0c:3a:83:3c:
         da:42:a6:1d:cf:6d:75:48:32:9e:7c:1b:0b:5c:e8:3f:cb:98:
         b5:e1:2c:eb:ed:7d:a7:2e:19:6e:0e:7c:0a:36:4d:34:67:6f:
         b2:a0:e5:e2:0d:a7:eb:cc:3c:9b:3c:7a:f6:5c:0d:97:6d:23:
         63:60:61:fc:68:4f:48:d9:3b:37:d5:a5:b6:f5:13:29:88:2f:
         ee:b0:74:8b:15:29:ab:fa:00:6e:d2:32:7c:3c:58:f9:8e:40:
         d4:fa:36:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----