Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ac1708ac-4543-3737-970e-43a5fc886eb6.roa
File:                     ac1708ac-4543-3737-970e-43a5fc886eb6.roa (raw, json)
Hash identifier:          i9Nkw2+Gh+3/4AA8WgfiPxyo2R0pRp9TYe0loSRORNA=
Subject key identifier:   6E:0C:39:EC:0B:E6:8B:6C:D1:BF:21:05:F4:14:D7:CD:FE:CE:B2:5F
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285844580EF50AD28471B4ED70B140
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ac1708ac-4543-3737-970e-43a5fc886eb6.roa
Signing time:             Tue 26 Dec 2023 14:00:20 +0000
ROA not before:           Tue 26 Dec 2023 14:00:20 +0000
ROA not after:            Mon 25 Mar 2024 13:00:20 +0000
asID:                     30103
IP address blocks:        2620:123:2050::/48 maxlen: 48
                          2620:123:2051::/48 maxlen: 48
                          2620:123:2052::/48 maxlen: 48
                          2620:123:2053::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:58:0e:f5:0a:d2:84:71:b4:ed:70:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Dec 26 14:00:20 2023 GMT
            Not After : Mar 25 13:00:20 2024 GMT
        Subject: CN=d036688f-7299-4856-a7ef-ebadf9fb33c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:94:33:d2:c3:a3:b7:f7:7d:12:86:8a:8f:
                    98:20:82:df:01:04:2e:2a:f9:9b:1b:5b:ca:b1:15:
                    df:1b:6a:a7:47:3c:8a:48:16:72:59:8f:0f:61:b7:
                    97:0f:3c:5a:92:5a:51:7a:d0:9f:0b:6b:2b:68:05:
                    88:1e:c4:24:3c:42:f5:2a:4f:4c:fb:38:7a:98:71:
                    c6:97:0e:28:53:4c:28:ee:ad:c1:32:5b:4e:2d:68:
                    82:76:a2:88:76:5d:2a:82:78:dc:9d:c8:68:07:be:
                    70:39:78:97:ba:91:dc:04:39:4e:7c:25:e8:cb:5c:
                    89:5f:78:0f:d8:1e:e0:cc:f4:6f:09:d7:54:50:f3:
                    30:fd:81:d3:4c:6c:d3:08:21:e7:70:85:9c:f8:f5:
                    72:0b:5c:90:6c:e8:9f:ed:d5:0c:f6:f1:95:cd:4d:
                    e5:f6:b2:38:ca:94:60:cd:a9:8d:fc:76:30:87:e2:
                    f7:10:fe:43:7d:df:52:74:d3:79:28:6e:e6:e5:f4:
                    d4:c1:71:d2:a4:c9:71:f2:39:7b:aa:5a:6a:a4:a1:
                    24:44:06:77:1f:82:0c:b3:c5:8b:ad:b2:93:6f:f2:
                    5d:28:e8:c6:c0:10:65:10:41:cd:c7:77:1f:54:9f:
                    36:e3:f2:4f:71:ce:4b:4b:29:fe:58:65:e8:bd:bf:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0C:39:EC:0B:E6:8B:6C:D1:BF:21:05:F4:14:D7:CD:FE:CE:B2:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/ac1708ac-4543-3737-970e-43a5fc886eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:123:2050::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f0:4b:65:35:de:13:12:0a:b6:c0:65:ef:8f:4f:e4:82:5d:
         65:2d:e6:aa:ef:1e:90:98:26:0a:73:a7:cf:c0:d5:13:96:48:
         5b:95:ff:c3:e3:08:87:4f:92:99:ef:da:c9:54:b1:ef:45:de:
         da:ec:43:c0:87:63:1b:98:b2:e5:12:4d:87:7b:00:66:e2:ca:
         01:72:9c:fa:c0:de:10:da:41:a8:3c:bf:1a:7c:90:b6:e6:fd:
         62:6e:06:62:58:f2:5d:42:13:b6:46:e1:0a:98:2f:92:16:1b:
         4c:c7:01:5e:27:cd:45:d3:e7:fa:64:fd:aa:a4:83:4d:3c:c8:
         1b:6b:ea:cb:51:29:31:00:3e:f4:f0:f7:75:8a:82:fa:b4:6e:
         1d:95:3e:3e:94:9b:8c:13:46:57:b7:63:5e:f5:e5:ad:5d:7d:
         40:82:e0:c4:29:68:d4:51:b3:e9:0b:01:21:76:0e:e5:25:51:
         62:3e:cd:5a:f7:e5:b1:ef:f3:ea:4b:c6:3d:25:5e:88:5d:89:
         93:4a:c3:f5:f4:4b:76:85:12:a6:f8:d9:fa:c3:0f:8f:2b:d4:
         ec:38:9f:0e:cc:14:d0:2f:2b:29:01:14:af:6c:10:93:2c:57:
         fb:0c:fe:69:bb:df:d1:a9:27:30:40:90:9e:86:bf:4f:0b:8e:
         25:cc:16:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----