Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6035df6a-dee9-3669-bb59-d66ef3d9173b.roa
File:                     6035df6a-dee9-3669-bb59-d66ef3d9173b.roa (raw, json)
Hash identifier:          GSUJ2YuKSIQxi5SSMDHEtH9iJFj8rnEYhLjrPIja3bI=
Subject key identifier:   B1:4A:8D:2F:0F:39:51:88:AA:CC:CD:EC:43:3E:2A:1C:E4:92:EE:64
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583CFB0D26CF85416D89D79D4CA8
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6035df6a-dee9-3669-bb59-d66ef3d9173b.roa
Signing time:             Sat 19 Feb 2022 05:00:00 +0000
ROA not before:           Sat 19 Feb 2022 05:00:00 +0000
ROA not after:            Thu 23 May 2024 04:00:00 +0000
asID:                     11344
IP address blocks:        2600:1900:4110:fd0::/60 maxlen: 60
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:fb:0d:26:cf:85:41:6d:89:d7:9d:4c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 19 05:00:00 2022 GMT
            Not After : May 23 04:00:00 2024 GMT
        Subject: CN=72114865-49cc-41c8-8f13-45b5286cec8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3e:10:c4:14:22:39:fe:54:61:d5:23:63:61:
                    83:f0:53:ae:3c:d0:a5:c5:70:c6:d5:7b:db:a8:b1:
                    f9:2d:37:a5:4c:17:ad:0d:85:38:43:ae:1f:6f:92:
                    c9:e4:57:03:37:ec:79:fd:a3:f1:74:60:82:38:48:
                    51:dd:6d:ee:32:83:f8:a6:43:6b:a9:82:b4:8e:24:
                    bd:4b:3e:b0:07:68:1c:99:95:b1:3d:3d:39:68:13:
                    17:66:7a:c3:cc:12:92:a7:64:ed:1e:0d:b0:a9:2e:
                    f0:74:5c:11:ff:79:6b:41:63:5f:46:00:86:08:e6:
                    79:76:a2:4d:9a:e3:87:40:1b:cd:4f:7a:c2:c3:69:
                    8a:17:fb:92:09:99:ac:65:31:b2:29:1c:5e:f2:03:
                    e2:4c:5b:f0:b8:72:1f:76:de:15:d0:f1:ac:1f:37:
                    e6:f2:a5:06:9d:18:33:70:47:fc:9a:59:a1:37:24:
                    e7:31:af:01:b9:60:2a:20:92:bf:98:87:d2:8b:b5:
                    fa:bb:2e:45:6d:29:c8:1e:67:f6:4b:d3:8c:f2:b3:
                    5d:3c:82:4d:85:34:ac:08:78:89:58:f4:63:93:50:
                    1a:7d:16:e5:36:ea:3a:15:14:f1:3f:c9:81:5e:17:
                    1f:29:50:04:0b:85:2f:8e:0d:e5:97:e3:b6:43:56:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:4A:8D:2F:0F:39:51:88:AA:CC:CD:EC:43:3E:2A:1C:E4:92:EE:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/6035df6a-dee9-3669-bb59-d66ef3d9173b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1900:4110:fd0::/60

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:a5:b8:06:84:ea:6c:e6:99:8d:78:a5:fc:6e:a6:f8:a9:54:
         18:da:e4:6d:d3:2a:e9:62:a7:75:0f:5d:07:7e:4c:0a:b4:52:
         ad:b7:47:3c:dd:48:f6:33:3b:cb:85:ed:e0:55:bb:d2:eb:76:
         d8:43:db:06:ba:66:67:bc:a2:b6:2a:0a:8e:47:47:c4:5c:d9:
         6e:da:6a:a4:52:fa:1d:70:76:75:19:3d:65:87:96:6a:9e:80:
         3c:13:62:49:8c:57:34:db:84:22:a1:76:00:bb:a4:a1:f3:d6:
         f8:3e:50:45:49:f0:df:e6:66:28:fd:20:d5:71:69:73:d3:d1:
         c4:7b:c8:50:5b:1b:1a:c7:a2:c9:14:6f:61:35:a7:da:89:35:
         c6:ca:08:b9:70:50:5f:8c:3f:95:d8:39:96:c4:22:e7:53:91:
         7c:85:c6:ba:eb:ca:ab:f3:51:e2:e8:9f:19:ab:70:88:1b:c9:
         92:b1:e2:04:55:ba:89:41:5f:fa:fe:4d:cf:14:c3:c9:f3:87:
         4a:aa:72:83:0e:77:6e:39:11:f1:b3:40:53:06:fe:c9:1f:0c:
         d1:26:45:10:c2:96:c3:e8:b9:e5:88:3a:c2:08:b7:eb:fd:c7:
         14:cf:dc:26:df:a1:ac:1b:3d:ab:b1:a5:bf:b9:5b:10:c1:a6:
         9f:1c:7d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----