Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0caa5873-a8e6-3d94-bfd0-2fca70cd5a51.roa
File:                     0caa5873-a8e6-3d94-bfd0-2fca70cd5a51.roa (raw, json)
Hash identifier:          6k9UpwI657D/KFLlX/Dmbt4wRpRJUtGQ32w8PQYZxwY=
Subject key identifier:   A3:27:8E:5B:F8:13:AD:0F:CF:8F:D4:A8:AF:93:4C:E9:A6:4C:34:D8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D458F5AC22C6912F19E191280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0caa5873-a8e6-3d94-bfd0-2fca70cd5a51.roa
Signing time:             Thu 17 Mar 2022 04:00:00 +0000
ROA not before:           Thu 17 Mar 2022 04:00:00 +0000
ROA not after:            Sat 17 Sep 2022 04:00:00 +0000
asID:                     54543
IP address blocks:        2001:470:15b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:45:8f:5a:c2:2c:69:12:f1:9e:19:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 17 04:00:00 2022 GMT
            Not After : Sep 17 04:00:00 2022 GMT
        Subject: CN=1e581032-29ad-4276-a968-92faa9f585b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:37:79:eb:c8:f4:88:3b:fc:f2:3b:62:87:64:
                    0c:5c:5f:ab:ea:3a:c7:15:fd:15:85:81:e1:e9:5f:
                    15:47:64:6c:22:1e:68:32:03:f6:3c:44:9f:26:26:
                    0f:d8:8d:70:8b:b0:9e:54:a3:da:d0:1c:28:5a:3c:
                    bf:fe:20:d2:88:92:ed:39:bb:b3:d7:78:d7:d3:17:
                    0f:35:92:f3:7f:6a:35:44:f5:18:87:0d:60:31:63:
                    0d:b8:cb:fa:a3:e0:12:64:cf:1d:19:1a:e9:03:a5:
                    81:c8:84:1f:1d:43:df:98:15:f5:63:c3:15:43:2f:
                    78:e6:f6:49:c3:98:ef:0f:55:a1:8a:bc:f5:db:eb:
                    0e:ed:5f:a0:6c:64:b2:cb:5c:4e:ee:88:b9:41:d4:
                    9d:37:7a:93:88:29:51:96:16:b1:a5:1e:ee:bc:a9:
                    92:81:08:ad:00:8a:db:a0:4b:c1:99:3c:1d:e2:62:
                    b7:ad:63:2c:aa:2f:03:37:25:6d:4d:2c:f0:c9:fb:
                    91:a7:10:62:69:95:01:ac:21:1e:3d:57:6d:8f:86:
                    09:cd:4a:44:5b:c3:6f:23:47:b1:ca:54:6c:75:c7:
                    c2:aa:e7:51:78:4d:9f:07:7f:2d:6c:fd:c3:6d:55:
                    73:0a:36:51:32:cb:ef:93:24:66:4c:5e:31:c9:9e:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:27:8E:5B:F8:13:AD:0F:CF:8F:D4:A8:AF:93:4C:E9:A6:4C:34:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0caa5873-a8e6-3d94-bfd0-2fca70cd5a51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:15b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:13:81:c3:61:2e:30:1c:c8:e1:bc:ff:d8:b7:85:40:20:06:
         4d:58:a8:4f:9d:80:6a:74:4f:ae:e3:41:71:29:16:9b:dd:6e:
         8e:b7:02:7f:6e:8d:6e:01:7f:0f:93:c5:bc:23:50:1e:69:f1:
         df:05:5e:fe:58:d5:b5:da:15:93:3c:70:d1:90:f0:16:05:b7:
         45:75:6c:d2:b5:f9:0f:89:90:6d:24:28:1d:8e:20:14:0c:09:
         00:1e:bf:09:0c:1d:83:8e:d0:39:0f:5b:b2:8e:bd:7f:08:66:
         1b:49:2e:17:5c:e0:de:d6:e3:d2:69:a9:32:48:98:6d:e5:76:
         53:f1:c7:d7:b6:1c:bc:7d:e8:f0:57:81:a2:e3:70:8e:2d:6b:
         b4:5e:23:92:4f:cf:4b:79:1f:f5:db:b1:2d:99:e3:da:8a:ca:
         3e:f3:ab:b2:a2:91:58:64:72:a6:27:fe:dc:f2:94:ed:a3:ad:
         bd:dc:e9:94:71:40:ae:41:a6:32:4e:e4:e6:77:f3:f1:4d:d0:
         08:dd:f3:4f:5c:8b:93:9a:ee:78:54:69:e9:5d:c1:b2:dd:2f:
         fd:c2:e6:03:ef:b1:fd:81:d7:ca:d3:55:46:d5:38:27:dc:2a:
         7e:6a:76:da:91:5e:1c:d3:b4:a5:ca:b3:76:52:5c:aa:1e:d2:
         35:34:79:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----