Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/178f6487-0b99-3b87-9a39-f2b79d4c5b1d.roa
File:                     178f6487-0b99-3b87-9a39-f2b79d4c5b1d.roa (raw, json)
Hash identifier:          2HYz2BCyFQUFY3mctI1vMmz0p4Ii6+yHfFqoL6b3jRo=
Subject key identifier:   1E:C2:04:F9:7B:8E:AC:91:FF:50:EE:83:41:D3:D5:07:7D:82:25:09
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285841A93BA0781D1BC088035F38F0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/178f6487-0b99-3b87-9a39-f2b79d4c5b1d.roa
Signing time:             Sun 23 Apr 2023 12:00:00 +0000
ROA not before:           Sun 23 Apr 2023 12:00:00 +0000
ROA not after:            Tue 24 Oct 2023 04:00:00 +0000
asID:                     393552
IP address blocks:        2001:470:c0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:a9:3b:a0:78:1d:1b:c0:88:03:5f:38:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 23 12:00:00 2023 GMT
            Not After : Oct 24 04:00:00 2023 GMT
        Subject: CN=10a0c98f-b231-4f49-a9ee-2971bb687611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:44:e5:c4:b1:d8:da:ab:17:05:e4:3f:75:56:
                    63:62:fd:71:7d:f6:b6:4b:e2:57:2a:4a:6f:ca:25:
                    41:9d:99:05:85:28:b0:ad:3d:40:19:b9:83:14:2d:
                    79:7b:0c:6c:43:a2:cb:ec:c3:09:7e:32:cf:92:07:
                    1a:09:1a:b0:59:89:0b:73:26:ff:be:02:6c:d5:df:
                    6a:78:e1:57:0c:0b:e8:a2:00:8f:cf:9c:0d:0a:81:
                    a9:99:89:67:bd:69:67:94:5b:a8:8d:36:ee:33:fb:
                    61:07:ee:99:de:80:6d:b9:99:5a:b0:6c:2a:19:cf:
                    0c:55:f7:d7:f6:3d:13:22:58:68:7e:86:e4:46:38:
                    d7:0d:8d:65:f3:89:b3:b5:7a:f4:99:90:1c:d2:2b:
                    1b:24:3d:b3:34:3a:0a:98:2f:ba:9e:11:f6:d9:4f:
                    fa:d8:ea:67:49:cb:5a:e7:0a:2c:99:2c:59:99:9e:
                    17:89:68:55:43:d7:1f:7a:47:97:d5:df:c6:27:44:
                    03:54:1b:02:dc:de:e5:49:01:2f:2e:4e:40:3d:30:
                    ca:e4:35:f3:76:50:86:b6:40:86:e1:03:47:79:3d:
                    86:62:21:d7:50:5f:db:88:da:ef:4f:cc:42:dc:46:
                    8b:e8:6c:bc:33:5e:30:ca:20:39:0f:32:0a:e6:07:
                    28:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C2:04:F9:7B:8E:AC:91:FF:50:EE:83:41:D3:D5:07:7D:82:25:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/178f6487-0b99-3b87-9a39-f2b79d4c5b1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:c0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:5c:31:59:9c:aa:8f:b1:b9:2a:23:15:f0:e3:df:2a:6c:53:
         1b:82:c9:a7:d0:78:aa:4b:01:f4:6c:fe:dc:49:27:49:b9:f2:
         05:59:c7:bb:d2:2f:96:10:21:a5:94:31:80:58:34:d0:f3:06:
         14:b2:d4:65:72:55:b7:45:3a:a5:aa:8f:ce:1c:34:1d:d3:b0:
         2f:41:01:df:ff:55:e8:a5:5f:03:65:c2:ac:64:0b:55:69:f0:
         ff:80:17:d9:66:61:91:0a:9b:07:72:30:26:8a:67:be:a8:4a:
         b3:c7:28:25:5e:40:b8:3c:a0:fd:4d:32:09:8e:0c:8f:29:e2:
         f1:ca:b8:70:48:e8:91:40:82:ff:e6:a3:41:08:7c:59:07:86:
         ad:c4:60:86:dc:5a:6c:6d:46:0a:3a:8b:2f:90:db:a9:f4:bd:
         03:67:98:e1:d8:58:79:7f:00:8a:b8:6b:1a:26:11:a4:6f:7d:
         af:b2:9f:14:8c:21:c0:39:5c:41:26:95:b7:16:f2:ec:d2:2a:
         9f:4a:a6:b3:a8:3d:e9:a8:29:3a:cc:ea:6b:68:2b:33:0e:46:
         77:2c:85:88:d6:3c:ce:76:5c:08:da:fe:37:6c:ad:55:df:1f:
         76:25:c4:92:4e:fa:c9:ea:eb:c7:5f:62:a8:c6:4b:fc:4a:54:
         0b:6f:5c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----