Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/181a984d-8737-382a-b414-1cabbf4808d4.roa
File:                     181a984d-8737-382a-b414-1cabbf4808d4.roa (raw, json)
Hash identifier:          YLiieSmek3i8P4DfcHPhABjl99tg5df9tdpKNwAzz14=
Subject key identifier:   20:8A:1C:D8:C2:09:91:C0:12:C0:E2:EC:7A:DB:BA:C4:E0:EE:E2:60
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A5082BC873EE95A1DC4F440
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/181a984d-8737-382a-b414-1cabbf4808d4.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     393246
IP address blocks:        2001:470:13b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:50:82:bc:87:3e:e9:5a:1d:c4:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=5a91389e-3883-42c2-ae5b-1a68b79bcae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:0a:8e:43:30:73:d6:ff:71:75:dc:a2:5b:
                    44:95:a0:85:92:2d:87:2e:88:dd:e3:42:44:d4:00:
                    00:30:7b:4a:43:a0:bb:bd:e1:6d:b8:44:2d:85:39:
                    3a:e8:7e:5d:ea:2f:ad:28:4c:97:a4:3b:bb:63:e7:
                    2c:14:2c:c0:8c:e0:dc:d5:07:9c:60:f3:bf:5d:84:
                    58:dd:1f:53:e0:c8:95:18:fa:e8:1f:39:15:9e:7a:
                    5d:60:18:7e:eb:6e:13:41:be:d3:90:95:44:a8:e1:
                    79:01:9e:89:41:93:65:c3:97:27:87:26:8d:a8:95:
                    5b:2a:14:18:af:85:c9:f7:6c:24:c8:dd:96:99:10:
                    40:b6:e1:10:4d:67:91:81:b3:11:62:9b:84:03:42:
                    bb:9f:e3:68:ce:a1:d6:f3:ae:7f:9e:00:bb:96:cf:
                    73:d9:76:fe:75:e2:d4:c0:cc:0a:78:0f:a0:94:cf:
                    ef:96:d1:3f:f8:b9:96:80:4b:84:8e:4e:dd:fb:79:
                    d7:78:14:8e:50:f3:8c:cb:76:a5:a2:89:c9:04:e1:
                    bf:91:5a:e5:3e:bc:4a:ea:9c:10:be:99:25:b2:35:
                    17:d1:4e:88:4c:b2:fa:ce:df:bb:71:e4:d9:bb:08:
                    c6:eb:a2:53:41:ff:cf:84:ad:fd:ac:83:88:cb:af:
                    a6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8A:1C:D8:C2:09:91:C0:12:C0:E2:EC:7A:DB:BA:C4:E0:EE:E2:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/181a984d-8737-382a-b414-1cabbf4808d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:13b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:db:b6:b3:b3:a9:51:43:a7:5d:06:e8:d9:30:c5:00:a1:9b:
         2a:6a:93:49:f4:b9:ff:eb:f4:bc:1b:86:0c:3b:65:5b:4a:bd:
         ba:2e:90:02:ba:f9:0e:d6:a1:79:37:e6:d3:81:e7:6c:4f:17:
         08:ea:22:23:5a:09:e9:ff:aa:2a:71:be:20:1f:bc:da:99:6e:
         0f:5d:cb:a7:69:5a:b4:5d:aa:35:2d:4d:33:8c:74:79:8b:81:
         b2:bf:ec:83:8a:cb:8c:a3:9b:e8:a6:f7:69:8e:21:68:6e:47:
         78:9d:7d:b7:f4:f2:07:29:79:0e:d0:5b:9a:35:60:c0:09:63:
         3e:11:b2:2d:73:a4:1e:0c:7a:c6:cd:28:36:33:45:ab:bd:45:
         1e:f8:cc:37:55:6d:10:dc:b7:74:8c:82:f2:0a:dd:d1:e5:0e:
         28:b3:51:b8:14:87:5f:d5:29:c6:06:73:1d:34:97:1a:f8:33:
         6a:cf:8f:4b:87:6e:b5:ba:1b:66:d9:09:db:31:9c:8d:ab:0d:
         27:3a:41:26:b7:50:b3:29:dc:e6:d8:79:65:b6:56:ae:13:98:
         45:63:ad:a4:7e:47:a1:ad:be:e9:87:62:80:20:37:3a:9a:51:
         a8:ee:2a:d2:35:69:92:81:22:7f:92:17:c6:4a:56:21:f8:c9:
         84:e7:e1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----