Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/270ab516-fd97-3fa2-8f47-70044c121d0e.roa
File:                     270ab516-fd97-3fa2-8f47-70044c121d0e.roa (raw, json)
Hash identifier:          iFXwTswR323EZjmvWEbhZMWBDW8WTIf8LIBiotOPDBY=
Subject key identifier:   6B:A1:06:03:30:01:11:A7:CF:6A:99:A0:95:6C:32:D8:1A:1B:83:32
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D79359558A71B81D7CA3A3540
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/270ab516-fd97-3fa2-8f47-70044c121d0e.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     18779
IP address blocks:        2001:470:1f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:95:58:a7:1b:81:d7:ca:3a:35:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=eec9c56e-bff2-488f-aab9-be11a44a8675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:bc:d3:df:02:47:d6:9d:6c:73:79:45:05:
                    e6:37:48:08:7c:1f:02:53:f3:8e:00:9c:79:d4:74:
                    eb:a8:a8:6d:fa:7f:e0:c9:7e:ce:50:24:d0:00:50:
                    e7:b9:f4:b1:b4:55:e8:71:44:54:a4:7a:43:50:f9:
                    b7:38:6b:29:f4:16:e7:37:64:0b:ed:3a:48:9b:7c:
                    83:e3:55:78:2c:92:7b:b8:24:75:a9:51:0c:86:02:
                    a8:87:03:88:f7:62:be:03:29:5d:c4:ca:00:35:e4:
                    f1:c0:ea:03:b9:13:07:89:ba:c1:48:ec:77:45:ba:
                    c5:9f:83:ed:af:7c:21:45:79:37:7a:a8:87:66:de:
                    5f:36:87:d4:17:0d:c5:6b:ce:c1:13:27:82:ff:74:
                    da:cb:3a:8e:1d:97:68:4d:44:9d:fb:bd:65:f1:12:
                    61:b1:39:80:7f:57:e2:9f:0c:a7:da:82:87:4d:86:
                    94:86:ee:a8:30:76:07:55:f9:67:fb:b7:37:06:4d:
                    90:df:c5:9f:ca:04:64:bf:5c:f0:93:e5:cc:68:8b:
                    8b:9f:28:83:0c:ba:9d:f4:c3:c3:03:e3:8f:09:4a:
                    b0:b0:09:b2:30:dd:a9:13:7f:37:54:38:83:5d:cf:
                    c3:79:7b:73:4c:ea:e6:14:21:9e:7b:9d:5f:2b:33:
                    2a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A1:06:03:30:01:11:A7:CF:6A:99:A0:95:6C:32:D8:1A:1B:83:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/270ab516-fd97-3fa2-8f47-70044c121d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:94:05:26:1b:6d:53:f9:0d:e6:1b:ad:32:a1:88:a1:4f:04:
         44:99:61:6d:38:2e:cb:90:7f:1b:05:3e:8d:c6:81:82:2b:22:
         5f:24:bc:9d:eb:dd:5c:0c:70:e5:5b:69:bc:5b:11:da:d6:2b:
         07:de:d8:7f:68:e6:21:c7:9d:00:d9:90:06:de:a8:10:b8:b2:
         02:03:8e:ed:2e:0e:8f:42:96:61:ad:53:19:9f:30:9b:8f:70:
         da:23:35:2a:de:80:08:55:e0:e7:03:50:70:8f:48:79:ed:d7:
         78:d8:46:2a:50:be:3e:84:ad:da:bc:ae:1b:b2:bf:c8:c1:99:
         a3:e9:29:98:50:fd:85:d7:5d:e5:7c:c1:29:c4:74:eb:c9:21:
         5e:f6:c0:de:00:18:9a:5a:1a:f2:cf:83:1f:b2:3c:77:3d:9b:
         60:2f:d2:2d:55:44:c3:f5:8d:64:da:28:48:cf:f7:c3:12:f3:
         10:24:96:f2:b3:c5:80:a1:eb:35:46:b0:bc:56:bb:71:bf:28:
         69:6c:8b:00:a5:38:45:a0:8e:79:67:6a:da:b5:f4:94:b4:3b:
         e2:48:8c:81:85:33:20:73:24:45:9e:9e:47:c8:03:5d:5e:0e:
         cb:5f:aa:b7:13:a8:be:32:ea:b3:a5:7a:8f:04:88:2e:d8:9c:
         57:c5:1a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----