Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e28ac88-4614-3190-a77f-010f2c22ca66.roa
File:                     2e28ac88-4614-3190-a77f-010f2c22ca66.roa (raw, json)
Hash identifier:          actekBNuFY/Ihh1qVmhP7+QLwlm81e8M9hybV1zTiVw=
Subject key identifier:   F5:52:2D:5D:B4:7C:FC:6A:00:86:F5:65:A3:90:6C:CC:09:00:CE:4D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285841F1D19840C865A4B0EE348040
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e28ac88-4614-3190-a77f-010f2c22ca66.roa
Signing time:             Fri 19 May 2023 12:00:00 +0000
ROA not before:           Fri 19 May 2023 12:00:00 +0000
ROA not after:            Mon 20 Nov 2023 05:00:00 +0000
asID:                     53264
IP address blocks:        2001:470:12d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:f1:d1:98:40:c8:65:a4:b0:ee:34:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 19 12:00:00 2023 GMT
            Not After : Nov 20 05:00:00 2023 GMT
        Subject: CN=74a3b198-c92f-447b-94d9-151b956b7b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fc:8d:98:2f:a4:e2:12:9a:fe:70:0c:d6:71:
                    1c:1c:17:3c:d4:e0:38:59:9d:ff:92:29:12:58:c6:
                    27:54:85:1f:ec:02:df:28:58:8a:85:6e:36:cb:67:
                    65:85:c6:b4:99:f4:36:ac:08:aa:b8:96:03:fd:1b:
                    14:d1:ac:ec:d4:16:01:67:20:dd:bc:c3:33:25:94:
                    a8:f0:22:3b:0d:34:50:16:99:0c:07:87:4e:49:29:
                    fa:c4:9f:6b:f3:ef:d9:1c:df:d3:80:9f:a5:bb:b3:
                    a2:95:6d:08:ba:17:35:17:f4:5d:f1:f2:95:5c:53:
                    e2:15:d6:13:d2:6e:e3:c3:d6:3e:5f:47:2a:bb:87:
                    f0:7e:f3:e3:b3:c5:50:29:0d:c7:00:ca:99:8c:af:
                    4e:9c:2e:03:98:65:f8:fc:26:6d:89:32:72:40:3e:
                    96:4f:24:b3:63:f7:27:1f:91:25:ae:c9:9d:28:d3:
                    a2:82:d6:62:08:7f:86:61:4e:cb:18:d5:de:bc:35:
                    62:b7:e7:54:6b:8e:98:c8:af:d8:90:92:77:3d:37:
                    e0:1d:16:f6:af:78:ea:fe:27:7b:68:9f:e7:aa:5c:
                    88:2e:ad:89:b2:21:9e:0b:23:5c:90:e0:56:46:c1:
                    ef:85:a9:ca:71:80:53:3b:dd:b5:98:9d:e1:5e:cd:
                    55:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:52:2D:5D:B4:7C:FC:6A:00:86:F5:65:A3:90:6C:CC:09:00:CE:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e28ac88-4614-3190-a77f-010f2c22ca66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:12d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:3e:cd:d7:1f:cd:19:0f:d4:41:12:81:d8:e1:79:3e:05:a7:
         89:e7:e6:2d:97:9f:c7:85:67:be:14:fc:1f:02:87:ab:a4:b1:
         dc:15:73:dc:8b:81:9a:9d:18:2d:38:c5:12:fa:2f:a5:32:6b:
         8b:1b:eb:5a:03:dd:8e:b0:3f:ef:5f:7f:0c:44:67:56:9d:ec:
         9e:8d:62:2b:8f:f3:ab:93:ef:e2:e2:3c:7a:fb:eb:46:c9:1c:
         d1:f9:a3:3c:74:c7:d9:e3:75:25:4b:66:67:fe:04:5f:ca:5e:
         17:ae:4e:c3:ec:77:57:a2:2f:61:3c:10:06:4e:55:9f:db:22:
         be:7b:c0:dd:79:b0:4c:12:cf:5b:30:61:1b:fa:35:74:4c:fd:
         00:c1:3f:13:e7:60:1f:5a:30:f9:bc:8e:54:64:91:ae:fa:25:
         cf:12:0e:8a:ea:e2:c3:43:60:ae:ca:47:27:a6:3d:b7:8a:9c:
         52:c3:f8:a3:6a:12:d3:e2:89:c6:2a:ae:c2:a7:ca:36:5a:fe:
         f0:08:28:f0:99:78:16:cb:3d:3c:d5:f8:68:9e:ba:ad:2b:74:
         b4:9f:d5:59:de:65:fa:c0:6a:3f:9d:61:b7:af:0a:da:c1:ac:
         45:09:84:cd:b9:44:78:57:26:99:f9:74:89:14:cb:4d:be:4b:
         ff:12:ab:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----