Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e69971a-2363-32ea-a8b7-ee6ab468fd87.roa
File:                     2e69971a-2363-32ea-a8b7-ee6ab468fd87.roa (raw, json)
Hash identifier:          VTsVDFFWaYOk5/rf+eWOBpOvDIani4V+4o1sbQPq+GQ=
Subject key identifier:   F2:89:5A:8C:82:60:6E:E8:82:F3:82:2C:86:E4:44:34:A8:0E:7C:DD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA657D4582AE91C325B8C00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e69971a-2363-32ea-a8b7-ee6ab468fd87.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     26123
IP address blocks:        2001:470:10c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:57:d4:58:2a:e9:1c:32:5b:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=79b5e2c3-e3b2-41b5-b01a-f1f02fae2689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:15:46:2a:af:ef:a2:ac:92:28:25:39:be:96:
                    b3:75:a5:04:1b:0a:6e:50:37:ea:ab:95:76:e8:63:
                    b2:90:89:36:60:96:67:56:9a:83:f7:eb:2d:31:b6:
                    2a:35:6c:5a:55:c0:99:16:e0:15:fb:66:57:12:c0:
                    31:c5:69:db:c1:d3:9c:63:3e:12:e9:b7:41:c0:ac:
                    82:4d:d3:81:02:3a:a5:3b:0f:05:99:f8:8c:ce:16:
                    23:f2:b6:10:37:5b:20:8b:7d:5a:fe:48:8c:ec:d6:
                    18:ee:3c:06:c5:ac:db:f2:73:7d:94:f7:17:4b:43:
                    cb:8b:23:c8:cb:ec:8a:e1:01:e7:60:bf:c7:50:58:
                    20:74:a5:7f:01:56:92:21:47:60:ec:4d:a5:e0:94:
                    8a:0d:bf:8e:b4:29:e2:27:11:f7:79:8f:e9:20:6f:
                    04:5c:16:3a:8a:dd:ed:79:9f:b3:15:bb:fb:98:fa:
                    20:cd:53:6d:b8:4d:fc:f0:85:7f:97:3a:85:b6:52:
                    32:a5:0b:3a:d9:43:81:e6:fa:4e:bc:a7:56:4d:a7:
                    7a:d7:29:f1:6b:a2:53:39:92:e0:b5:7f:e2:f0:a5:
                    f5:6c:8a:89:96:d4:4f:fd:4b:c5:83:b3:a2:4e:0b:
                    36:91:1f:88:40:e8:06:31:f6:33:cd:9b:16:cc:da:
                    c3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:89:5A:8C:82:60:6E:E8:82:F3:82:2C:86:E4:44:34:A8:0E:7C:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2e69971a-2363-32ea-a8b7-ee6ab468fd87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:10c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ea:7b:b9:73:89:e9:c2:41:77:93:48:3c:14:d6:23:7e:d3:
         fa:47:56:c7:3f:75:36:12:f9:61:fc:b5:93:57:98:42:ff:dd:
         86:b2:3f:d9:52:40:a1:81:de:6a:fb:c4:40:ca:ff:04:3e:f0:
         f5:f2:84:70:1f:f4:50:70:1b:39:b4:55:28:c1:af:94:fc:b3:
         96:39:2c:60:2a:48:6d:88:be:f8:bd:81:fe:7d:d0:37:25:a3:
         47:7a:a7:44:58:c8:3d:cc:7f:36:5f:65:0d:d0:f9:4c:d3:41:
         df:97:26:bb:d4:58:7d:5d:f4:cc:57:02:6a:6b:13:b9:24:99:
         8f:66:ca:85:3a:bd:07:55:0c:51:1c:87:ab:89:2c:9f:a3:6b:
         a1:7f:c2:fc:f7:4a:e6:33:34:5a:5b:e0:9d:da:26:cf:31:6a:
         d7:20:d3:cb:3e:d5:74:c0:f9:7f:7f:67:d1:c4:17:92:ef:0a:
         4a:3b:ac:88:f0:ce:9e:6f:78:8a:4a:77:d7:18:6d:1b:1f:44:
         73:5a:7b:2a:ae:99:14:24:19:80:8b:72:8a:06:ff:de:30:0c:
         50:d7:18:7e:26:8d:b0:71:08:17:d1:72:66:69:10:4f:4a:67:
         5d:df:ce:19:2e:34:31:de:e5:f0:85:11:e5:a6:ba:3b:35:59:
         8d:2f:8c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----