Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ee4f339-9e56-30c4-b9df-3073e054ec93.roa
File:                     2ee4f339-9e56-30c4-b9df-3073e054ec93.roa (raw, json)
Hash identifier:          EsOLD6L7bQMhGGH+LVOfVJg7BCBeeRnYF6MfC67v3Hk=
Subject key identifier:   24:44:67:16:7B:E2:52:C0:51:CB:38:0E:26:42:FB:F3:B0:83:E7:13
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA64444685D952EDA4E9300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ee4f339-9e56-30c4-b9df-3073e054ec93.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     198362
IP address blocks:        2001:470:5f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:44:44:68:5d:95:2e:da:4e:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=6ef9689e-b46b-431f-beda-5cc30fe9cc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:66:5d:22:fe:4f:81:fa:08:be:fc:a8:92:2e:
                    dc:4b:f0:4d:a9:97:32:32:ee:eb:27:c4:88:e8:34:
                    f5:83:fc:c1:47:46:40:04:c8:0e:0c:29:76:df:86:
                    7e:a8:cc:81:9c:e5:88:c5:48:1b:28:c5:8b:3c:3c:
                    aa:10:e0:8e:d0:3a:ac:fb:16:0c:28:77:c6:a3:41:
                    7f:76:dd:f4:a4:10:63:7a:da:e1:a2:c8:c5:53:8e:
                    41:f1:8b:32:5c:99:ef:c5:c4:9f:49:53:7d:00:ee:
                    e5:5d:88:df:dd:a0:59:42:43:d3:03:69:3a:c2:8f:
                    57:0c:92:07:2d:2b:72:c5:52:1d:dd:fd:2f:73:15:
                    b7:82:11:af:87:6a:8c:69:d9:bd:85:48:c4:b9:d1:
                    3b:e9:41:d7:d3:73:a5:d8:aa:f0:86:c3:a0:86:22:
                    36:dd:6c:5e:f1:65:56:fe:ee:88:72:65:8e:e6:18:
                    06:ba:04:94:c7:e2:98:00:84:82:dc:3b:ef:c5:97:
                    a0:e1:3a:61:3f:f2:85:a1:f0:9d:a3:82:f8:b3:42:
                    09:4e:98:a4:20:cb:eb:f9:b0:f2:c2:0c:62:33:8d:
                    34:62:13:7d:23:1a:a3:54:cd:c1:36:10:52:6d:f8:
                    b4:34:ba:fc:05:77:be:1a:66:f1:c6:ce:c0:c5:44:
                    02:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:44:67:16:7B:E2:52:C0:51:CB:38:0E:26:42:FB:F3:B0:83:E7:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2ee4f339-9e56-30c4-b9df-3073e054ec93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:6b:1d:4c:25:a0:0a:6c:9a:48:7c:a6:b1:9e:e8:5b:85:b2:
         29:a6:eb:4c:f9:3a:78:f1:1d:2f:87:0a:e9:14:94:cd:17:97:
         6b:41:0e:ee:ca:bf:b4:0e:ca:f6:03:7a:7b:ef:dd:1c:a4:ba:
         bf:0d:d3:b1:f9:8f:04:8b:f6:ec:05:f1:8e:f6:41:f9:a4:ed:
         b1:66:1a:eb:0d:da:41:d2:4e:43:b8:24:c0:1b:f3:72:87:bc:
         3a:d4:d5:35:43:62:7e:0f:75:66:60:32:be:6e:10:ef:b2:93:
         dd:44:4c:8e:03:30:80:28:b9:51:be:f2:2e:d0:2e:a7:fc:04:
         fa:b5:bb:e0:7a:89:c1:17:e2:a7:cc:ef:18:98:78:eb:45:a6:
         f6:e5:f4:8f:03:c1:b1:1a:3a:79:52:6f:c6:0a:ea:19:fb:b7:
         03:6e:2f:6c:80:e0:fb:81:70:11:0f:19:89:3f:16:27:09:b3:
         f0:72:39:98:af:39:26:d7:01:32:0d:37:50:41:46:64:8e:01:
         a6:66:c0:55:e5:07:5e:56:9c:0b:52:df:77:2c:ea:93:82:0b:
         9d:da:ef:9e:50:f9:b6:e0:78:16:df:5a:34:fd:5d:50:6c:1b:
         95:19:e1:72:c9:ec:85:53:f4:e1:ea:5a:c0:6f:8c:66:73:ec:
         51:a5:f7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----