Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a3ffe4f-bcde-3d44-a614-80cdcb9fd8b1.roa
File:                     3a3ffe4f-bcde-3d44-a614-80cdcb9fd8b1.roa (raw, json)
Hash identifier:          m34/jGAQ47G/PMibMjubFPjApca8+Rw38nhKSBG4XKs=
Subject key identifier:   35:2F:EB:D8:19:2F:00:95:33:09:B8:45:ED:7A:9B:58:C7:03:12:73
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583C701BD32137D13F6AB16DD840
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a3ffe4f-bcde-3d44-a614-80cdcb9fd8b1.roa
Signing time:             Fri 31 Dec 2021 05:00:00 +0000
ROA not before:           Fri 31 Dec 2021 05:00:00 +0000
ROA not after:            Fri 01 Jul 2022 04:00:00 +0000
asID:                     3855
IP address blocks:        2001:470:b6::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:70:1b:d3:21:37:d1:3f:6a:b1:6d:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 31 05:00:00 2021 GMT
            Not After : Jul  1 04:00:00 2022 GMT
        Subject: CN=511e0ca0-d788-4ea2-8829-a4f1e8346452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:82:7a:61:4d:17:2a:59:01:d9:4b:30:72:
                    b8:31:95:49:69:47:dd:d7:00:7a:4c:e2:1d:03:aa:
                    19:2d:c7:69:a4:00:0b:b0:cc:4d:be:d2:0b:fc:cf:
                    6a:0b:74:a7:04:65:e5:97:06:7b:b6:a5:2a:8e:da:
                    c5:b5:48:80:94:45:ed:f6:21:90:7c:8e:8c:88:8b:
                    c6:59:81:60:03:0e:e0:cd:29:e7:1e:90:c4:1f:25:
                    16:4e:f3:58:cf:ec:77:57:b6:c3:63:d6:b2:4d:9f:
                    b5:15:37:ec:73:0a:cb:98:63:e2:7d:7a:f5:22:12:
                    8a:10:cd:f8:e2:34:76:0c:87:75:dc:ca:88:ae:bc:
                    7b:f0:ea:84:1f:45:e4:29:46:60:8d:8f:ed:5c:2e:
                    ed:d3:f9:a3:c9:95:ac:bf:37:5d:86:74:10:f1:51:
                    6b:ca:31:42:13:97:f4:a4:85:a1:10:a6:de:ae:7c:
                    a3:56:bc:2d:cc:b1:ce:41:ca:bc:28:c8:25:4e:88:
                    26:16:40:00:dd:ab:8c:2a:0a:a5:74:1e:c2:91:71:
                    e2:4a:64:10:df:dd:e6:6a:e5:2a:37:32:e3:ed:ec:
                    2d:54:3e:d6:f1:19:7f:d2:60:91:f6:06:72:11:2e:
                    5c:ac:41:d9:4e:3a:07:a2:0f:b0:d3:dc:75:76:0c:
                    81:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2F:EB:D8:19:2F:00:95:33:09:B8:45:ED:7A:9B:58:C7:03:12:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a3ffe4f-bcde-3d44-a614-80cdcb9fd8b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:36:c4:09:bd:15:28:6d:43:f9:f0:14:62:9e:84:58:68:f0:
         b8:fe:9e:cf:a2:99:f2:17:59:0e:94:31:27:17:9e:8f:9e:60:
         ef:87:5c:3a:15:f6:e0:71:d5:50:bb:40:f0:2e:8e:ea:b3:45:
         0b:87:5c:f7:00:1e:9c:5e:0e:bb:f0:ff:d4:ed:34:17:09:e5:
         d6:b0:3c:ea:e7:41:57:20:7c:ba:0c:8d:0b:a0:63:31:c6:5d:
         5f:77:ca:03:e4:53:0c:b5:fb:06:c6:52:df:13:ed:98:88:6d:
         4a:30:df:54:93:f7:0e:a0:5a:95:29:89:e9:2d:83:6d:76:7a:
         58:eb:c5:7a:1b:ff:54:04:50:ec:c0:d5:99:1b:4f:08:d0:d7:
         9a:d2:1f:fb:55:17:c8:d5:dc:63:8b:cb:a4:9a:b6:25:60:c4:
         95:c9:9e:fa:82:e2:a7:93:18:9c:df:ef:6a:55:db:3e:49:55:
         7c:a3:72:be:51:f2:0a:39:9e:7f:e9:29:fb:ba:ad:21:c6:4f:
         fc:c4:9d:45:12:a0:86:d5:67:fe:ca:43:77:51:d4:ba:ae:7e:
         45:e3:9d:be:be:20:0f:ad:46:ad:b2:ba:49:8f:86:84:83:fb:
         d4:a0:da:7a:56:6b:65:c9:26:b5:38:df:f2:72:ae:d4:dd:91:
         81:8d:c2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----