Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a790932-2cea-353c-8137-9a9b19aa0bde.roa
File:                     3a790932-2cea-353c-8137-9a9b19aa0bde.roa (raw, json)
Hash identifier:          zqszqFymJgaoifbE9qXZKSDgOKtx4bJLQhTrk+Y/74g=
Subject key identifier:   42:0B:A9:AC:38:F1:53:AA:0B:A3:A6:8E:3D:3A:30:D0:A0:73:C4:C4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA654F28CB92D44E29DEF00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a790932-2cea-353c-8137-9a9b19aa0bde.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     26073
IP address blocks:        2001:470:10d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:54:f2:8c:b9:2d:44:e2:9d:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=85e03d0d-9a06-463b-90f8-4d00e59c0d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:95:e7:52:4d:c3:d7:36:95:e2:91:4f:33:9c:
                    6f:76:80:82:98:27:2f:db:a1:8f:88:2e:c6:64:e8:
                    98:e1:1d:1c:77:a9:76:64:95:25:24:b6:f9:1a:a4:
                    6b:3f:61:75:ad:e0:c9:98:cc:82:55:00:e9:21:6d:
                    d6:54:b0:84:56:a0:91:71:04:7f:90:9e:73:31:17:
                    b8:b2:ff:04:24:06:ca:08:c5:6e:32:ed:52:87:40:
                    6d:20:a7:5f:5f:d4:5b:cf:f7:4e:2c:c4:7c:34:5d:
                    f8:5f:39:46:8d:0b:dc:a6:28:0c:1a:1b:07:b0:82:
                    a6:05:29:37:b7:d5:dc:1e:23:27:3c:2d:76:f6:74:
                    82:63:2f:58:49:bd:89:39:c0:f2:51:11:53:65:d5:
                    47:b3:e2:df:49:e7:08:d4:c0:8a:cb:f3:d0:6a:2c:
                    51:ad:02:57:e3:40:54:43:e6:9a:52:c5:e0:4e:22:
                    52:bf:7b:a9:24:07:cd:3b:57:4f:66:10:b7:9c:a4:
                    3b:cc:1e:58:26:2e:a3:66:b6:b4:03:5a:81:d2:08:
                    03:14:bc:8d:c1:54:b0:d1:e5:45:98:89:fc:8c:0b:
                    92:41:d5:c0:c3:0e:79:bf:33:ca:b8:86:81:47:c9:
                    54:11:38:0f:cc:47:79:a6:34:e1:fd:a9:d3:23:81:
                    7f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0B:A9:AC:38:F1:53:AA:0B:A3:A6:8E:3D:3A:30:D0:A0:73:C4:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3a790932-2cea-353c-8137-9a9b19aa0bde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:10d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:c4:bd:03:c2:fe:c7:8f:f4:65:ce:ed:da:81:ae:b6:30:ac:
         89:dd:96:34:34:82:c8:a7:dd:b1:1a:de:6c:c9:91:b2:06:3a:
         37:4a:b9:68:b5:9a:0e:a8:ca:8d:71:61:3b:b6:01:23:46:ed:
         f4:26:50:93:af:61:9f:35:02:a2:c8:d4:22:c3:75:fa:d1:59:
         3a:52:19:4a:6e:4b:b9:12:bc:73:0f:03:ad:93:91:f6:01:b8:
         32:00:6a:e7:ca:64:17:80:7e:60:63:ba:6d:2a:7c:2c:2a:3e:
         7c:30:e4:1f:26:8f:bd:5e:64:a4:18:30:e3:4b:18:b2:31:11:
         b6:b1:04:b2:12:e5:2b:9e:d5:e1:61:2f:8d:ba:30:f2:20:26:
         0b:ff:d6:2b:6e:a3:6b:e7:3b:b0:4f:34:3f:be:bb:03:f5:93:
         2a:4c:94:9a:a2:0d:73:59:1e:78:85:93:05:62:6d:a3:a6:51:
         46:53:9c:ee:f5:bf:df:f1:3a:9c:36:b9:d2:11:3b:d3:66:19:
         76:3f:34:90:5c:0b:8a:bc:70:c8:00:9d:b5:87:64:15:d4:42:
         68:2b:f5:e0:8c:a6:ca:e4:3b:e5:ca:3a:a6:14:3b:25:15:a0:
         15:1d:3b:bd:3f:6c:52:46:04:65:a8:aa:fb:0c:c7:ef:d4:b8:
         8e:a8:4b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----