Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/458b6402-863b-34ee-93c5-cfac38939d91.roa
File:                     458b6402-863b-34ee-93c5-cfac38939d91.roa (raw, json)
Hash identifier:          +4JBDaJE0xsUeeyN4nZo7r+uq7akzcXMnhJZMu3HxsU=
Subject key identifier:   E5:B9:72:02:AB:7A:4F:9D:48:84:30:DE:B2:16:39:C9:52:75:C2:81
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583C6EB67D9437EF8D4AF1B7C600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/458b6402-863b-34ee-93c5-cfac38939d91.roa
Signing time:             Thu 30 Dec 2021 05:00:00 +0000
ROA not before:           Thu 30 Dec 2021 05:00:00 +0000
ROA not after:            Thu 30 Jun 2022 04:00:00 +0000
asID:                     31769
IP address blocks:        2001:470:94::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:6e:b6:7d:94:37:ef:8d:4a:f1:b7:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 30 05:00:00 2021 GMT
            Not After : Jun 30 04:00:00 2022 GMT
        Subject: CN=94ef479e-b276-42d9-8259-6d2478091ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b7:e9:cb:52:c9:e1:7a:43:5f:c8:8c:7e:b6:
                    18:ac:ff:bb:54:cd:a1:27:00:c7:08:c9:19:1f:bd:
                    23:54:1a:b2:e7:3d:15:e4:04:4c:19:69:07:6a:6d:
                    7a:ca:97:21:7a:79:9c:63:87:2f:f6:12:ea:cf:aa:
                    79:70:6d:75:4f:39:65:d8:41:ae:c5:f2:99:92:dd:
                    19:aa:d3:7e:fb:1a:dd:20:e8:74:9d:37:46:88:8d:
                    c3:d9:6b:13:1a:36:3c:e5:eb:a5:61:4a:09:17:ea:
                    df:be:63:b4:0f:ae:c8:53:cb:e0:44:de:1e:8a:bd:
                    99:e7:b2:69:95:24:89:1b:47:a3:51:3f:91:94:29:
                    88:35:ed:e6:1c:bf:61:e9:72:54:76:5f:74:e6:3a:
                    72:17:21:f3:e3:f9:8b:28:a2:15:a4:a9:97:7a:45:
                    72:35:af:e9:26:2e:5e:8f:52:5c:d2:a3:51:46:7d:
                    7f:1e:74:a7:0c:b5:5c:75:ad:9e:a5:d4:d5:57:ef:
                    5a:63:d4:db:03:90:24:1e:11:ea:00:b4:63:ab:5f:
                    e3:91:cb:96:c0:ea:09:7c:fe:f2:b7:07:a0:b2:34:
                    5d:1c:f9:65:1a:76:e2:d6:a7:f8:dc:03:43:a4:b4:
                    60:cf:ba:b0:8e:74:f0:47:cd:2a:16:ad:4a:f4:12:
                    de:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B9:72:02:AB:7A:4F:9D:48:84:30:DE:B2:16:39:C9:52:75:C2:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/458b6402-863b-34ee-93c5-cfac38939d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:94::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:6b:49:81:34:dd:c5:42:b1:0a:5c:7c:d9:2a:63:f9:03:aa:
         b0:ee:6f:8b:8c:3b:e4:a0:38:10:62:34:d5:69:ed:06:20:d3:
         ce:2c:fb:c9:dd:06:72:f6:e6:f9:71:a0:4e:c2:c9:f0:39:af:
         27:48:d3:b1:5a:72:e0:78:ad:99:02:62:91:5d:d7:87:b8:b9:
         83:da:3d:28:bb:49:05:e5:1f:bd:05:7a:19:02:f0:7e:78:c6:
         53:ec:d3:3c:4c:ba:fa:c1:03:bc:c3:4a:17:57:82:5c:20:3f:
         33:1c:c4:02:bd:4e:f5:2e:25:a6:44:30:93:87:bc:94:ae:98:
         b1:37:60:ed:f3:2e:bc:24:46:d4:e6:74:23:ae:86:69:8d:73:
         55:21:88:e2:61:76:c7:7a:66:f7:9f:d7:8d:4e:27:a5:8c:7a:
         ed:1b:d5:a1:f1:b9:64:89:22:5e:0c:c6:52:22:3a:b0:49:bd:
         e4:c3:14:cf:65:96:63:de:28:ea:a5:14:69:2b:2e:c1:07:ac:
         fa:f3:a1:66:17:77:6b:25:61:7a:8c:08:b8:a2:e3:3b:8a:2a:
         47:23:ba:e9:be:de:e5:c3:60:87:6e:7d:d5:75:5d:3c:de:75:
         e8:9d:e2:19:24:ea:7c:42:48:48:2f:51:fd:3d:36:2a:2a:e5:
         ea:62:54:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----