Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d98fd64-d023-384b-8be7-0d41e61eb417.roa
File:                     4d98fd64-d023-384b-8be7-0d41e61eb417.roa (raw, json)
Hash identifier:          v3Qbrj9g7iyxH4S/iG9sRZA2e6NAchtMvO0lOEoDt4Y=
Subject key identifier:   0B:C8:F0:4E:DC:16:38:46:E9:15:90:70:F8:8A:93:83:BD:6A:DA:30
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA66A80044457EF9764B220
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d98fd64-d023-384b-8be7-0d41e61eb417.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     53459
IP address blocks:        2001:470:1a::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:6a:80:04:44:57:ef:97:64:b2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=86ce1684-592a-4982-bc34-64acc1df9eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6a:8a:a0:cf:77:38:e0:d4:14:71:5d:91:4b:
                    ee:1d:6c:e2:2a:d5:4f:a7:a1:57:b4:3e:c9:d4:63:
                    28:9c:e3:62:05:c0:5c:8a:41:8a:14:b8:54:f5:25:
                    de:9b:6f:da:df:f9:58:ae:ff:28:57:9e:2f:af:51:
                    f5:72:36:2b:b9:7f:69:ce:10:a7:46:4c:03:36:0e:
                    5c:a4:92:b8:99:52:79:b9:5f:04:aa:33:e9:83:af:
                    98:41:09:63:43:2b:a9:fe:b8:6e:59:06:ce:2e:d1:
                    5d:dd:27:5f:07:eb:66:25:9e:1c:5f:d6:f7:cf:4b:
                    3d:bd:ce:40:f2:99:dd:13:00:45:c9:8a:37:68:3b:
                    30:3a:e1:ed:1d:4b:1c:03:cc:36:d8:bf:28:1d:fd:
                    a7:aa:63:fb:4c:77:c0:db:0f:04:ae:43:f1:c0:5b:
                    b9:32:88:79:1c:a3:0e:6e:ac:27:b6:d2:f5:c9:9d:
                    12:f8:d4:09:fa:8a:6b:b8:7e:c9:42:5d:d8:01:ab:
                    d0:db:0d:f7:6a:4a:98:11:14:cc:94:55:14:4b:c6:
                    b2:e4:aa:0f:7d:44:ed:0a:b1:46:a0:1e:05:4b:ec:
                    51:c7:ec:93:90:39:5e:68:23:1b:66:7b:02:e7:af:
                    8b:3e:59:2a:31:7a:8a:3a:14:d6:04:dd:7f:e3:f9:
                    2a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C8:F0:4E:DC:16:38:46:E9:15:90:70:F8:8A:93:83:BD:6A:DA:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4d98fd64-d023-384b-8be7-0d41e61eb417.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1f:50:74:bc:f7:f1:14:9c:e9:7c:8b:50:6e:dc:45:6d:3b:
         53:76:f7:03:bc:79:19:23:43:ca:55:c3:f4:7c:c2:02:b8:de:
         a0:c0:98:11:36:72:f5:6b:d7:cc:30:4e:be:e2:17:ad:ec:a4:
         c7:e3:f4:7a:e1:74:bc:7f:78:cb:3b:0b:ed:8e:ec:4a:88:80:
         6c:77:fa:6f:61:32:63:0d:b8:9a:de:66:54:b7:13:ca:d4:8f:
         b5:51:63:df:28:40:92:36:10:4c:1a:9f:81:fb:a4:3b:1d:16:
         6e:91:ef:53:6a:bc:22:14:b8:99:ef:1a:d8:ee:92:3f:7a:78:
         f4:54:2b:6c:5e:42:68:6c:be:02:73:08:08:35:41:33:7e:07:
         ba:85:af:52:e6:d9:97:6d:f4:9b:72:62:94:88:b6:a5:b0:37:
         14:c8:8b:9b:2f:56:7b:8a:ca:2b:06:f1:e3:5f:8c:ac:d8:97:
         56:d9:09:9e:41:50:c0:2f:fd:29:17:f2:15:ac:a8:37:b4:46:
         a0:9c:6c:d0:6b:39:23:51:ec:fa:39:e5:4c:9b:c2:e1:68:81:
         78:f6:78:b8:e8:58:14:43:92:ca:d7:01:e1:e5:64:0c:0a:0d:
         21:af:b4:7f:f6:06:24:da:bc:1d:8c:29:fd:38:41:3c:0d:e4:
         82:59:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----