Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5802d7e0-b32f-3356-9d85-61971180babd.roa
File:                     5802d7e0-b32f-3356-9d85-61971180babd.roa (raw, json)
Hash identifier:          mS6Sp+/DHO/LkWVBSj5G+ZpK/rcGnM8Hh7caW5Ac/Xg=
Subject key identifier:   43:D1:62:B9:0F:4F:50:F2:88:73:A9:13:EC:60:6C:5B:E3:E9:BE:75
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E0C3E54EF382E602A3D80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5802d7e0-b32f-3356-9d85-61971180babd.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     46154
IP address blocks:        2001:470:10b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:0c:3e:54:ef:38:2e:60:2a:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=7e9be466-0699-43ba-903d-7b9d021be71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8e:71:55:db:df:92:8f:49:b5:17:40:ba:aa:
                    d7:45:04:50:65:ea:63:e9:0c:54:44:53:79:93:6b:
                    44:01:f6:2a:8a:e7:bd:09:c6:f8:39:63:37:38:07:
                    d3:00:ed:d8:44:f4:b1:d6:14:39:f3:08:59:ed:df:
                    f7:6a:fc:d2:d7:13:0f:75:35:ee:45:2d:c7:e4:87:
                    0c:7e:8c:e3:8c:9a:78:05:24:40:da:5d:e0:6b:c8:
                    f9:f4:77:d8:bf:3f:61:da:9d:3b:ad:5f:37:32:ec:
                    2b:65:94:0c:11:50:a5:d0:1b:02:6b:06:d1:26:e6:
                    c8:2d:8c:56:4e:ed:40:6a:5c:0d:a7:cd:03:ef:0a:
                    fd:b3:6a:3e:6e:5e:88:5c:cc:bd:28:ef:5b:b2:3a:
                    72:09:56:9f:95:de:eb:4b:56:f3:86:01:ed:b9:14:
                    bf:f9:ba:b2:60:59:c2:dc:78:08:d2:bb:59:ae:c2:
                    e9:65:96:ce:3c:85:76:48:54:2c:cd:71:02:d3:76:
                    f5:f3:7d:81:45:c8:7f:ac:df:1b:ce:7d:4c:c1:fb:
                    e0:17:ba:38:45:d1:79:20:7b:e6:35:dc:41:85:a1:
                    0e:0e:2e:47:f1:65:28:62:44:2f:5c:71:d6:47:c0:
                    65:bc:c8:ff:0b:99:ca:59:25:95:81:9e:8a:cc:39:
                    b6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D1:62:B9:0F:4F:50:F2:88:73:A9:13:EC:60:6C:5B:E3:E9:BE:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5802d7e0-b32f-3356-9d85-61971180babd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:10b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:83:7a:91:57:5d:06:bc:51:ec:22:b0:5f:c9:98:7d:1b:3e:
         a5:42:1b:11:24:3b:50:a1:1f:e1:95:f2:69:0e:1c:e6:fa:e2:
         26:ac:ac:3b:01:23:7a:3b:70:1c:b8:31:1c:21:10:16:8b:98:
         bf:61:50:d0:d4:df:73:89:21:2d:65:d6:81:c3:ca:f2:d3:2c:
         93:f6:da:65:c4:5e:7d:7e:4f:94:66:a9:3b:e7:4a:63:d0:6e:
         80:d7:05:8e:bc:f4:80:8c:11:96:e7:2b:79:a8:c4:3a:cb:23:
         c2:90:c1:73:9f:d5:9c:55:55:58:5d:bc:27:15:b4:41:2f:8d:
         54:e9:fe:f6:c2:0e:2a:79:e9:8d:86:ff:6f:b1:98:26:de:0c:
         59:57:02:0e:44:dc:29:e4:8d:9a:4f:e7:ec:a1:dc:88:03:23:
         18:99:b8:64:f7:68:c9:97:c4:bc:fd:d3:03:dc:70:de:e5:a6:
         33:c4:80:d9:14:7b:ac:4f:80:59:ad:cf:2a:5d:e3:7b:64:b2:
         8c:53:33:96:40:79:7f:a5:39:f8:6b:00:d4:7b:67:6f:ab:3e:
         1d:46:60:29:e4:85:35:5f:61:ad:44:64:13:3e:e7:d8:a8:9b:
         b0:d0:67:45:19:5c:0b:30:12:0e:99:ef:cc:e4:a8:90:74:73:
         eb:80:b8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----