Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58d54333-c17e-3f3d-8007-84ce3eb39ec9.roa
File:                     58d54333-c17e-3f3d-8007-84ce3eb39ec9.roa (raw, json)
Hash identifier:          o0P+UWbNU3E6rGgGPXXy2hULtOxICVseNJh5Aq9J8f0=
Subject key identifier:   4E:09:00:98:ED:E3:9E:21:24:1B:2A:B4:82:10:64:B5:4E:9E:75:A5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A5190EA223C430913BF5C40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58d54333-c17e-3f3d-8007-84ce3eb39ec9.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     6140
IP address blocks:        2001:470:111::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:51:90:ea:22:3c:43:09:13:bf:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=fdaba939-5d0e-4f40-bd2d-960a74d463d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:b3:47:39:b6:0a:a0:31:0f:5b:bc:b4:5a:
                    fc:e1:53:f6:9d:aa:c4:66:53:82:7d:72:be:55:58:
                    a1:aa:a4:03:5b:97:11:fb:c0:34:da:bf:f1:34:46:
                    df:c2:a8:f0:a0:bc:1d:61:3f:84:8d:fd:ca:52:cf:
                    c7:3c:92:40:92:da:6f:2e:2b:1b:d8:fd:2b:5b:6e:
                    d6:c4:2a:f1:30:ac:c8:74:c2:d5:87:00:53:d0:50:
                    b4:2e:38:92:11:87:55:0d:94:f0:91:cb:2d:bd:fe:
                    76:1a:97:e8:36:46:f8:bb:0f:6c:aa:0b:e4:16:18:
                    f3:1a:79:ff:22:34:b0:2f:d9:25:8e:61:05:fb:7d:
                    3f:8e:32:93:74:f9:17:8c:25:d0:41:19:bb:4f:49:
                    69:59:ed:9e:4a:b6:55:1e:da:de:48:aa:6f:4b:84:
                    bb:20:d1:e9:41:94:ce:88:d8:39:2d:0d:61:d9:52:
                    dc:8c:90:a2:10:a0:74:05:8d:7d:82:0a:49:24:ad:
                    b7:21:1a:34:c6:b4:16:be:f5:e3:3f:80:24:7f:9c:
                    74:07:f6:69:28:7e:ba:77:30:dd:39:c8:49:d0:55:
                    aa:17:bc:dc:52:a8:57:28:2d:e9:20:34:04:c4:ce:
                    be:e8:ce:24:d7:6e:13:97:81:a4:72:53:76:de:94:
                    df:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:09:00:98:ED:E3:9E:21:24:1B:2A:B4:82:10:64:B5:4E:9E:75:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/58d54333-c17e-3f3d-8007-84ce3eb39ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:111::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:00:b3:3a:e6:9c:2b:15:5a:8d:e9:fa:1d:9b:ba:95:c1:93:
         a7:1c:83:a8:55:e1:89:1e:23:b0:23:6e:f4:57:ef:06:56:2b:
         e6:13:95:da:1c:06:0d:63:c5:e6:f9:5a:52:29:f8:51:cd:30:
         b5:d9:3f:e4:6b:cd:e2:56:df:04:9f:7a:ec:d9:3f:64:21:be:
         2e:33:92:79:b4:7c:3c:52:b0:d4:b6:cd:29:d9:ef:b6:39:f1:
         b7:d3:fe:c1:51:3e:5a:e3:6b:f0:dd:ca:17:c4:86:a1:aa:ca:
         24:4d:0b:bb:0f:c9:b8:ea:57:7d:79:46:cf:6b:08:f5:05:8b:
         c1:7c:1c:8d:59:37:f3:a6:9a:6b:1e:ec:ae:a1:dd:32:1d:15:
         1c:5f:a0:f3:c1:fb:92:92:1c:6f:62:09:15:5a:48:f9:5e:eb:
         c3:de:df:34:3c:80:eb:cb:11:51:be:45:f6:b5:12:70:d8:fe:
         12:fe:b1:e6:0d:c9:a9:0b:6e:1d:13:29:ff:f5:a5:d9:9c:8a:
         f5:e0:75:81:55:34:69:8c:47:3e:41:14:b9:ac:6c:45:85:0f:
         b9:c4:b5:0f:00:a7:38:eb:99:b7:30:ac:b7:f0:df:d7:75:7b:
         90:58:cf:60:fe:14:f3:c0:29:c0:d8:5f:87:33:c2:ce:fd:0c:
         76:ed:7b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----