Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63ad1ad9-e010-32ba-8627-36648893a1ef.roa
File:                     63ad1ad9-e010-32ba-8627-36648893a1ef.roa (raw, json)
Hash identifier:          sKFyRZj5jz77HA+s98iD9QiENlTRniqCp2p52we7i4Q=
Subject key identifier:   A1:0E:85:FD:2D:4A:BD:AC:D4:15:41:C1:4C:63:AB:69:48:BA:39:27
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D7935D52E4E2ECCA79DE44F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63ad1ad9-e010-32ba-8627-36648893a1ef.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     32621
IP address blocks:        2001:470:91::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:d5:2e:4e:2e:cc:a7:9d:e4:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=367198cb-abea-450b-bde5-bd041a5cfbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:b8:ce:71:5b:7d:35:93:30:e3:fc:2a:1c:
                    af:4d:ab:4b:0f:94:3a:16:91:f4:0f:fe:c8:0f:23:
                    70:a5:2e:f8:96:03:71:8b:29:dc:44:fe:43:0f:9c:
                    7a:ad:f2:ab:f8:6a:86:9c:35:72:00:9b:23:fe:65:
                    d3:a9:ab:9a:cd:6a:c4:08:3a:a3:cc:6d:9e:a8:5a:
                    50:ea:38:6f:e3:39:b1:cc:29:2b:8a:39:d9:37:59:
                    73:a1:32:f6:5d:fd:a6:92:6a:a8:c9:02:10:4d:02:
                    b2:08:9c:ef:6b:d4:10:09:e9:0f:68:8d:56:5b:6b:
                    a2:60:55:53:11:2a:a3:76:f9:43:f2:92:bd:d1:5d:
                    16:8d:41:6b:b0:4d:1c:c1:f9:50:81:1b:cf:5c:f8:
                    0c:c3:ba:4e:d4:08:45:5d:0f:43:03:bd:eb:a9:e8:
                    82:07:ae:0a:33:25:c3:af:b5:3f:02:dd:a2:f2:91:
                    93:52:48:5c:51:8c:48:1b:50:78:88:3b:64:10:f4:
                    7c:00:2f:af:1d:72:84:4d:86:35:da:94:19:47:43:
                    a2:4a:2b:85:cf:3d:ae:5c:52:57:4b:d9:14:05:88:
                    23:04:f3:79:42:a5:f2:26:ce:ac:08:1c:2a:4d:1c:
                    42:17:82:12:55:45:8f:5f:e0:89:8e:4c:45:4c:5c:
                    92:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0E:85:FD:2D:4A:BD:AC:D4:15:41:C1:4C:63:AB:69:48:BA:39:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/63ad1ad9-e010-32ba-8627-36648893a1ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:91::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:07:62:6a:b3:ef:48:d2:03:13:85:72:9f:dc:3f:3b:a9:40:
         16:49:91:d6:eb:d0:33:b4:48:a8:8a:c1:a5:09:d3:fe:22:0f:
         eb:75:5f:7d:3e:b4:3c:53:66:5d:8b:f7:e8:5f:9c:2f:69:90:
         e0:f1:d4:25:c7:35:da:48:0a:59:72:4d:a9:84:54:91:2d:88:
         8a:05:a6:a6:38:2e:17:bf:03:26:5e:81:c4:88:4d:80:6b:29:
         50:bf:5b:5e:a7:cd:18:f9:ac:8b:25:1e:95:8e:7e:0c:1c:56:
         ee:3c:b3:fd:57:4f:2f:f6:00:87:b1:1a:64:ae:8d:7a:fe:04:
         b2:72:c0:da:99:c6:b1:fe:6e:57:51:00:ef:d1:ec:be:7a:56:
         63:90:76:99:1e:ed:4b:1f:2a:73:d9:d1:52:ec:c2:6c:b2:91:
         95:f7:53:b2:2e:69:73:fd:d1:9b:a4:6a:85:56:e9:fd:3d:4a:
         bb:ec:fe:a0:84:07:67:cd:0a:d8:b4:52:f6:de:04:d4:37:ef:
         41:0b:60:59:7b:3e:79:65:7f:6e:a5:11:a4:b1:f2:6d:39:0d:
         6a:0a:7e:c1:56:45:f8:06:23:31:45:20:69:b1:98:18:30:70:
         66:f1:63:4b:66:95:99:56:6c:6a:a2:9c:05:2d:10:03:ad:66:
         f1:3d:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----