Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65e820a4-a764-35d8-881d-b047e594e95b.roa
File:                     65e820a4-a764-35d8-881d-b047e594e95b.roa (raw, json)
Hash identifier:          ryef85HxmgkKhDRffz9KBw5I6dXpeAZfqUPbpdL+DoI=
Subject key identifier:   F7:8D:A7:E1:F8:CA:8E:D6:0E:AE:A5:8C:5E:18:21:BE:89:80:48:BD
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA6482EBE74A7153C7E8B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65e820a4-a764-35d8-881d-b047e594e95b.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     26679
IP address blocks:        2001:470:60::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:48:2e:be:74:a7:15:3c:7e:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=d0097565-0a0b-4fb0-b80e-e30b8029bafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:58:62:a3:61:31:77:b0:ef:15:8a:cd:1b:e4:
                    42:58:57:c5:57:0a:9d:dc:68:12:d1:2a:a9:e9:d5:
                    f0:fe:92:c5:d7:3b:07:e4:0f:56:bf:2b:cb:c9:c3:
                    f6:ea:da:7c:fb:d8:71:3c:df:1e:d2:e2:8d:87:f3:
                    06:42:0d:f4:de:a0:1a:e0:c2:ed:31:13:b7:5f:ed:
                    dc:11:80:74:92:ff:29:ce:35:3f:5c:83:36:66:96:
                    99:96:46:71:da:84:c0:e5:df:d4:24:b6:74:0c:46:
                    2c:62:c9:71:f4:be:3d:e9:e4:23:0d:0e:9b:99:b0:
                    2b:99:e0:53:4e:a0:f2:d2:a9:de:c6:25:52:cb:e0:
                    3b:eb:ed:e5:9e:60:56:da:d8:c0:39:37:5a:d0:90:
                    6f:f5:be:fd:39:a9:06:7c:ce:d2:07:a6:6c:23:fd:
                    a2:ad:bb:5a:0f:40:39:dc:b0:01:dd:f2:8f:a7:50:
                    19:6a:10:38:54:d0:3e:40:bb:8e:47:ae:8b:4f:1c:
                    ac:ca:d9:05:c1:a4:06:d7:c5:94:5e:9a:8e:df:ec:
                    16:60:31:81:c4:16:d6:9b:82:30:d2:50:18:16:9a:
                    40:94:fd:9a:57:02:c9:1b:44:30:32:58:9e:9a:d1:
                    dd:39:9e:33:eb:f9:88:0d:d9:22:b0:01:44:02:f0:
                    ee:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8D:A7:E1:F8:CA:8E:D6:0E:AE:A5:8C:5E:18:21:BE:89:80:48:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/65e820a4-a764-35d8-881d-b047e594e95b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:60::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:b7:e9:c7:41:9f:c0:2d:4c:f5:65:88:1b:8c:1f:a6:e5:fe:
         30:c3:d5:80:b2:f8:ae:a4:33:b8:1f:c1:63:0b:ba:fb:77:6b:
         a1:79:f0:63:68:26:00:8f:14:56:ea:6a:0c:d9:ef:21:cb:0b:
         c0:e0:4a:1d:bc:38:32:df:87:78:38:df:c3:6a:56:29:fa:54:
         97:8c:42:a1:f0:9a:a3:5d:47:92:8c:6a:28:54:8e:3f:90:51:
         f4:5f:07:c8:f0:51:89:81:6e:9a:93:39:78:c7:00:4c:0b:a2:
         50:2c:23:48:93:41:68:d4:4b:37:41:e7:b8:10:38:54:7f:c2:
         e7:bb:a6:4c:e6:6e:85:66:58:7a:83:6c:51:c7:e5:70:6d:1c:
         0d:50:ae:36:22:5c:14:25:cc:37:8f:60:ae:9a:b7:36:4a:40:
         80:bb:5b:8c:bc:e4:ea:e4:ef:4e:99:ca:eb:ee:ea:ed:68:53:
         8a:f1:40:c4:72:3d:69:c4:0b:d2:93:60:32:a2:ef:1c:35:6e:
         74:ae:f6:a8:f1:23:04:b7:d2:fd:cc:b4:a4:55:1b:4a:7c:2c:
         6f:bb:ce:ae:bc:3b:d5:72:2c:80:42:f4:75:9d:35:ff:bb:49:
         e6:ee:c8:c9:bb:39:b8:04:d6:a7:4f:e5:1d:95:79:f3:cd:f4:
         d0:69:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----