Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c7e2efa-69a1-3d7b-bf9d-5c2c386c094f.roa
File:                     6c7e2efa-69a1-3d7b-bf9d-5c2c386c094f.roa (raw, json)
Hash identifier:          a20JHm4mcKir3NJ0ZDC8C1dwtqh8qDdm4U7a+GWhJSA=
Subject key identifier:   F2:DE:F7:39:47:0F:58:7E:02:D7:5F:A8:19:AE:3C:8D:BE:A0:71:2B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA65B47F11C09D1A52A1600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c7e2efa-69a1-3d7b-bf9d-5c2c386c094f.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     46154
IP address blocks:        2001:470:10b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:5b:47:f1:1c:09:d1:a5:2a:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=967e6bff-e500-4b1b-ab29-cf9498e77375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d7:bd:97:98:00:10:74:96:fa:08:ef:3a:90:
                    16:05:02:8b:ed:94:68:2b:6c:1c:97:3c:d9:10:dd:
                    11:f7:81:c0:f6:50:f9:de:27:79:20:27:4b:a3:bf:
                    68:c3:b3:f5:fa:59:73:7d:38:d2:22:f4:d2:a0:e5:
                    67:64:a1:ae:d0:0f:b4:8b:05:3c:11:af:36:5a:38:
                    82:62:3f:fb:4f:b7:bc:5c:c5:bd:b8:b5:86:e1:c4:
                    73:ac:99:1b:e4:a8:cd:56:7c:f9:a0:de:90:a4:0e:
                    46:3b:24:b3:13:de:34:30:0a:50:6a:1d:3f:b1:98:
                    8f:4d:cc:7d:52:8f:28:25:17:c0:42:32:15:8c:0f:
                    dd:35:87:4b:5e:c1:4a:34:6e:68:f3:9b:82:a9:44:
                    07:65:d8:a3:60:a0:00:08:ee:82:e9:f5:55:1e:8d:
                    26:6a:19:2c:be:d5:50:37:24:4a:06:5d:0b:2e:86:
                    9c:2b:c2:be:a5:75:1c:5c:fc:da:c0:dc:8a:38:6f:
                    b9:5f:0d:78:75:4b:af:0e:79:53:f7:0a:33:06:3f:
                    96:3e:39:3e:f1:9d:42:e2:f3:c2:7c:ba:cb:a8:29:
                    c7:8e:6b:49:f9:df:2f:43:78:40:de:0e:a2:d3:c8:
                    e1:b5:18:2c:94:8a:12:4c:85:19:b8:da:53:4d:49:
                    c7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DE:F7:39:47:0F:58:7E:02:D7:5F:A8:19:AE:3C:8D:BE:A0:71:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6c7e2efa-69a1-3d7b-bf9d-5c2c386c094f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:10b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b1:56:3d:79:3e:bc:93:05:6e:9c:57:59:c8:a7:9c:7a:81:
         b2:52:6f:62:df:33:cf:51:05:1d:ca:dc:27:a3:9b:bf:3d:a9:
         ae:02:21:34:5b:c0:5c:d3:96:fd:f1:46:e4:15:67:be:9c:a1:
         3b:f4:18:55:9e:bb:6a:42:fc:1c:14:0e:ea:ca:92:9a:a4:43:
         71:ad:88:38:63:29:6f:b6:db:bf:db:57:98:83:16:cd:eb:8b:
         d4:c7:4a:58:52:e2:57:44:15:1a:1f:48:5b:e7:39:98:c8:94:
         6e:aa:cf:67:a6:ae:8f:fc:b2:68:28:2a:63:b4:e5:5c:98:13:
         53:af:b5:5b:4e:b2:7c:85:d5:a1:cf:3f:f5:ce:0d:1b:b7:4d:
         c2:56:f9:a1:f5:0c:71:2a:f0:ea:60:51:1a:40:34:fd:a7:ea:
         9b:ea:31:71:88:c9:a4:13:6c:a0:09:56:e9:2a:17:f3:41:fe:
         d1:ad:d7:35:ef:7c:f1:c3:45:f1:c9:e6:5b:7c:1e:1c:3c:58:
         66:d8:dc:1c:67:20:4f:bf:cb:e0:46:41:c7:87:f7:20:38:16:
         90:a3:92:c8:15:e3:ad:76:3c:d9:0b:39:a3:55:d4:e8:77:c0:
         a6:80:e0:13:16:07:50:28:07:86:24:2c:e3:79:ef:61:56:7d:
         c7:1b:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----