Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/709ee8b3-7fd3-3f2d-a1cc-5f9af191ec80.roa
File:                     709ee8b3-7fd3-3f2d-a1cc-5f9af191ec80.roa (raw, json)
Hash identifier:          X8X8REp5iTvOmbYfjbNMAJmJtSRAgmvsq2XmqZ4K4c0=
Subject key identifier:   CC:5D:67:3F:16:13:36:94:AC:B8:11:FC:C3:AA:71:71:30:9D:E1:BF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA709CF5EDFBDA2FEDB9960
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/709ee8b3-7fd3-3f2d-a1cc-5f9af191ec80.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     63959
IP address blocks:        2001:470:62::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a7:09:cf:5e:df:bd:a2:fe:db:99:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=1bb7a40b-3da7-4604-93fb-87a82748826d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:f3:ab:2b:c0:e8:f6:63:49:67:e2:0d:11:
                    a8:ef:e1:ae:e0:e3:a0:6a:11:36:37:bc:ea:a0:ba:
                    b6:f4:0e:4c:cc:6b:34:12:15:1b:ab:ef:c6:94:7e:
                    43:29:7c:dd:17:d1:64:d4:43:03:e1:6a:a9:e7:70:
                    e0:87:97:4b:38:32:2c:52:41:d9:2b:f5:24:14:13:
                    73:d9:76:98:6a:cd:fd:36:df:53:5c:b9:ee:a5:7b:
                    25:92:94:09:3b:19:a8:b4:04:5a:92:26:15:e4:38:
                    4c:a3:a4:ac:94:46:6f:67:a8:e8:bb:f4:66:23:ce:
                    18:c3:61:41:2f:11:54:1d:23:0c:fb:92:ed:28:8c:
                    83:0e:1e:75:2d:87:10:fe:df:1f:01:02:75:ec:a7:
                    53:e0:27:98:83:07:42:3e:76:f9:96:29:97:9f:13:
                    87:37:8c:7a:74:7a:d3:c8:7c:74:e7:8f:e4:0a:91:
                    0e:8d:ae:11:d9:63:29:ef:fa:03:7a:37:f9:fc:e6:
                    c5:1d:8b:a3:d0:e8:4f:43:fb:11:ef:8a:62:3f:2b:
                    86:e8:81:86:60:21:a1:47:0c:9d:6a:bb:fa:9d:7b:
                    f6:42:4c:dd:96:8e:72:6a:c2:12:e6:28:1e:c1:b9:
                    6c:1a:02:fb:56:4e:41:1f:c8:db:12:e2:b5:f9:ec:
                    3c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5D:67:3F:16:13:36:94:AC:B8:11:FC:C3:AA:71:71:30:9D:E1:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/709ee8b3-7fd3-3f2d-a1cc-5f9af191ec80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:62::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:de:2d:68:ed:a4:d5:3f:91:c5:38:1b:8a:03:ff:57:e1:06:
         ad:cd:53:f9:6b:55:c8:c6:6d:b1:0d:dc:d5:7d:72:3d:8e:e1:
         07:c9:33:19:75:44:e1:44:37:f4:49:2d:28:76:c0:dc:ff:b7:
         0c:70:b5:46:e1:65:09:37:28:f9:29:af:19:df:b8:83:c8:34:
         69:13:54:13:9a:df:b0:b1:5d:9c:58:f2:48:82:32:8a:50:ce:
         36:54:37:b9:3d:cc:db:5e:c2:0e:70:bb:c7:7c:b6:9f:42:db:
         41:20:d7:06:98:e7:e0:5b:78:cc:34:0a:2b:2e:e6:35:ae:66:
         7f:ee:4e:2f:a3:40:f7:5a:fd:cf:db:67:c3:a2:e2:8b:a2:cf:
         e3:7f:54:33:48:88:b3:e1:7c:3f:9a:1f:23:7c:d9:e2:09:9e:
         f1:17:07:97:ae:90:9a:ef:e3:f8:11:e5:c8:ae:c6:7d:91:31:
         e2:49:5b:5c:bc:06:77:b1:04:59:8e:79:00:30:82:ca:d0:eb:
         79:bb:eb:27:71:1b:f7:74:07:e1:08:1b:da:d4:d0:59:06:92:
         c1:0f:8f:54:5c:6b:5c:bc:22:ec:b2:5d:8c:3e:a2:30:9c:b8:
         d7:ae:26:ea:e8:89:40:9a:71:a8:6f:4c:d8:d4:78:31:c2:b8:
         ba:0c:6b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----