Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8168d3d7-45c1-3729-9fcb-8d507d5e31b6.roa
File:                     8168d3d7-45c1-3729-9fcb-8d507d5e31b6.roa (raw, json)
Hash identifier:          g0jrZA442kSUdiP01vR7cL04ooEBqDgAvq3WcFCrW5Q=
Subject key identifier:   CA:2D:0A:4D:3A:C1:B4:42:10:83:2E:AD:51:D3:34:D2:09:A7:ED:68
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA648258DA82E4EC0874C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8168d3d7-45c1-3729-9fcb-8d507d5e31b6.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     33309
IP address blocks:        2001:470:5f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:48:25:8d:a8:2e:4e:c0:87:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=21f11c06-d975-47a0-b791-c2c81b67b5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:0c:b7:1f:0b:09:d1:30:8e:a3:7d:ae:a1:
                    49:a7:da:06:c4:b5:cb:79:a1:58:ef:ce:74:18:f6:
                    25:63:12:87:f6:8a:52:b2:75:92:f5:ad:3a:0e:87:
                    b1:fe:0f:69:75:76:79:c3:bc:d8:92:30:f5:69:2c:
                    55:d1:42:ab:b2:3b:2c:c7:99:66:99:53:11:14:8c:
                    ba:f1:f6:82:3e:5d:9d:74:41:c6:35:66:a6:8d:6f:
                    7c:03:40:85:60:fa:1d:8d:b2:71:31:85:21:73:b7:
                    b3:3a:2b:6b:5e:89:f7:50:94:e8:18:82:b3:fb:b1:
                    3e:13:33:eb:5b:8b:f7:69:f8:79:44:e2:80:08:65:
                    b1:e7:7c:8d:e4:14:c0:df:ea:91:9c:8d:9d:8b:fe:
                    e2:64:bc:e4:17:e9:47:f1:47:77:87:0a:1d:e7:b2:
                    af:8e:19:d2:25:76:bb:4e:a9:97:11:9e:16:0b:b4:
                    8d:10:47:af:80:c8:31:ea:d1:ab:3b:34:f7:04:2b:
                    17:e4:d7:73:83:ca:fd:16:c9:f5:84:dd:aa:b4:00:
                    c4:bb:ea:12:68:25:5a:f8:7d:0c:0f:0c:b8:06:fe:
                    22:98:e3:73:6d:13:96:b3:89:59:29:f1:ea:4b:23:
                    0e:c1:01:1f:75:1c:64:d1:99:83:b0:66:9b:43:b2:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2D:0A:4D:3A:C1:B4:42:10:83:2E:AD:51:D3:34:D2:09:A7:ED:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8168d3d7-45c1-3729-9fcb-8d507d5e31b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:5f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:c4:00:b6:46:47:f0:96:c5:bc:13:21:32:94:15:a7:50:b6:
         d5:30:a4:88:0f:b7:84:21:f1:7f:cb:23:45:85:cc:6c:48:81:
         aa:f9:c2:1c:6b:36:c8:3e:64:7b:3d:69:74:31:a0:b2:1e:23:
         69:cb:d1:e9:f6:93:94:d7:3e:13:c3:70:e5:e9:3b:c3:c3:ce:
         d6:48:5e:6a:1b:5a:ed:1b:92:e7:54:ac:e5:f0:40:73:4c:80:
         79:2f:74:f1:79:a6:43:a6:1c:a4:1a:14:e5:13:f5:c5:33:04:
         71:ad:3a:33:d2:aa:41:af:6d:3e:eb:40:35:74:c8:4d:38:93:
         5c:80:6e:f5:7f:df:04:90:00:e3:41:06:d6:c9:8d:ae:a7:18:
         e4:1a:c0:62:dc:3c:81:04:39:2a:44:05:4c:ba:de:a8:f6:99:
         3a:1f:36:8b:02:46:ad:58:30:06:0e:cd:8f:69:a2:0c:21:72:
         ff:c1:3f:c0:ec:b9:38:47:41:1e:c8:e9:b7:29:b8:0e:6e:18:
         a8:f3:9f:49:6e:10:3f:8d:19:c6:3d:2d:3d:e9:1b:16:d6:c8:
         bb:7e:13:3b:47:1f:d5:40:c2:d2:30:d5:1b:4f:24:37:89:4c:
         26:00:bc:54:d5:3b:fa:63:6c:f4:c3:f4:77:52:e0:16:77:07:
         73:4d:7f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----