Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c22af05-fced-3785-944e-6f98d6d9d280.roa
File:                     8c22af05-fced-3785-944e-6f98d6d9d280.roa (raw, json)
Hash identifier:          WWihtKmMUm5NTqtqvTBDL5bsafA8oX9w0kpkYIeXMUY=
Subject key identifier:   17:32:A9:12:C2:3C:72:1D:31:14:5C:7B:AF:70:DC:AB:A6:8B:83:33
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D793601E91FB548D493492B00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c22af05-fced-3785-944e-6f98d6d9d280.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     393350
IP address blocks:        2001:470:58::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:36:01:e9:1f:b5:48:d4:93:49:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=97f158ac-7875-4899-8a9d-2aff25ca20b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:c7:b9:49:8f:92:e2:7a:3b:d1:ab:60:b7:
                    37:bb:ab:db:ea:6f:39:d9:2d:ea:f2:0c:5b:19:e8:
                    70:9c:d7:2b:4d:56:a8:e1:83:c9:82:f3:df:77:10:
                    5b:a1:21:80:07:d6:d6:92:74:7e:eb:88:78:30:5e:
                    ca:3f:86:84:df:db:69:f5:55:01:49:15:76:a7:e2:
                    9a:7d:2b:45:db:d2:6b:99:6d:a6:15:cb:b3:f5:47:
                    68:e0:c9:a6:df:d4:d6:9f:8b:c7:57:1f:3b:3d:11:
                    55:13:64:5e:bc:1c:a5:be:8e:e7:05:7c:67:af:ed:
                    92:52:57:df:0f:8e:0d:e3:72:c8:05:4c:d6:d6:53:
                    ce:c7:b8:f8:84:af:9d:e3:3d:78:a1:f8:c6:96:aa:
                    65:b6:71:fa:9a:e5:01:a4:80:e9:23:da:dd:6e:e9:
                    ed:4d:9f:1d:f4:72:31:68:c0:0e:b0:5d:9e:d2:e7:
                    47:cd:ff:e3:76:5c:e4:23:0e:d6:5e:ed:1c:c4:d0:
                    d0:a4:c4:67:b8:88:8a:02:82:82:88:66:d3:0e:7d:
                    6f:74:33:8e:25:97:44:e9:0d:d2:f2:a6:8d:ef:66:
                    c9:c5:6e:b0:e5:2a:09:a6:3c:7f:50:bf:b7:b5:ff:
                    8c:e0:de:74:cd:c9:cb:cd:1f:2c:7a:b6:07:7a:97:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:32:A9:12:C2:3C:72:1D:31:14:5C:7B:AF:70:DC:AB:A6:8B:83:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8c22af05-fced-3785-944e-6f98d6d9d280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:58::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:95:7a:98:42:a6:d6:ef:05:68:69:06:7c:39:ce:e1:9e:4b:
         70:dc:b2:e2:e5:07:02:f1:04:e8:b8:1f:e5:f1:b5:a5:dc:a3:
         8c:45:53:35:ba:b9:06:88:3b:44:ac:1a:72:b2:d5:fa:e5:60:
         93:b5:fb:46:65:bd:9a:a6:90:6d:36:84:59:4f:c0:e8:0a:e3:
         cb:80:2d:07:6f:a2:44:60:0d:18:04:74:69:d0:f5:b4:51:8f:
         7c:53:6f:49:11:85:e4:4e:b6:a7:71:fd:56:d0:f6:7b:76:12:
         79:af:d6:d7:75:46:cc:4f:73:9d:93:23:83:c7:b1:1e:a9:57:
         6d:50:6d:47:37:2f:2e:3f:66:13:16:9a:9a:ff:61:20:e7:a8:
         e7:c4:fc:f0:5b:87:fb:1d:f7:c0:de:f8:03:6a:3c:15:bb:5f:
         8d:22:5a:10:6a:d8:55:d7:6d:e6:53:03:e0:96:f4:f8:59:0a:
         f5:01:9a:fd:54:2b:28:3b:45:61:16:8c:e9:96:a9:cd:9e:91:
         91:9a:e4:c9:53:45:96:c0:7a:c3:93:f6:4c:a2:93:4f:22:ca:
         02:f7:39:4b:a3:d5:d4:ef:04:cf:3a:59:ac:f0:44:f4:7b:44:
         a5:e0:08:78:cc:c0:86:e1:90:dc:8f:e7:bf:88:86:87:a5:b5:
         e2:18:28:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----