Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4dafe7d-74e4-33da-a8bd-c403ca4fa67c.roa
File:                     a4dafe7d-74e4-33da-a8bd-c403ca4fa67c.roa (raw, json)
Hash identifier:          RIWsIKu5xPVIsBwUZsKjp/FF1Uym8V7so51fZC2uPmE=
Subject key identifier:   69:9B:3A:E9:94:F8:8C:48:76:2D:26:28:41:EA:9A:38:41:B8:57:0B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D793687BDE182B64E24AA9200
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4dafe7d-74e4-33da-a8bd-c403ca4fa67c.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     395466
IP address blocks:        2001:470:c3::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:36:87:bd:e1:82:b6:4e:24:aa:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=8451f684-3612-4a46-946c-218e93b3b6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:5a:f3:2b:3a:56:d1:d3:23:2b:af:64:10:
                    29:6b:e9:09:5e:16:46:1f:f3:f6:d0:0c:88:02:6a:
                    be:5d:18:36:61:3c:d5:3c:b7:a4:7a:be:e4:99:a8:
                    ef:5d:34:50:4e:32:ed:d6:63:c9:6c:9a:12:3d:fb:
                    dd:3e:93:4d:b7:0b:bd:fd:ec:5f:e0:a2:da:25:e7:
                    6f:a1:5b:4b:9e:7b:e0:cf:04:bc:d0:1b:4a:a7:2f:
                    cc:0a:15:6a:3d:52:e2:bb:a3:22:d6:e9:05:52:df:
                    1c:be:f2:38:8c:86:d3:b0:f9:38:2f:8e:bf:4c:79:
                    81:35:77:01:16:16:ce:4b:9c:de:23:29:8f:9c:f5:
                    e8:43:fe:38:6a:18:58:84:8a:99:ce:4a:fb:18:5b:
                    20:16:f3:e7:2a:67:af:ea:0d:8e:85:b8:2a:4f:48:
                    1a:cf:ce:e1:8f:cf:b7:60:4e:bf:1a:83:95:ce:8d:
                    8a:8b:1b:4c:3d:6c:5e:71:ba:87:6b:cf:8a:44:85:
                    ef:7a:29:3c:b7:5d:53:97:fd:69:16:2d:3b:59:84:
                    6a:e1:88:3d:48:e7:d2:c2:10:f9:f1:2d:da:e5:4e:
                    e4:24:20:f6:8b:cf:d6:4f:74:11:db:61:be:ee:80:
                    f2:6f:f0:93:db:39:c8:ad:ca:cf:07:ec:de:8a:20:
                    ba:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9B:3A:E9:94:F8:8C:48:76:2D:26:28:41:EA:9A:38:41:B8:57:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a4dafe7d-74e4-33da-a8bd-c403ca4fa67c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:c3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:02:fa:9b:31:62:2a:57:99:75:64:4c:59:58:0d:15:b1:d9:
         a5:1f:e1:a9:c4:02:90:82:cf:a2:37:24:48:40:6a:bd:7d:7e:
         43:7c:bc:90:d2:33:c4:b7:5b:19:9c:23:ed:45:bf:99:15:de:
         2b:d6:0d:3a:fd:63:e6:6a:3e:b7:0f:01:03:e6:87:b2:be:eb:
         7d:54:39:41:13:54:92:6b:2e:f5:17:97:35:14:69:46:e1:01:
         5a:41:83:dd:c4:0d:ce:b9:df:bc:69:b7:e8:1c:49:63:0f:1a:
         ae:67:62:31:6f:f8:31:3b:4d:ac:0c:0c:d9:88:c1:00:e9:d0:
         64:0b:4d:0f:08:4f:69:03:74:25:f6:7f:74:7f:4f:9b:8d:2e:
         ae:72:44:3e:ec:f0:ef:c7:33:9b:cf:53:77:8c:98:73:90:ea:
         24:78:a5:0d:a4:15:36:9c:51:a1:37:d6:a6:ec:e7:c9:b8:1d:
         9c:5e:3b:fa:83:07:dc:44:45:03:e5:4b:e7:00:b0:f7:ab:20:
         40:ea:66:a0:3a:07:6f:06:17:48:2f:c8:86:49:29:59:f0:2d:
         56:d2:e2:f3:48:b8:fd:c8:e2:0e:1f:da:10:f0:01:dd:dc:7b:
         f7:36:4f:3a:ba:db:1a:aa:62:70:47:ce:c9:8a:84:52:90:20:
         45:5e:3e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----