Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6230253-3344-354d-9053-bf5cb3806db2.roa
File:                     a6230253-3344-354d-9053-bf5cb3806db2.roa (raw, json)
Hash identifier:          F3InTyBKKYC4ODE2m4ogprLJ7PkOAybwBAV3lvakhVU=
Subject key identifier:   CF:82:5C:2C:44:27:D3:78:B7:1E:1A:F2:F5:1B:FB:1A:3F:27:84:CA
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858400C2C39A695E1493C76E3DAE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6230253-3344-354d-9053-bf5cb3806db2.roa
Signing time:             Sat 26 Nov 2022 12:00:00 +0000
ROA not before:           Sat 26 Nov 2022 12:00:00 +0000
ROA not after:            Sat 27 May 2023 04:00:00 +0000
asID:                     53264
IP address blocks:        2001:470:12d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:0c:2c:39:a6:95:e1:49:3c:76:e3:da:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 26 12:00:00 2022 GMT
            Not After : May 27 04:00:00 2023 GMT
        Subject: CN=6309344f-6926-4991-8bf1-24d8fb8a3d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:e0:67:7e:a2:7a:ee:30:f6:ee:f3:59:bc:
                    01:e7:53:3f:b5:ac:48:bc:0b:00:b0:c4:1e:62:c3:
                    a5:92:40:7f:4d:8a:31:8d:b5:7d:00:b2:21:bd:7e:
                    f5:7f:95:43:df:33:40:11:53:f9:98:85:f9:fb:62:
                    e0:ab:d2:a0:54:a2:73:40:cb:3c:54:ee:97:e2:44:
                    e0:95:42:4e:4e:e8:84:31:01:91:34:2b:be:58:9a:
                    61:3a:b3:f9:50:d4:42:5d:ea:c2:24:0b:10:1f:7d:
                    4f:70:87:c6:30:6f:03:d3:b9:92:25:2e:f2:f5:fe:
                    1e:5c:dc:ae:46:44:9d:90:c6:37:49:6d:90:f0:71:
                    28:1b:24:21:3a:75:97:63:97:93:bc:97:78:3f:9e:
                    c3:2b:7a:c7:17:13:9e:b4:3c:32:69:c3:9d:24:66:
                    c3:f2:2f:51:22:2b:3a:24:81:83:d0:4d:3f:11:63:
                    15:8d:12:f1:1a:c3:82:51:4f:e5:ca:44:99:98:30:
                    75:e5:01:d3:f6:88:57:00:23:00:20:6c:5f:72:04:
                    02:30:a8:6d:c4:ff:6d:24:fa:e2:a8:6f:a0:f0:a9:
                    79:dc:37:d1:30:fe:38:b0:94:95:01:f1:31:0d:fc:
                    53:b2:8b:64:e7:48:a1:f6:e7:cd:79:e7:1b:6d:ed:
                    e1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:82:5C:2C:44:27:D3:78:B7:1E:1A:F2:F5:1B:FB:1A:3F:27:84:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a6230253-3344-354d-9053-bf5cb3806db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:12d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:96:83:db:08:48:e9:0a:de:6a:cc:17:1c:58:6b:67:f2:76:
         f2:60:cb:40:48:27:28:dc:9b:d3:cc:5b:80:34:4e:32:43:2a:
         7c:c9:87:75:7a:3f:de:3d:bd:1c:21:aa:98:2f:ec:55:60:c4:
         6d:6a:9a:ef:16:40:b9:87:06:83:6d:5f:51:d2:6e:bd:54:ef:
         c4:83:64:96:61:29:1e:30:a7:60:1e:24:00:54:af:42:42:85:
         2a:cc:49:64:da:39:9c:02:e8:13:dd:23:61:4f:4d:ed:45:2a:
         18:21:0e:0d:91:e2:60:4c:32:7c:a7:93:6c:41:70:b0:d0:7b:
         32:ea:f0:5d:7b:7c:a0:46:e7:c9:a8:3a:14:9b:8d:6b:44:35:
         77:07:90:83:9b:36:ce:78:73:0a:cb:64:d0:6b:3d:ed:32:e0:
         39:e1:99:e2:ec:9a:74:27:24:53:19:cc:db:64:cf:55:3e:3b:
         e5:bb:c3:db:70:e3:75:e5:3e:43:05:44:c7:cd:3b:90:83:42:
         55:bf:09:5d:c1:40:59:7f:94:4f:84:05:c4:37:d2:6d:9b:5c:
         40:b9:5a:cf:6a:77:93:dd:9e:3b:d1:6b:9e:8d:aa:b4:bd:dc:
         09:c7:af:b6:2c:a3:3e:44:14:9f:f1:f6:11:bd:76:20:09:9e:
         3f:c0:6b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----