Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7beea26-7866-391a-be2a-abc0e6929e95.roa
File:                     a7beea26-7866-391a-be2a-abc0e6929e95.roa (raw, json)
Hash identifier:          IEwNi/OLzpJQ1F1naupk5s/iihd8F9798oHMVQ9IupA=
Subject key identifier:   EE:B1:FB:B3:B0:85:2B:0E:7C:F0:31:85:26:FC:43:C9:0C:AA:49:8E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA661B99248426C82673100
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7beea26-7866-391a-be2a-abc0e6929e95.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     29962
IP address blocks:        2001:470:121::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:61:b9:92:48:42:6c:82:67:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=5565e6f8-455f-4310-97c2-edf4622c5248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:11:4f:fe:96:fb:cb:29:2c:a5:b1:d0:70:fe:
                    0c:d5:ba:84:c7:43:7d:09:69:b4:c2:24:7c:16:9f:
                    ca:f4:46:da:a5:f6:7d:e6:d0:6e:1c:58:e4:77:64:
                    9c:bf:c2:6a:29:4e:67:66:40:f1:11:a8:d0:db:45:
                    20:48:bc:84:76:f7:9f:98:82:c0:db:25:78:44:04:
                    15:63:85:af:87:fe:2f:ca:0a:6d:03:92:0c:15:3c:
                    58:05:66:0f:d3:b8:71:ab:87:68:33:75:d3:e9:8a:
                    f8:5d:4a:3a:35:5e:ee:42:f0:9f:2c:42:dc:f6:c9:
                    0e:67:ff:2a:94:0e:b6:5a:34:0d:f5:f4:40:79:a4:
                    af:d4:39:1f:a1:34:c8:2e:72:2e:c2:ad:34:2f:d2:
                    3e:78:0f:28:2b:82:42:74:d7:fc:db:eb:12:d0:d3:
                    be:b2:23:09:79:00:b0:83:98:f5:b7:a1:24:48:7f:
                    76:ae:61:f8:99:bd:74:ed:20:17:30:dc:dc:bf:31:
                    76:49:f5:22:6f:4a:6e:31:61:a6:56:af:db:bd:03:
                    a5:05:5b:89:67:8b:d3:5e:2c:82:1b:db:86:67:e3:
                    5a:7b:66:6a:71:06:59:16:4c:bb:da:fe:0e:db:a0:
                    73:bb:16:1d:0d:15:c8:af:67:61:47:1b:ab:d7:07:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B1:FB:B3:B0:85:2B:0E:7C:F0:31:85:26:FC:43:C9:0C:AA:49:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a7beea26-7866-391a-be2a-abc0e6929e95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:4e:97:6f:4e:a1:13:b9:79:48:40:36:ef:b3:19:b8:ec:ac:
         23:97:ad:23:c2:fd:df:c9:a1:39:46:f1:01:b4:ec:60:5b:9e:
         71:82:98:87:16:f8:8f:ad:e7:de:80:8d:72:a9:79:ad:9e:0f:
         ce:5c:42:40:74:1d:61:3b:48:b2:f0:55:25:d6:8d:83:98:9f:
         de:b4:0c:68:00:b0:ac:ff:3b:34:57:9e:d9:7a:3d:5c:00:4e:
         40:75:73:7b:7e:8e:4a:0f:1c:a8:93:e1:94:68:c0:df:a3:42:
         f0:5f:a1:a4:d3:e7:db:26:c0:f5:e4:93:27:ee:05:05:b8:22:
         dd:64:4c:fc:b7:82:7a:e0:7b:b5:56:7e:43:ca:c7:ef:56:5d:
         67:3c:da:0a:73:be:65:f0:51:59:1c:38:cc:e9:1f:95:ab:e2:
         6e:8e:75:e1:3f:b9:5f:ef:6c:47:b7:78:75:c1:73:8f:ee:ee:
         5f:b5:08:58:72:7a:40:5b:0f:6c:57:f4:3b:26:89:09:03:42:
         b2:c4:2f:71:d0:9e:34:02:d2:7b:dd:25:83:98:b3:82:3f:58:
         3a:40:8b:e8:8d:ca:4b:9f:42:0e:a6:c4:00:25:76:e7:f9:7b:
         26:14:f3:26:91:e0:3a:9a:41:33:79:8a:7f:75:96:5b:09:9c:
         49:9b:d7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----