Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a825f509-b119-3f7a-9c9d-3dbb497ae3fb.roa
File:                     a825f509-b119-3f7a-9c9d-3dbb497ae3fb.roa (raw, json)
Hash identifier:          Qdi6vLJwNeUaMTZJxbvhKBtuMFXLFvOh6YzvJ8NoVqE=
Subject key identifier:   D4:23:59:A1:48:00:8F:35:2E:82:16:B3:52:43:2E:AB:CA:0F:20:0F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858429EE80B510F0ADFE27C0DAE70
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a825f509-b119-3f7a-9c9d-3dbb497ae3fb.roa
Signing time:             Thu 20 Jul 2023 12:00:00 +0000
ROA not before:           Thu 20 Jul 2023 12:00:00 +0000
ROA not after:            Sun 21 Jan 2024 05:00:00 +0000
asID:                     20318
IP address blocks:        2001:470:168::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:9e:e8:0b:51:0f:0a:df:e2:7c:0d:ae:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jul 20 12:00:00 2023 GMT
            Not After : Jan 21 05:00:00 2024 GMT
        Subject: CN=45e3159c-4636-4b34-89ac-1341d29e1c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:16:1a:40:44:a9:c6:be:be:76:d7:06:0a:
                    eb:76:24:4b:e6:ce:0e:f6:ed:53:2c:8d:9e:c0:44:
                    de:7b:07:48:7d:50:d4:3e:62:93:8c:4b:b4:2a:c8:
                    b1:e4:61:e5:b1:f7:50:66:62:db:bb:14:9c:a3:62:
                    89:ab:12:6d:73:59:26:72:54:4f:28:57:d5:cf:94:
                    da:7a:3e:27:64:96:7a:24:ab:be:91:85:f9:a9:e6:
                    08:39:e3:dc:a5:77:25:19:d1:6e:7e:59:1a:5b:e9:
                    e0:4f:a7:52:fe:e2:f8:3a:f9:49:0c:94:8a:06:94:
                    9e:e5:c7:3d:ad:c8:10:ab:df:8c:50:b7:d3:63:48:
                    cf:65:80:ae:c9:39:7e:5b:e3:11:bd:87:b2:8a:35:
                    f6:bf:60:c7:37:94:fd:aa:1f:6c:46:e2:b6:66:d8:
                    c7:b8:40:80:70:b8:81:be:38:9b:83:29:9d:13:97:
                    22:cf:6d:6a:0a:5a:63:ce:11:ce:b0:72:e0:55:13:
                    ce:19:f1:f6:c0:40:f6:78:93:75:bf:a5:81:4f:ec:
                    06:7f:1d:9a:47:3d:03:a8:37:69:65:f6:6b:06:b4:
                    10:01:ec:da:a1:7a:36:0b:fc:c7:af:ef:86:4f:f2:
                    99:cb:cd:28:e6:88:f7:0a:20:3e:b9:83:c5:68:5b:
                    45:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:23:59:A1:48:00:8F:35:2E:82:16:B3:52:43:2E:AB:CA:0F:20:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a825f509-b119-3f7a-9c9d-3dbb497ae3fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:168::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:21:4a:fc:34:55:0e:74:a1:00:42:ee:4d:4f:b8:b9:6e:98:
         8c:d5:91:ac:c3:7c:c9:a7:39:ca:9d:e0:49:21:85:6d:bb:18:
         8e:01:5b:96:4a:ca:2f:55:aa:fd:9e:8d:18:08:4d:f5:a7:c2:
         cc:c2:5c:5e:97:37:40:46:23:bc:c8:fb:22:f2:52:20:72:d1:
         df:cb:93:ad:c7:dd:60:e1:2d:83:7e:a0:a6:dd:6a:d1:70:e0:
         f8:7c:b2:14:c4:3a:9e:ac:41:c0:87:66:69:7c:9f:c2:ce:3c:
         7f:a2:24:b6:fd:78:ab:ff:4a:9c:c0:3c:fb:b3:83:0a:2a:1f:
         c7:85:d9:fb:a0:93:93:b1:0e:4d:8e:a6:5e:48:37:d3:a7:55:
         d8:4e:27:8e:cc:81:3e:f8:95:49:65:64:1c:e8:cd:2c:b7:40:
         d8:79:33:c5:e0:b6:d0:8e:0b:ed:87:71:d1:7c:f9:05:f4:0b:
         ad:47:b7:e1:11:eb:e9:71:d2:b3:11:9e:62:bd:73:8e:e0:60:
         9b:87:cd:f4:e2:a8:fa:e2:4c:2e:3f:41:c4:76:dd:66:85:a9:
         11:78:f1:fc:d9:66:46:06:df:4a:60:fe:33:72:c8:1b:25:cf:
         6e:62:37:38:1b:39:b7:53:e1:e2:d1:1c:da:4d:61:b4:11:2b:
         d1:67:d7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----