Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8ea716e-bfcf-38c3-b82b-f02a38a3543a.roa
File:                     a8ea716e-bfcf-38c3-b82b-f02a38a3543a.roa (raw, json)
Hash identifier:          w3+vpTYtDthAMlgGRqBlA0NP+/b7UDtRSot/wiRQPiw=
Subject key identifier:   8C:F1:9B:15:53:F9:38:65:44:81:F0:32:7C:92:B5:96:2A:59:8C:88
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648EBEC1FE539B4A1191C780
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8ea716e-bfcf-38c3-b82b-f02a38a3543a.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     7175
IP address blocks:        2001:470:11c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:be:c1:fe:53:9b:4a:11:91:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=e7e66b8d-4b6a-4d66-b88a-a21ee98bd4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:1a:1a:e6:53:7d:08:32:4b:83:9a:9d:88:
                    34:63:1d:eb:f5:53:48:8b:f0:fc:41:7a:26:73:91:
                    70:91:92:49:49:f5:c6:eb:a4:48:ea:4c:1e:c0:ae:
                    cb:7a:97:9c:cc:02:6f:1b:df:c9:15:7e:ae:a4:3a:
                    9d:3b:2f:76:20:8e:d5:e9:cd:14:8c:5d:9c:84:72:
                    86:21:67:6c:b0:10:3f:ed:a6:9e:a7:66:5e:58:2a:
                    f2:4e:47:32:ff:07:94:5e:e8:16:63:84:1e:ac:87:
                    3e:90:9a:ad:80:40:24:0d:85:36:49:1a:c7:be:59:
                    ed:bd:1a:04:05:1d:f4:a6:35:e0:2a:ee:0a:a4:89:
                    2d:29:5b:ea:68:ee:64:37:b1:46:6a:df:5d:65:97:
                    04:8b:c2:09:18:65:6c:ab:cf:ed:eb:57:2b:ea:33:
                    d8:f7:32:c3:b0:d5:b4:5c:48:13:33:75:5e:b7:ac:
                    e9:76:ca:bc:86:ff:61:99:dd:4c:8f:3d:7d:0c:07:
                    67:44:0a:1f:ba:48:b5:79:0c:43:ac:38:f3:78:4a:
                    69:65:29:f8:c1:f4:70:e2:a6:60:f8:98:74:b5:9c:
                    1b:8b:d1:b2:b8:eb:c0:5b:8b:ab:ec:1b:8f:38:b6:
                    bb:8a:8a:43:ca:d6:f4:74:dc:00:e3:00:14:27:4a:
                    c9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F1:9B:15:53:F9:38:65:44:81:F0:32:7C:92:B5:96:2A:59:8C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a8ea716e-bfcf-38c3-b82b-f02a38a3543a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:11c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:19:eb:b7:d2:95:56:3f:7f:d5:10:2b:33:30:87:a9:bf:e0:
         00:74:79:12:88:64:f6:23:28:38:18:ee:7c:23:47:5e:9b:d9:
         73:05:3d:12:db:77:6d:ad:d3:bd:35:6a:e8:89:20:f7:79:a8:
         dc:2c:11:99:5d:9f:06:d9:05:bb:cf:75:2c:fe:24:50:cc:41:
         39:12:35:92:06:85:1d:c6:73:3d:ad:6f:37:e4:1b:62:cb:52:
         84:1c:48:65:31:7b:56:ca:c9:98:46:94:a7:8d:24:1b:ea:e6:
         33:a0:58:b8:17:c6:9d:22:be:54:a5:71:3c:c2:ab:31:f3:03:
         e8:e4:14:c0:d5:e4:d0:20:2e:3a:b2:2f:98:0a:7e:58:38:05:
         24:9b:7b:42:00:10:c1:23:a9:7b:ca:5e:a8:1a:30:64:82:29:
         9d:dd:48:fa:8c:85:3e:2a:88:ee:f5:8d:a4:68:7b:47:57:ed:
         47:eb:40:c0:6d:44:40:49:ce:4b:bf:31:54:b1:ab:fc:25:01:
         f3:1d:c8:58:0d:5c:d3:77:a0:f0:b2:6e:0e:2e:82:b1:98:0c:
         55:8b:c5:17:9c:a1:f8:6c:44:d7:c5:64:6d:7d:ad:00:13:37:
         b5:ce:b6:bc:d2:52:92:82:b9:ba:4a:59:ab:55:10:e9:5b:5a:
         80:c3:78:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----