Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac94b43d-9506-340c-8eec-24fd354a209d.roa
File:                     ac94b43d-9506-340c-8eec-24fd354a209d.roa (raw, json)
Hash identifier:          ex3ht6zimJ+HCtwvkb5WNordzLbiW+7eI3Gs1CctFNE=
Subject key identifier:   FC:13:0B:EA:D9:86:AE:41:03:1A:05:54:4C:6F:21:5C:C4:68:E5:67
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648EC4B9134E6928832129C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac94b43d-9506-340c-8eec-24fd354a209d.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     393909
IP address blocks:        2001:470:10b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:c4:b9:13:4e:69:28:83:21:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=ca3a5310-5359-483a-9e9e-e44971dd331a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:61:be:44:1e:d3:41:06:42:68:06:13:d7:c1:
                    fa:ce:48:0a:2f:77:6e:db:7d:b5:de:3e:ff:8f:27:
                    6f:b8:e9:f7:d4:53:d6:f8:d6:a3:3c:cb:c2:86:46:
                    f5:48:ff:01:da:05:fc:fa:99:42:bb:bb:06:4b:40:
                    e0:40:80:dd:cd:4a:bd:17:99:ab:49:64:5a:2b:96:
                    e2:f0:bf:7a:cc:87:e1:fa:75:3c:e6:1c:cf:31:73:
                    bf:f9:21:82:74:7d:29:4b:a9:1e:03:e7:1f:26:02:
                    67:69:77:c6:67:4c:0e:cc:44:3f:0e:8c:88:e0:9b:
                    40:96:0a:db:77:7d:77:3a:81:8f:69:bd:6c:5e:c0:
                    4e:f9:7a:49:ff:f8:ac:87:da:b4:3e:43:9e:fc:33:
                    37:7a:bb:2d:b2:2e:5f:d9:fb:6d:5d:e7:05:49:3e:
                    99:4b:31:84:10:27:51:30:ae:7c:fe:d7:ed:84:83:
                    ce:db:c7:f3:6e:6e:f4:5d:85:79:66:3a:f0:2f:01:
                    93:d8:32:26:82:8a:b6:90:44:4f:7e:6c:d0:2b:88:
                    14:2d:7f:83:78:a8:d0:8d:50:cd:59:bb:c6:58:e1:
                    e1:5a:aa:3d:d4:ef:53:8d:19:f7:47:40:a6:c3:8a:
                    2f:ec:d0:9b:e2:fa:1d:0e:94:d6:5a:3a:d1:72:18:
                    e7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:13:0B:EA:D9:86:AE:41:03:1A:05:54:4C:6F:21:5C:C4:68:E5:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ac94b43d-9506-340c-8eec-24fd354a209d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:10b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:1d:ec:3c:11:b3:aa:f3:61:23:1c:59:0d:90:8e:d5:7a:b7:
         24:71:f5:3d:9c:8d:a3:b1:06:b8:85:2d:d4:3c:52:33:06:80:
         ac:4a:23:fe:05:ab:e4:51:f7:a2:07:15:e9:7f:60:47:54:85:
         2c:69:3a:ca:19:b8:58:6f:71:7a:a1:4b:82:a7:00:d0:b4:bf:
         aa:3a:b3:89:8f:b0:bc:6d:a7:2a:ae:81:19:b4:d9:8c:5e:62:
         be:5e:6b:cb:8f:52:15:c6:7f:2a:cd:57:56:a8:a4:6e:4e:2f:
         b1:53:45:ce:3f:63:cc:dd:e0:89:56:a0:63:41:41:00:71:cd:
         c2:66:76:fc:20:7b:03:49:05:8e:36:ed:fc:36:07:73:01:18:
         97:a0:3e:44:22:3a:25:96:b6:97:08:f9:d2:0c:eb:bf:08:54:
         95:47:28:de:71:45:b9:2b:ad:5f:fa:f3:2d:c0:1c:40:84:e3:
         7f:55:85:6d:25:ea:04:d3:3b:53:ec:c8:2a:6c:37:e3:b6:06:
         3d:c9:bd:9a:2e:f3:25:3c:ac:f5:fe:3a:53:99:35:5d:3f:b4:
         ee:1d:63:8a:4d:c4:12:1e:83:0d:53:cf:02:90:22:63:66:e9:
         5a:ab:2f:b8:fa:f6:ae:82:f9:0c:c0:9c:76:38:93:5f:53:fe:
         cc:4e:f8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----