Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aebede73-5711-3a8c-9180-e041dbf46466.roa
File:                     aebede73-5711-3a8c-9180-e041dbf46466.roa (raw, json)
Hash identifier:          qmJqPJv1C4V+iWmbr1DrFXgrVyQDap5GehDOxHxv+J0=
Subject key identifier:   60:7A:02:FE:6E:26:8F:26:4E:F4:85:9F:70:7B:FB:E6:A3:ED:C5:02
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D7936483E701BC2FC9C52A400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aebede73-5711-3a8c-9180-e041dbf46466.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     54182
IP address blocks:        2001:470:12e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:36:48:3e:70:1b:c2:fc:9c:52:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=b1e68c27-65c1-485c-8916-d7874e201a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:98:d7:ab:b8:d9:99:3c:b9:11:d6:17:71:27:
                    86:36:23:82:5c:f6:42:aa:09:ef:28:c9:ce:94:c5:
                    62:c2:49:aa:1a:f1:83:1b:37:38:4d:30:29:b0:bc:
                    5b:90:4f:a8:ec:03:53:0a:3a:23:f7:88:10:45:2c:
                    ab:e6:68:c2:48:e4:96:f1:7f:5c:c4:80:49:ef:33:
                    f4:03:92:88:0c:ee:4d:b7:c6:89:31:9a:03:2d:81:
                    77:6d:27:45:3e:57:31:a3:ab:0a:5b:5e:f1:2d:4d:
                    71:2b:83:8f:36:d2:a7:e5:c7:85:4d:ed:84:88:27:
                    92:5b:bf:a4:9c:7c:7e:7a:3c:7f:21:5e:47:4e:41:
                    3f:c4:23:b3:92:e5:d4:9a:59:ba:c2:d4:fb:f2:9b:
                    00:02:c1:02:9d:9c:d1:17:ab:2c:2f:0c:a7:46:4e:
                    83:d7:ea:c4:7b:86:41:15:d7:54:8f:ee:99:e0:6a:
                    17:27:f9:9f:de:59:26:d9:fd:07:92:b5:91:a8:c7:
                    f2:b9:c1:18:98:f4:0e:eb:41:e1:04:ca:05:0c:40:
                    0d:d1:40:42:f9:e6:06:2a:a6:46:10:3e:02:6e:cd:
                    79:21:5a:9e:86:3d:23:27:71:cb:11:09:64:cf:d5:
                    d9:37:b4:b2:7b:06:f1:8e:78:a0:fa:e8:85:80:d3:
                    b2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7A:02:FE:6E:26:8F:26:4E:F4:85:9F:70:7B:FB:E6:A3:ED:C5:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/aebede73-5711-3a8c-9180-e041dbf46466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:12e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ce:67:a0:4f:c8:99:b7:13:fe:8f:94:1c:05:d2:a5:cb:95:
         a3:23:0c:c0:0d:49:c5:3c:53:97:cf:d4:d9:bc:03:5a:c0:c6:
         b9:bd:58:f8:a2:00:e9:39:c8:22:77:3f:bd:97:16:07:50:61:
         54:33:c4:23:74:a8:a8:37:9c:04:fe:9d:bd:97:aa:56:cd:41:
         81:4d:cb:56:fd:31:1c:9e:57:2b:6b:ae:67:c0:16:df:72:af:
         6b:a0:4f:7d:b0:4c:04:6e:67:cc:68:62:bf:f4:b3:a6:02:5a:
         16:b8:15:5c:f2:9d:51:70:ba:a1:d5:85:87:a5:a2:2d:ca:fd:
         d9:84:44:13:d5:56:70:45:6d:9a:91:06:74:9d:17:a9:c9:84:
         23:a4:23:15:41:93:6b:e1:74:e6:5a:b2:a3:e8:e1:b4:95:a2:
         a4:53:00:1c:20:b7:17:58:65:a9:fa:ef:e7:5e:8d:2b:3c:5e:
         30:75:c7:bf:19:38:6e:5c:4f:cf:be:12:5a:2e:16:e8:7b:c1:
         8b:3d:8d:a9:34:db:20:a3:04:b0:17:92:4f:b1:41:26:ee:c0:
         d4:7c:0d:a9:7d:c4:5f:9c:18:da:3b:ef:70:9e:64:be:65:6d:
         41:b6:bd:d0:74:51:55:6c:8a:d3:23:dc:35:a3:56:43:75:2a:
         0c:80:79:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----