Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b428a340-887d-3901-82be-d5d8d99fcc71.roa
File:                     b428a340-887d-3901-82be-d5d8d99fcc71.roa (raw, json)
Hash identifier:          lqEIsJMO89bQ4rc1bTYm4iXSKZHltE7sX6UOS5esWV8=
Subject key identifier:   5C:07:34:93:C7:6F:98:33:7A:7C:BC:50:A4:DA:CF:5C:29:37:8E:11
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285840281716AE378F998ECA167980
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b428a340-887d-3901-82be-d5d8d99fcc71.roa
Signing time:             Tue 06 Dec 2022 12:00:00 +0000
ROA not before:           Tue 06 Dec 2022 12:00:00 +0000
ROA not after:            Wed 07 Jun 2023 04:00:00 +0000
asID:                     399078
IP address blocks:        2001:470:61::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:28:17:16:ae:37:8f:99:8e:ca:16:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  6 12:00:00 2022 GMT
            Not After : Jun  7 04:00:00 2023 GMT
        Subject: CN=cf8c3b25-8c64-48ed-867d-4646db430b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8a:04:6a:fa:3b:3d:b3:7c:ab:18:99:9d:e3:
                    38:1b:3c:eb:37:d7:de:d0:eb:c1:f7:3c:9d:12:65:
                    fc:da:af:de:43:a5:dd:66:51:fe:3c:4e:8a:93:9b:
                    0a:05:62:69:f0:c7:b5:a7:c9:b3:3c:c2:cd:d6:4d:
                    9e:a0:d8:66:06:86:5f:a7:7f:56:bd:25:56:42:6d:
                    af:07:46:c8:f7:e1:13:d8:c7:5e:b2:2c:f5:68:05:
                    5b:bc:2d:71:06:c8:8c:1d:bf:42:2b:bb:61:b1:9b:
                    18:f3:9e:06:51:19:0a:b1:f0:09:6c:55:13:e8:e8:
                    4b:9c:47:14:f2:85:b8:5e:c0:f9:84:64:3a:9c:7b:
                    64:d7:dc:fd:1f:2e:04:3f:e8:6e:5a:d7:30:ba:c0:
                    c2:c8:a6:d9:3f:de:67:d3:6a:3c:66:3b:be:d1:a8:
                    0e:da:a8:2d:87:3b:40:07:4b:4f:3d:2a:35:f1:a2:
                    3e:29:b2:4a:5c:44:67:cc:36:d3:24:c9:08:e5:e8:
                    4f:c7:c6:ff:ab:d8:d6:6a:8e:f6:04:9f:c2:32:0a:
                    d6:10:26:6b:f2:ad:af:fe:28:cb:30:af:2c:ef:50:
                    70:3e:7a:9c:03:78:c6:64:12:30:2d:01:b9:70:8a:
                    19:e3:6a:89:94:b1:de:b2:cb:81:99:b1:4a:49:62:
                    53:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:07:34:93:C7:6F:98:33:7A:7C:BC:50:A4:DA:CF:5C:29:37:8E:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b428a340-887d-3901-82be-d5d8d99fcc71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:61::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:39:81:12:20:c6:60:ab:39:af:7c:61:16:c0:e3:62:f7:f2:
         44:94:53:f0:09:e4:ab:c6:d6:e0:7d:31:88:c0:64:3b:64:b1:
         bc:eb:a7:37:5b:80:6b:07:23:58:06:88:67:2c:3a:75:94:b3:
         fc:23:89:70:3b:5b:31:29:7c:60:ca:12:66:3e:f7:fa:00:df:
         f0:89:11:3d:53:5b:e0:e6:35:81:b9:1d:8e:57:6d:d6:54:51:
         dc:47:aa:ca:1a:e9:d5:3a:2f:36:4e:8d:56:43:d0:fb:09:d5:
         23:d9:14:0b:a3:a5:9e:a3:bf:29:47:8f:30:1f:68:d8:ab:cb:
         53:d8:8a:6c:ed:02:f4:bf:0d:86:6c:50:4c:07:b0:6c:d9:f9:
         d0:f8:b9:cc:8d:78:3d:61:dc:f4:67:55:45:72:81:38:7f:45:
         89:11:92:a0:ed:29:9b:01:03:5c:82:fc:fc:96:68:d9:f4:d7:
         e7:01:7e:38:d3:84:0c:a4:b4:9a:f8:08:b1:16:d5:ed:4d:3c:
         8c:14:a6:a0:3c:dc:3d:05:02:6e:55:27:c5:b5:51:ab:97:19:
         ac:b9:c0:c0:98:02:14:8a:09:2e:74:33:3b:67:f4:4e:4d:8c:
         ad:f0:92:ab:8a:1a:ba:fc:95:6d:d0:4a:3b:5f:e3:91:24:38:
         5e:b4:3f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----