Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c6c2feab-3cf9-39fe-ab31-0661fef32721.roa
File:                     c6c2feab-3cf9-39fe-ab31-0661fef32721.roa (raw, json)
Hash identifier:          /EDLJMni4EoW8gCp7WekemtD6gOt5Eikj9C/AxKUgBg=
Subject key identifier:   3C:07:DD:52:78:FB:0C:08:49:B7:A7:03:4E:F2:90:D6:5F:DD:7C:D7
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA69AF9490130A4B5E9CD00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c6c2feab-3cf9-39fe-ab31-0661fef32721.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     394127
IP address blocks:        2001:470:149::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:9a:f9:49:01:30:a4:b5:e9:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=16923991-e928-4b91-b3ac-9a2bc4f4360d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:2b:b7:29:92:9d:1c:91:74:94:cc:4a:0f:
                    fe:3a:59:c7:a3:f9:e5:2a:9f:2b:e3:ed:41:a7:52:
                    95:3f:06:62:0b:7a:96:6c:b3:9a:3d:ff:9f:08:41:
                    d2:e7:53:44:76:2a:d0:37:7c:da:6e:f7:e8:98:99:
                    73:4f:b9:dc:f3:6c:31:ef:6f:4c:2a:77:c4:2b:24:
                    bd:39:36:f9:83:02:7c:a1:40:45:5c:f5:ba:31:76:
                    23:a7:c1:3d:60:a7:72:1a:d4:c8:2b:71:cb:84:16:
                    5f:85:4e:f8:64:da:6c:25:7f:73:d5:ec:d6:7c:dc:
                    f9:cb:1a:de:88:1b:ee:17:43:3b:68:8d:9b:f5:3c:
                    82:27:4d:1e:1c:26:ee:a4:7f:59:47:08:11:af:8f:
                    35:72:85:bb:6f:bb:13:fe:18:b8:e4:c7:0d:a2:21:
                    00:2c:81:9e:fe:44:c0:17:6e:6f:bf:dd:93:f4:2b:
                    33:c0:6a:a3:32:eb:6b:8e:36:81:26:ad:5c:96:d7:
                    c4:07:1e:a9:c1:9e:87:e8:69:a2:39:5d:5f:f9:67:
                    bf:82:b4:8d:be:a3:12:8b:fa:be:2a:0d:a9:ad:51:
                    53:3b:9b:ff:9d:b7:89:ad:3c:6c:ff:0f:53:76:61:
                    1d:ec:d7:c0:86:1b:60:70:76:d8:91:94:ad:d3:6a:
                    35:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:07:DD:52:78:FB:0C:08:49:B7:A7:03:4E:F2:90:D6:5F:DD:7C:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c6c2feab-3cf9-39fe-ab31-0661fef32721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:149::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:76:2b:0e:32:ce:92:b1:bf:24:1f:f0:1c:0b:da:38:1a:a7:
         a1:74:87:d2:27:e7:e9:d7:33:17:35:77:73:5c:f9:f9:9b:2b:
         dc:ee:0d:a4:05:ab:78:11:ae:1a:0e:30:62:c4:5c:c3:c4:40:
         06:c2:d9:35:26:94:6a:e2:8c:d0:ca:da:44:78:f7:14:2a:1c:
         d3:6d:6a:35:12:38:fb:14:3c:60:a1:a3:d6:28:e0:7e:6b:b7:
         7d:13:70:4b:22:0b:a6:f6:6c:5c:78:9a:d4:da:10:01:6f:19:
         8f:98:d1:99:98:e9:fd:93:82:c3:c0:ec:fd:7c:6c:fa:61:d3:
         4a:ac:01:ef:f3:da:00:fc:7e:ae:ed:f4:ee:e6:59:b7:a7:36:
         c6:72:39:c2:cb:ad:73:7b:b4:76:e3:8c:40:52:34:c8:1f:50:
         88:cb:7f:09:5c:92:e7:15:79:bf:90:38:01:42:84:91:c7:b7:
         b1:8b:e5:59:7b:89:8e:e1:8c:25:bc:97:d4:80:b5:26:e9:ff:
         71:a6:87:af:97:a2:a7:81:63:cc:8e:09:99:3d:ac:42:c0:15:
         84:98:5b:04:b9:eb:66:23:47:bc:a4:f8:fa:39:a6:08:07:63:
         f0:39:4c:b5:56:db:56:a9:60:0d:28:46:d9:df:41:8e:15:e0:
         76:39:ee:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----