Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3bda6e8-2dab-35e5-8f71-b987a6d5753b.roa
File:                     e3bda6e8-2dab-35e5-8f71-b987a6d5753b.roa (raw, json)
Hash identifier:          YPDkTscydHt0HarBlLa5CO/YUcAvn/ZIiVeNY1Nzy4k=
Subject key identifier:   A6:D3:97:59:99:88:50:4A:32:A1:4B:A0:90:9E:0E:94:D8:82:DC:12
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA64E8E7C82723F071DB180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3bda6e8-2dab-35e5-8f71-b987a6d5753b.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     22663
IP address blocks:        2001:470:2c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:4e:8e:7c:82:72:3f:07:1d:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=559ed2a9-8011-4bfb-8b0f-d3daa9b304fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:74:61:30:36:bb:7b:e7:de:62:a0:73:dc:
                    68:a2:31:f6:03:86:2b:d2:6a:8e:6e:1f:2b:15:25:
                    d7:23:53:ae:bb:8a:07:8a:25:5f:d3:c1:22:2d:ee:
                    91:df:22:a3:71:b8:9a:d1:5e:11:8e:87:9b:43:bb:
                    02:21:4d:ce:13:18:ec:66:7f:eb:7e:9d:e0:d8:16:
                    73:25:2e:c8:e9:57:54:5d:26:70:6d:e4:aa:fa:a2:
                    03:b9:a6:48:db:3a:06:a4:8e:14:0a:79:f0:56:48:
                    05:13:23:40:e0:89:5d:53:22:b3:cc:0c:3c:a2:10:
                    d8:47:62:07:ec:1d:89:f5:23:0c:5c:dc:b1:cb:99:
                    f6:23:45:4f:12:f9:10:95:20:ec:ec:a4:89:c7:28:
                    df:90:8c:64:86:19:97:87:d1:84:23:de:93:89:24:
                    9d:73:c4:7b:c4:14:0a:36:7d:05:cd:49:fb:11:ea:
                    46:ea:da:cb:a5:a7:f0:dc:99:9f:04:0a:75:1c:0f:
                    43:73:86:91:e5:e8:b8:fb:83:73:ca:3b:ea:5e:5d:
                    bf:a0:cd:b8:32:2e:5f:0a:1c:8c:e2:22:b8:f6:f2:
                    02:65:98:74:ec:ab:4b:e4:22:b6:ac:43:11:12:8a:
                    1a:2c:4d:7d:92:23:4c:8e:86:52:1c:4e:35:3c:4e:
                    82:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D3:97:59:99:88:50:4A:32:A1:4B:A0:90:9E:0E:94:D8:82:DC:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3bda6e8-2dab-35e5-8f71-b987a6d5753b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:bb:02:07:a7:e2:d5:36:5c:9a:83:1d:11:bd:c7:d3:9a:20:
         69:a4:ac:16:1c:d8:b0:a8:d9:0c:36:de:ca:22:36:18:86:40:
         46:c3:9c:ca:28:89:d6:78:b1:aa:c0:4c:cc:02:a8:f1:a5:77:
         e6:44:32:42:b4:0e:01:31:76:85:06:8a:ea:39:3d:ef:d7:68:
         07:86:55:46:44:19:ba:10:5a:66:16:a9:f9:ad:26:47:35:39:
         eb:7d:f0:f6:d8:3f:db:49:58:10:d8:3b:bf:88:38:e7:69:24:
         f6:74:dc:e1:62:5c:15:be:b2:fb:3d:fc:9f:d8:89:f9:8b:68:
         92:1a:1d:9d:57:3e:33:85:55:c8:b6:9f:19:14:ee:0c:e4:ed:
         b5:5f:1d:9c:d9:e1:29:ba:bd:e6:f8:1a:34:b6:6d:e2:ea:4b:
         e6:29:d0:5d:c2:93:09:ea:78:8d:16:b6:43:dd:97:bf:cb:a0:
         d5:65:31:02:33:dd:66:62:a4:fc:d0:87:28:91:a2:69:45:d6:
         c6:81:f3:2f:a8:df:47:33:a7:16:5f:56:7e:d6:51:c2:47:c0:
         e5:70:42:ae:00:cd:d4:35:3d:3e:8a:3f:70:af:01:ed:fd:3f:
         fa:b6:85:35:3d:9e:a7:4f:67:52:2c:25:65:de:52:a8:2c:b0:
         af:20:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----