Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee23c2ec-2831-3bbc-8245-34d0ec9e2bff.roa
File:                     ee23c2ec-2831-3bbc-8245-34d0ec9e2bff.roa (raw, json)
Hash identifier:          n+gmxrsNHbmMBzAUo3jNGmkJrPHmrZG1hZ/vZ9ttrcA=
Subject key identifier:   33:DF:D4:E1:CC:4E:1C:F0:1D:3C:01:57:36:DA:90:61:FE:E0:8C:48
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA64E9AEADEB25E87958140
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee23c2ec-2831-3bbc-8245-34d0ec9e2bff.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     33097
IP address blocks:        2001:470:2c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a6:4e:9a:ea:de:b2:5e:87:95:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=708984a6-e806-452a-a87e-e719fad071a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:a4:20:17:e5:28:6b:d7:02:f8:4d:02:ad:
                    3d:6b:86:e4:b2:31:4c:af:ca:09:cf:af:94:1d:9b:
                    3f:dc:19:c8:7b:e3:e5:9e:cc:de:3b:12:f0:c7:15:
                    1a:2f:76:22:3d:68:d7:66:c6:93:8b:0a:38:1a:50:
                    1c:ba:c9:fc:60:21:d0:bf:b5:45:5e:da:64:57:60:
                    55:fb:81:bc:52:de:72:e2:28:51:1e:4c:73:ce:0c:
                    36:a1:ee:fb:06:81:37:e4:fe:ad:8d:17:66:a8:5f:
                    67:8a:c7:3b:e7:7b:bb:12:07:3a:86:6a:41:d5:d3:
                    a5:34:1b:c7:03:7e:5f:2a:e5:01:59:92:78:22:2a:
                    65:b6:76:7d:13:ad:54:1e:70:74:ed:a4:75:33:62:
                    20:fd:a1:c3:dc:de:50:69:b8:0d:31:d5:65:50:da:
                    1b:91:2e:75:fe:ef:94:4a:ea:f0:31:29:e1:30:3c:
                    ba:0c:11:84:64:8d:73:ce:26:e8:be:74:96:e6:33:
                    3d:c8:af:d8:88:9a:ea:76:a4:c7:a4:a4:ff:11:f5:
                    f9:9c:ab:39:a8:ca:89:a0:85:d2:1c:51:b6:8f:71:
                    a4:b4:d3:95:1c:26:68:75:1d:cd:d6:b5:3b:50:07:
                    d9:ac:01:28:6b:04:17:f6:7b:f5:c5:4a:99:1a:e7:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DF:D4:E1:CC:4E:1C:F0:1D:3C:01:57:36:DA:90:61:FE:E0:8C:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ee23c2ec-2831-3bbc-8245-34d0ec9e2bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:0f:cb:2a:53:e7:a7:eb:75:19:56:78:a5:c4:08:d4:f9:01:
         22:43:ba:f4:1d:2b:44:8c:27:a6:2e:8e:00:f9:e9:38:01:8f:
         b4:0d:c4:f2:1a:16:85:d1:31:66:44:7b:7c:72:85:0e:cf:4c:
         81:96:97:0a:fd:84:3b:53:ed:03:ae:ff:28:25:83:57:52:32:
         26:17:74:4e:2d:a3:e9:89:ea:02:3f:14:e7:a2:5f:ea:68:5a:
         ff:a2:80:ca:70:8b:30:a7:3d:44:77:6f:6c:69:19:9f:e9:5d:
         f7:1d:bc:81:a2:93:f1:60:c2:47:fe:4f:5a:d8:e7:f5:2b:3b:
         64:7e:1b:2a:72:94:5a:df:c1:aa:37:cc:f4:e4:12:11:b2:e4:
         5a:7b:61:c1:9a:08:bf:84:ae:b3:48:d8:56:7b:f3:00:77:cd:
         58:d2:d4:2f:17:fb:4a:c2:59:9b:4d:76:2c:2a:8a:d1:9f:e5:
         b3:30:f9:d7:b4:ac:fb:46:e2:85:20:0e:73:ca:fe:ce:11:50:
         f2:f2:65:6b:9b:a6:a8:78:c6:ad:f6:3f:7b:52:17:51:c2:c6:
         8e:95:7c:8e:ca:75:b8:87:3d:99:20:ba:ac:f9:a2:ad:4f:ca:
         51:03:5a:1a:50:94:75:a4:08:7d:fa:b0:ba:fd:71:d8:9e:79:
         f7:51:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----