Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eef0fb4b-efc6-3574-845b-b2468c4ca4e6.roa
File:                     eef0fb4b-efc6-3574-845b-b2468c4ca4e6.roa (raw, json)
Hash identifier:          hEg/5mkymxQyu8KF47087BwJPS1uKNsZqBwnnwg15Mc=
Subject key identifier:   DC:B2:58:01:63:E4:A5:0C:CC:9B:EC:F3:9B:E2:58:1B:92:C7:82:88
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA700D78F66AEDFA77B5B48
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eef0fb4b-efc6-3574-845b-b2468c4ca4e6.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     62798
IP address blocks:        2001:470:d0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a7:00:d7:8f:66:ae:df:a7:7b:5b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=785c3c8f-7ca7-4573-8fb2-5ae962dc6764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:ea:2b:5e:fd:fc:71:e2:5b:70:d5:ad:d5:
                    ea:88:b0:f6:c9:23:d7:ea:7e:6a:5a:56:97:86:d9:
                    8b:4a:47:59:ad:08:97:aa:7c:c9:cd:34:59:a2:30:
                    c3:d2:87:fc:d3:02:91:fb:0f:09:ad:af:ca:4c:6d:
                    57:68:0a:3d:73:0a:86:fd:f2:2d:f1:74:e6:07:82:
                    49:e3:d4:b1:d4:ef:8e:4d:cb:fc:36:21:27:b8:ad:
                    5d:4d:73:d0:66:aa:ca:5f:3c:36:35:a2:89:0d:2d:
                    9d:08:e7:53:5d:e4:e4:bc:5b:44:c1:58:0e:85:3c:
                    ee:84:5f:53:51:b6:79:0f:62:d2:8a:e8:a2:82:a7:
                    f9:a8:e9:ad:b6:42:e3:c7:f5:cb:3a:14:5c:68:86:
                    54:db:e6:17:b6:7a:e1:ad:9f:97:71:e3:b6:7e:33:
                    6e:9e:5f:7a:02:d0:ca:d7:7d:5e:49:bd:5b:05:63:
                    e6:99:b7:4c:7f:fb:33:b1:f6:e8:f2:07:37:2d:c0:
                    56:70:10:4a:b3:ad:76:77:24:23:ca:ae:60:f4:77:
                    49:e6:6c:95:df:59:4e:8f:cf:3b:72:6e:4c:3f:47:
                    e8:8b:e4:30:59:49:76:79:a8:a2:9a:ab:cd:55:62:
                    e2:5a:54:9e:40:23:17:e4:9e:2c:d2:f5:af:73:48:
                    22:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B2:58:01:63:E4:A5:0C:CC:9B:EC:F3:9B:E2:58:1B:92:C7:82:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/eef0fb4b-efc6-3574-845b-b2468c4ca4e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:d0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:3f:74:f3:1d:66:90:1a:03:38:44:c0:d6:dd:b9:73:a3:20:
         ca:5a:ad:d2:9f:bf:73:03:19:d1:b2:33:5e:05:dd:81:a0:17:
         20:e6:a8:58:2a:ab:3e:f2:6c:55:30:ce:9b:3b:d2:2a:00:f1:
         ec:bf:48:93:37:e9:08:55:e9:be:54:c3:01:e8:23:cd:03:0d:
         a1:03:64:34:bd:35:df:0b:6a:aa:52:14:0b:18:52:68:04:96:
         dd:ee:80:d6:76:46:2b:82:48:32:df:e7:0f:a0:15:79:e9:51:
         b4:af:83:fc:a6:af:c1:99:56:00:56:f7:12:3a:ba:6d:dd:d3:
         08:b1:f5:eb:c6:de:24:e7:b9:34:6d:c5:9c:27:aa:17:7b:70:
         4e:c4:9c:7f:84:83:49:17:df:ed:9f:47:f6:82:37:53:ee:4c:
         d1:40:05:7f:d4:39:54:a4:fe:84:38:e9:51:1e:75:c8:e1:6f:
         35:79:76:ff:e0:32:eb:58:7f:fc:25:1d:7c:b8:fe:cc:b2:2b:
         21:da:4b:36:a8:57:5d:71:3c:05:7f:50:1b:e1:b9:c9:83:5c:
         10:9e:1d:3f:d1:8c:58:67:9a:cd:cf:e2:c3:14:e3:dc:dd:94:
         f0:73:8e:a3:9d:29:31:99:73:4a:aa:9d:74:1d:ac:ad:b3:58:
         c8:24:29:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----