Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/feea31f5-b6ec-3946-93b3-e6e98bcff7bd.roa
File:                     feea31f5-b6ec-3946-93b3-e6e98bcff7bd.roa (raw, json)
Hash identifier:          qQ6yhGcuXoE9Ail+z8Ks2PqhjA15zcliH/5DIkJQmHA=
Subject key identifier:   89:3B:12:9C:43:B1:57:6F:31:72:83:9E:EC:51:01:0D:A8:8D:5A:B4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648D86A63FB494B58C918400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/feea31f5-b6ec-3946-93b3-e6e98bcff7bd.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     394330
IP address blocks:        2001:470:b3::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8d:86:a6:3f:b4:94:b5:8c:91:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=35ff8bb8-4795-473f-8eae-999f13383a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:11:e0:90:d4:c6:2f:0d:e3:79:60:da:c1:f3:
                    40:12:6f:0d:c4:73:f8:b4:e9:b0:9c:bc:1f:1d:e1:
                    04:c6:b3:5c:f2:66:ab:4e:b2:97:4d:a5:e2:d1:76:
                    e6:4b:dd:26:08:56:5a:20:5c:5f:6f:be:d2:3f:96:
                    0e:a2:32:2c:c9:8f:fa:7d:99:df:38:6e:43:ca:aa:
                    eb:31:a8:9a:b4:b5:fa:25:3b:12:c4:d7:39:6b:92:
                    3a:7d:4e:f5:ba:40:92:97:b9:62:0e:9f:2d:75:c0:
                    5c:35:9a:ba:bd:a4:be:4b:19:b1:ed:e4:8b:7b:1b:
                    28:2a:f9:45:26:79:df:20:c4:24:1e:3f:95:55:5f:
                    8c:c9:e6:b3:c9:2d:c8:25:bb:76:eb:ed:fb:52:e7:
                    b4:7e:cf:df:35:a5:ab:21:a2:40:ce:0f:a0:46:62:
                    82:86:be:95:8a:b2:af:4b:eb:c4:28:d3:af:f3:60:
                    55:90:c9:b6:2f:39:50:cb:b9:b3:6a:d3:3b:67:4f:
                    8d:2a:10:c7:4d:8b:ef:d4:11:83:27:ba:70:de:71:
                    75:f7:b2:90:d0:76:d5:9a:98:5a:3e:19:2f:45:d6:
                    89:96:b0:ba:d1:07:d3:2d:ff:f5:1e:96:49:e6:32:
                    8f:fa:8b:e0:42:f7:3e:af:d0:e4:9d:89:38:c6:96:
                    a2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3B:12:9C:43:B1:57:6F:31:72:83:9E:EC:51:01:0D:A8:8D:5A:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/feea31f5-b6ec-3946-93b3-e6e98bcff7bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:b3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:21:ca:81:0e:b4:0c:89:09:0e:90:6c:5b:50:3c:6a:02:94:
         e2:a2:c5:bd:fc:24:09:63:79:a4:2b:ed:dc:ba:08:af:8a:26:
         62:1e:88:9f:cf:5e:91:1c:ff:29:d5:83:85:da:c1:e0:75:4a:
         c0:40:42:04:6f:9e:c3:f4:ec:bb:e1:c8:7e:43:2a:cf:50:85:
         b6:a3:fa:eb:95:d8:af:7f:3c:8c:85:0b:6b:84:21:22:6c:36:
         6d:0b:57:03:9e:9d:dd:ce:3a:5c:d8:33:25:61:8e:c6:db:d9:
         7d:ab:e2:6e:c7:4b:92:54:a9:2f:bc:b2:9c:4c:11:34:42:1d:
         88:1a:85:8a:b4:8a:2b:91:0d:4e:15:8f:82:b0:bc:4a:29:5d:
         fb:33:38:06:17:19:44:bd:0b:57:30:9d:fc:4c:39:fb:75:fd:
         d2:19:53:bc:7d:91:79:e3:d1:f3:c2:75:6b:a0:cc:63:82:47:
         88:30:a8:8c:42:55:80:68:09:30:76:9d:7f:cc:2e:cc:2c:17:
         c2:83:61:3e:18:ee:79:91:bd:42:f8:0d:f5:87:7d:2d:82:0d:
         ae:4f:1e:1e:85:50:58:0a:38:d9:12:e7:3a:3c:83:d7:1b:6f:
         e6:8e:88:71:0d:b8:26:85:fb:cd:9b:9e:c4:71:94:df:fd:34:
         d2:1e:0d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----