Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02a6a4ab-ca94-3f3d-bee2-f05f693a4719.roa
File:                     02a6a4ab-ca94-3f3d-bee2-f05f693a4719.roa (raw, json)
Hash identifier:          oEG7kNPZjpxzlwAX/n9awxqHSQOaWNV7ck0C6P68cM8=
Subject key identifier:   54:86:FC:2B:5C:F1:08:F5:55:3A:B0:FB:1E:1A:62:3A:EE:9B:BF:0E
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858414A50C8B30B33589719B00C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02a6a4ab-ca94-3f3d-bee2-f05f693a4719.roa
Signing time:             Mon 20 Mar 2023 12:00:00 +0000
ROA not before:           Mon 20 Mar 2023 12:00:00 +0000
ROA not after:            Thu 21 Sep 2023 04:00:00 +0000
asID:                     395605
IP address blocks:        2001:470:1e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:4a:50:c8:b3:0b:33:58:97:19:b0:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 20 12:00:00 2023 GMT
            Not After : Sep 21 04:00:00 2023 GMT
        Subject: CN=fc949707-1bcc-4c19-bafb-2f8d93b1b365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2b:bb:a7:21:20:dd:ae:7e:3e:e1:5a:d4:4f:
                    da:ba:90:37:12:28:ca:f9:61:6a:28:eb:cd:af:96:
                    3c:2f:48:1b:5f:5a:7b:68:5f:30:41:c4:70:de:10:
                    9b:2e:11:c2:82:e3:20:d6:35:63:27:4a:74:79:b3:
                    75:7e:26:bf:9e:81:5a:d4:2f:2f:a5:91:80:82:32:
                    9a:b5:91:2b:3f:ab:2b:09:47:c2:3d:f4:36:b4:83:
                    5e:24:f1:b7:9f:b5:aa:82:01:77:51:63:c7:72:cf:
                    95:c9:26:04:53:58:e2:e2:6c:da:da:d7:b9:c5:83:
                    bf:95:af:13:4c:dc:4a:44:68:00:c0:e4:60:e7:d8:
                    91:9d:20:10:3e:a5:80:cf:bb:5c:ba:a9:4a:d7:2e:
                    c6:32:7e:8e:f6:bc:93:bb:44:c4:de:93:af:33:0a:
                    63:eb:b3:2b:fe:86:e0:ae:ed:bb:00:ea:f0:a1:8b:
                    86:f3:1d:86:d8:8f:b1:94:34:c8:c4:64:20:9e:15:
                    58:e8:7e:8b:57:ad:3f:02:5f:43:35:76:ad:7f:a4:
                    bf:3f:4c:40:f0:14:2d:40:a8:cf:17:01:1b:a9:1f:
                    86:0b:52:be:ca:fb:b8:d5:1f:94:0c:f1:b1:5a:52:
                    b8:c2:20:4e:77:26:7f:eb:ed:10:f9:0f:f2:97:18:
                    06:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:86:FC:2B:5C:F1:08:F5:55:3A:B0:FB:1E:1A:62:3A:EE:9B:BF:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/02a6a4ab-ca94-3f3d-bee2-f05f693a4719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:b8:2f:1c:92:ed:f0:19:73:01:dc:dc:d7:c8:2d:c8:15:2d:
         ee:3d:37:bc:90:e5:a4:e2:ad:77:ab:ae:72:8f:a1:e6:7b:94:
         c5:92:9e:52:5e:0f:62:a8:f3:16:f2:55:ce:4a:bf:3e:ba:ba:
         2f:b7:67:17:7c:fc:e3:9f:d6:4e:ad:97:f9:b6:1c:64:02:75:
         05:c5:e1:ba:6d:74:66:06:a2:4f:f1:fd:0a:bd:99:7e:07:55:
         09:da:76:ef:51:55:6b:54:10:f3:7d:64:84:bb:2e:21:fb:a3:
         4d:c2:d1:22:a6:13:02:3f:df:8f:11:dd:62:03:3c:c9:a5:a8:
         e5:0a:cb:86:a7:e0:12:ca:a3:9c:aa:a9:50:7e:17:65:ab:28:
         4e:58:c7:1a:be:ab:3b:e9:00:c0:2d:1c:bc:ff:8d:8d:8c:d1:
         92:3c:c7:93:bc:c1:75:28:87:98:92:0b:f3:5e:9d:79:85:24:
         85:60:62:76:58:11:84:cd:52:4c:d1:62:43:50:3e:cd:65:29:
         1c:27:d2:47:1f:bd:73:57:2c:c3:2c:ec:8c:19:2f:75:6f:ec:
         9d:36:b4:56:70:2d:59:b3:b8:10:2c:dd:30:6b:bc:f5:7a:ca:
         e7:79:f3:fc:ee:ca:86:d0:79:3b:a1:0b:84:66:0f:a5:38:a7:
         df:0e:a0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----