Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0664bd74-94eb-34c7-83f3-d0880ad2f2b2.roa
File:                     0664bd74-94eb-34c7-83f3-d0880ad2f2b2.roa (raw, json)
Hash identifier:          yShqvZRDAGxr3GScnK920dDAXnVH/OWru03JIRn9csQ=
Subject key identifier:   E3:07:77:09:86:FC:31:D9:DA:53:D1:30:1D:96:16:D0:7F:5D:B5:B0
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858459BD7A4218D542365D3E63700
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0664bd74-94eb-34c7-83f3-d0880ad2f2b2.roa
Signing time:             Sat 20 Apr 2024 13:30:52 +0000
ROA not before:           Sat 20 Apr 2024 13:30:52 +0000
ROA not after:            Fri 19 Jul 2024 13:30:52 +0000
asID:                     15517
IP address blocks:        2001:470:2d::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9b:d7:a4:21:8d:54:23:65:d3:e6:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 20 13:30:52 2024 GMT
            Not After : Jul 19 13:30:52 2024 GMT
        Subject: CN=0f488eb5-b0f6-4bd2-900a-ec009906e5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:71:14:51:87:e5:44:65:02:b7:39:c6:1d:d9:
                    f8:a7:b0:13:45:e3:ae:51:2b:94:bf:f6:c5:25:3d:
                    b1:9a:55:97:28:85:2b:53:92:42:67:c7:9a:81:48:
                    13:6b:aa:de:79:1d:fb:b1:1d:73:0f:23:68:b4:7e:
                    ac:a5:d3:42:33:30:bb:c2:ac:7b:64:27:fd:04:e1:
                    27:ec:a6:ea:58:fa:ac:88:a5:7b:da:a9:aa:b0:6f:
                    5f:fc:0e:e3:b3:4c:d0:60:3b:bb:4b:e1:1c:0a:c9:
                    5a:40:3c:62:32:33:f3:6c:71:52:e2:95:68:32:13:
                    cf:9a:f2:b4:af:a2:6b:d2:64:6f:55:5e:65:bb:c1:
                    e5:18:4d:3f:2c:ca:33:91:f0:b2:04:19:43:42:2e:
                    12:70:0a:5e:62:d6:22:20:51:3e:cc:66:10:44:f3:
                    fb:96:cd:c7:4a:67:0b:2c:ea:d5:02:07:97:9b:c6:
                    84:ca:31:0b:05:3e:56:01:7b:10:dd:55:84:1a:f1:
                    34:6d:f2:37:36:be:ac:a5:f4:fe:7f:2c:65:0e:25:
                    5f:4c:a4:ff:22:32:86:f2:3b:37:7b:d5:ae:c3:5e:
                    de:34:7e:02:4f:dc:f2:07:d7:01:46:25:a8:05:f6:
                    ac:c2:16:a7:4a:27:1f:ca:15:2b:93:ad:d8:f6:8f:
                    54:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:07:77:09:86:FC:31:D9:DA:53:D1:30:1D:96:16:D0:7F:5D:B5:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0664bd74-94eb-34c7-83f3-d0880ad2f2b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f6:ff:32:ec:91:51:a8:ae:6e:66:5c:eb:3f:44:ad:14:9f:
         39:55:8d:97:db:4e:bd:3b:4a:16:c3:b2:ae:a9:69:ef:34:f3:
         6b:d4:1f:0c:77:8e:99:88:7e:64:d7:d2:b9:63:cf:3f:c0:60:
         5e:d1:ac:57:9f:fd:26:cc:aa:f5:b9:8e:05:5e:e5:d7:77:79:
         53:bd:db:2b:2a:d0:99:12:89:31:ff:44:d4:f0:da:fc:2b:d4:
         2f:00:71:32:23:af:3f:4f:47:17:7e:8c:7f:f7:63:b9:f1:1b:
         e2:82:68:f8:d3:cc:2c:19:e6:ca:d5:fa:8a:45:86:14:15:54:
         93:e4:76:14:b9:b8:21:bf:71:3d:9d:76:0d:09:fe:cc:1f:6c:
         7e:28:1e:2b:62:b0:a8:b0:9b:bc:25:0f:40:f0:0e:42:3a:b2:
         ac:05:b7:fd:9b:f8:d0:fd:ed:f9:a5:69:6c:05:fa:16:43:1d:
         e8:4d:bc:10:e0:98:b7:ac:92:a5:33:ae:9a:59:d2:02:85:6e:
         ed:55:30:2d:3d:1e:53:4b:65:66:f4:76:2d:65:15:d7:a5:1d:
         29:46:a6:4a:10:d6:8a:4c:ed:3a:94:79:32:72:1e:6b:60:53:
         1e:90:f2:ec:69:cf:81:b9:a2:95:c6:02:b4:fb:2b:a5:cc:a2:
         8f:e1:03:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----