Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f4e3332-0635-3d6b-bf82-046413fd07c6.roa
File:                     0f4e3332-0635-3d6b-bf82-046413fd07c6.roa (raw, json)
Hash identifier:          BOMZEO8oMGRH1u2erij/Y69lKZRLb+7PJprECJ88NVE=
Subject key identifier:   BA:12:E4:28:FF:27:A5:00:D9:30:D9:9D:F3:D2:0E:21:CB:0A:C3:BF
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583BFDA5FE1AF4C1D850F8092880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f4e3332-0635-3d6b-bf82-046413fd07c6.roa
Signing time:             Sat 20 Nov 2021 05:00:00 +0000
ROA not before:           Sat 20 Nov 2021 05:00:00 +0000
ROA not after:            Fri 20 May 2022 04:00:00 +0000
asID:                     133959
IP address blocks:        2001:470:14f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fd:a5:fe:1a:f4:c1:d8:50:f8:09:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Nov 20 05:00:00 2021 GMT
            Not After : May 20 04:00:00 2022 GMT
        Subject: CN=58d76a50-3489-4a90-b316-9bb3b53dac01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:20:06:b1:ad:29:17:9f:9e:01:9f:97:c0:7e:
                    49:a6:dc:a9:56:66:35:77:16:b4:00:3c:40:da:be:
                    26:01:0d:c4:56:1a:60:df:60:22:b1:ed:5a:d9:c9:
                    88:f5:78:c3:35:60:f2:e2:ec:3b:a5:ec:03:65:50:
                    0c:a8:a2:f2:2b:97:16:9d:94:72:43:df:0a:46:dc:
                    3c:2e:2a:c3:09:8e:ec:26:9c:9a:fd:7c:37:d0:16:
                    43:9f:9f:fd:eb:da:b5:ab:81:d2:be:0c:a7:f1:16:
                    2e:39:18:08:98:e8:87:9f:ea:79:41:1a:d5:90:56:
                    06:0a:3e:6f:78:68:b4:58:cf:17:64:e0:f7:ea:77:
                    f6:82:1b:d8:4b:5f:80:56:47:f9:e6:5a:17:49:39:
                    b0:72:e1:a5:7b:7f:a0:0c:1d:37:cd:90:c9:5f:94:
                    80:eb:e0:cd:a1:dd:0f:ae:a8:99:f1:88:e9:52:4f:
                    93:38:f0:61:73:ac:e0:ee:1f:2f:d8:52:1e:77:0c:
                    ed:57:65:de:f0:20:49:97:af:27:1b:4c:aa:2d:89:
                    78:bb:b8:7f:fe:80:a7:5b:82:06:ae:49:16:28:2f:
                    9f:ee:8c:3f:e7:40:78:e6:17:d0:a4:d0:f2:b8:89:
                    ba:8f:0d:c2:e1:30:76:2b:42:f9:13:ff:43:a8:b4:
                    96:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:12:E4:28:FF:27:A5:00:D9:30:D9:9D:F3:D2:0E:21:CB:0A:C3:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0f4e3332-0635-3d6b-bf82-046413fd07c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:14f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:0b:a9:51:69:96:d5:ad:74:fc:ce:43:33:87:b9:95:66:e6:
         c3:2e:e1:07:4b:e0:99:e3:b4:1f:b9:5d:c5:13:ae:17:61:92:
         b4:f1:85:e6:26:bc:02:72:07:38:58:6e:53:6c:ac:63:0f:35:
         ae:c8:07:49:dd:85:67:45:e5:91:df:b6:85:2e:f2:e2:86:86:
         18:28:0f:7c:cd:46:88:5d:85:2a:b1:23:63:ca:3b:09:19:09:
         7b:77:c8:ff:91:0d:c4:47:47:b4:d2:37:95:8a:ff:09:9e:17:
         bf:51:ef:95:5d:80:bb:a7:b5:ef:13:ed:81:0a:59:14:ca:28:
         dc:11:20:f3:49:dc:e1:1c:20:c8:97:be:70:1e:88:43:f0:d1:
         24:7d:2f:e2:cb:c2:1a:9f:eb:02:d3:b1:be:5f:e4:81:a5:db:
         67:f9:86:f6:1a:73:9c:69:93:66:d4:8f:e3:e2:ef:56:ed:41:
         6f:28:a5:c6:57:2d:cc:65:cd:f1:51:48:ee:7f:dc:f8:3d:71:
         8a:0e:32:df:b1:ca:de:b1:e3:b7:8f:80:3d:69:fc:5d:a2:e7:
         e8:77:0a:8e:31:b2:18:45:36:6f:ff:4a:93:37:f4:1a:6a:b2:
         45:0e:54:37:db:6a:e4:b3:0c:4a:7a:b5:6d:ee:13:66:6f:99:
         e2:00:da:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----