Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d3ff1af-da3a-39d2-84d9-0792b3d932ae.roa
File:                     2d3ff1af-da3a-39d2-84d9-0792b3d932ae.roa (raw, json)
Hash identifier:          Mt8RxFsLHypzHDH3JN1RP6eoiBkShEoF9JpxfYFWY+Q=
Subject key identifier:   6B:4C:C6:D1:8E:35:76:72:88:61:07:24:36:7B:A6:48:08:6C:87:04
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584635635118D46BC5E7BDD346E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d3ff1af-da3a-39d2-84d9-0792b3d932ae.roa
Signing time:             Fri 14 Jun 2024 13:30:58 +0000
ROA not before:           Fri 14 Jun 2024 13:30:58 +0000
ROA not after:            Thu 12 Sep 2024 13:30:58 +0000
asID:                     35075
IP address blocks:        2001:470:31a::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:35:63:51:18:d4:6b:c5:e7:bd:d3:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 14 13:30:58 2024 GMT
            Not After : Sep 12 13:30:58 2024 GMT
        Subject: CN=4bb0017a-e711-4ad0-bf5a-8527270a19af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:f8:bf:08:03:a5:35:44:c3:f6:a8:29:ed:
                    9f:38:4f:ff:74:79:b0:a5:23:ec:ec:c6:e8:ec:4d:
                    4c:59:dc:db:96:3c:71:cb:a5:13:d5:81:5e:40:f5:
                    fa:89:76:d4:27:4c:c9:36:45:23:5c:7a:87:fd:3e:
                    56:95:8b:7f:d4:17:6e:dc:2c:a0:47:f6:c1:f2:19:
                    a7:f2:b3:27:81:ce:e5:41:67:9e:ea:95:ce:1f:04:
                    53:89:5a:de:d7:d3:ad:ac:c2:97:75:61:c6:7c:23:
                    84:a2:88:61:6f:12:09:74:80:d5:9b:23:74:d4:25:
                    2d:86:cc:ec:0d:19:08:87:37:ca:bb:2f:cb:18:68:
                    2d:ff:b1:c6:9e:25:39:86:6b:b4:92:fa:7c:f8:02:
                    71:2e:1b:38:70:4a:39:95:a5:c1:50:7c:2e:3b:77:
                    72:28:1c:25:7f:3c:da:a5:0d:17:ee:c6:73:4e:fc:
                    ab:ed:f7:df:c5:0b:b8:8a:04:00:eb:97:cc:72:c7:
                    9a:61:64:64:23:e5:df:36:a7:db:e9:a5:04:f6:79:
                    d5:54:cc:5d:f5:d4:b8:9b:70:f5:f7:ff:fa:c7:30:
                    54:59:1d:cc:a4:ca:d9:5e:09:2c:63:3a:20:ca:45:
                    6e:41:67:69:7b:55:65:a9:1e:b4:d0:4a:14:be:02:
                    0f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4C:C6:D1:8E:35:76:72:88:61:07:24:36:7B:A6:48:08:6C:87:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2d3ff1af-da3a-39d2-84d9-0792b3d932ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:8d:e9:f0:8d:26:8c:d9:c3:97:76:2c:25:46:71:4f:b6:da:
         fb:3f:41:82:79:86:3e:a6:74:56:c5:02:e5:5b:48:d1:fd:f7:
         0f:e3:32:66:ec:31:69:7e:3a:d0:a3:b3:3a:0d:64:77:a0:c7:
         16:75:7b:4a:55:46:1f:7f:c5:d5:ac:1c:87:2e:de:79:38:3d:
         3a:b3:3f:1b:6b:29:56:cd:e4:e4:0e:b7:1e:87:fa:0f:76:a5:
         29:ca:54:1e:5f:02:e5:a6:2b:b2:40:56:45:90:02:55:e8:95:
         9d:99:0a:28:6f:b4:e9:b6:40:22:52:e2:5e:8b:9c:16:2c:09:
         2a:78:6e:2c:dd:d6:90:36:59:0d:fe:bc:e0:a8:00:0b:cc:ad:
         ea:37:c6:ee:83:6c:7a:04:fa:83:d9:21:35:a5:86:e2:97:60:
         e6:5d:64:58:66:f5:f6:d6:4c:23:3c:91:53:c6:2e:7f:da:f2:
         08:4c:d4:ed:7c:05:c5:b5:af:f5:87:4a:00:1b:07:9f:26:3b:
         70:0e:ec:a5:67:23:17:ba:3b:50:9f:3c:24:92:37:e0:4e:e7:
         d8:b4:95:75:b3:88:90:e6:8b:1f:e8:a3:b8:2a:2f:55:ff:eb:
         83:44:db:7a:06:29:5e:56:d1:b1:ee:3d:cf:b4:41:b7:54:bf:
         14:4a:cc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----