Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/418e23bd-76e1-3511-ab23-b1f218536c91.roa
File:                     418e23bd-76e1-3511-ab23-b1f218536c91.roa (raw, json)
Hash identifier:          7QZJiM3futMxLN5m9fyq7Adbr9jDE9wxz66eoCgNPmg=
Subject key identifier:   F7:AD:C4:FD:65:B2:6A:6A:36:A0:6F:8E:19:00:C0:7E:80:AB:18:1F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D79367B2713140A2CFDF3F320
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/418e23bd-76e1-3511-ab23-b1f218536c91.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     63368
IP address blocks:        2001:470:54::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:36:7b:27:13:14:0a:2c:fd:f3:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=15abc7b0-f25c-4f86-8625-b9559fd4d656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:cc:9d:dd:8a:03:ef:a3:7f:fc:c4:a0:56:
                    e8:04:f6:21:6a:08:19:9f:72:81:ef:c4:7c:10:09:
                    e2:f4:8d:09:bc:50:89:95:09:6a:b4:99:6c:82:b9:
                    93:4f:68:d7:15:93:94:2a:41:44:8d:5b:fb:0e:f4:
                    1d:2e:e8:eb:fb:9d:14:f7:19:76:d5:50:9c:fa:69:
                    4b:4d:29:fd:d8:65:45:c0:be:c5:04:c0:50:53:fb:
                    a2:ff:be:51:a9:30:8e:85:0f:0c:05:0c:f6:21:ef:
                    cf:a2:b0:14:e0:e1:7e:56:f4:e3:c2:c0:ad:e3:e2:
                    55:8a:ab:d8:91:4e:a0:65:8b:af:b7:1e:88:3d:3f:
                    7b:ef:86:1c:64:a5:95:6b:d5:ab:03:b4:9f:5c:03:
                    67:62:b6:1b:3d:6d:d7:12:ae:02:01:08:5d:77:68:
                    ec:58:f8:ab:c4:69:7c:65:6e:c3:ec:64:43:68:1a:
                    7d:07:e9:47:57:ff:18:04:a4:0a:42:a0:51:b2:8b:
                    8c:71:76:41:5d:1d:b3:36:b2:e4:db:68:15:56:9c:
                    93:6c:f4:68:b9:83:3f:44:ff:37:ef:e4:fb:e6:0e:
                    8f:35:53:55:13:71:9d:b0:bd:70:03:47:87:6c:62:
                    e8:76:76:45:b6:fe:ab:95:57:73:fe:1a:c7:90:ef:
                    75:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AD:C4:FD:65:B2:6A:6A:36:A0:6F:8E:19:00:C0:7E:80:AB:18:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/418e23bd-76e1-3511-ab23-b1f218536c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:30:8e:b4:fd:fb:5e:7a:bb:89:a9:a3:22:2e:07:97:ec:84:
         cb:09:b0:31:7d:3f:e3:26:47:29:80:0e:fb:28:56:fa:43:fb:
         ee:31:fe:74:54:1c:a8:51:9e:3c:57:94:4a:71:8e:81:e2:83:
         aa:ef:65:28:d4:4b:26:ba:d7:1d:8f:76:ef:24:a6:e1:c8:fc:
         18:ed:49:c0:cb:c4:36:6d:32:a2:40:1d:90:6d:8b:66:99:52:
         cd:c5:9a:b5:5d:53:d5:99:70:70:cf:93:5a:6b:b5:4f:d3:18:
         08:56:8b:80:1a:02:27:e2:de:f9:7e:dd:ee:5a:20:6f:b2:36:
         c0:fb:71:fb:93:56:2d:4d:9a:78:d2:ed:64:1f:af:ea:64:c1:
         28:89:33:ec:2f:b8:71:b9:f7:b8:08:61:11:e0:30:b1:ad:4a:
         87:eb:1e:45:89:51:0f:92:e4:aa:27:eb:05:62:7d:dc:ad:1b:
         2f:b3:37:13:6d:e3:ba:b5:06:80:09:a8:23:42:bf:00:25:65:
         23:1f:3d:5d:68:97:56:83:68:b6:f1:c6:b8:fe:67:b1:9f:7f:
         c5:a2:6f:11:ba:58:bf:cf:1e:8c:69:16:7d:79:35:ea:b8:b4:
         cb:36:62:17:37:c8:02:23:aa:0d:7b:5c:9f:a0:0a:69:80:fa:
         23:39:cb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----