Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/42a600c9-b30d-3446-b547-e650617726f2.roa
File:                     42a600c9-b30d-3446-b547-e650617726f2.roa (raw, json)
Hash identifier:          5QvxhUNXkuYsz4sW3jHHTmXucc+nDdYKrmti4kBpKV0=
Subject key identifier:   C5:45:EF:FA:F5:42:C1:0F:06:6A:5C:D7:9C:F0:60:A3:12:51:0E:25
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648E12908098C17DCE553000
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/42a600c9-b30d-3446-b547-e650617726f2.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     29762
IP address blocks:        2001:470:77::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:12:90:80:98:c1:7d:ce:55:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=07fc9255-3b01-443a-ad0e-ec5b1c5fb500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:e9:70:f6:a8:f0:69:9a:17:80:15:b2:b8:
                    2c:07:d0:f3:99:35:75:a4:4d:06:d7:8a:e2:26:61:
                    08:a3:41:67:c2:f7:50:b9:9b:cd:a9:32:6b:ee:fc:
                    6d:33:27:0d:4d:16:97:2a:42:23:e1:e7:4e:2c:f8:
                    1b:d7:40:43:54:65:26:3c:86:b0:67:76:00:e9:de:
                    a7:ba:fe:6a:ff:d7:3a:0d:30:6a:4b:2b:b5:c0:ea:
                    e6:e4:7d:f5:f0:79:9d:6d:ab:61:ab:8d:63:26:54:
                    a6:99:6d:e2:a7:a9:d9:da:fd:99:d5:a4:71:a6:c8:
                    54:9d:59:ad:66:7a:48:f6:93:ff:3d:39:8b:88:92:
                    ee:2e:ed:5e:a2:9e:2a:32:f0:30:e3:b9:87:70:37:
                    7a:ef:e3:6a:11:00:cc:6f:da:52:5f:5d:5d:00:38:
                    d9:77:1c:18:b7:10:78:0e:61:2c:69:6f:47:ef:a9:
                    44:40:c9:eb:a6:fa:14:bf:61:75:ba:fb:79:69:99:
                    20:f8:d3:30:61:7a:98:0e:8f:b3:42:9d:af:25:bc:
                    ad:31:4d:40:23:8d:a1:2c:0c:2b:24:9b:8b:0b:e8:
                    76:a3:55:98:0f:18:0c:bc:12:9a:e3:99:95:31:f5:
                    7a:1b:ae:e5:de:5d:dd:b3:62:dc:b3:27:92:bf:b6:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:45:EF:FA:F5:42:C1:0F:06:6A:5C:D7:9C:F0:60:A3:12:51:0E:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/42a600c9-b30d-3446-b547-e650617726f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:77::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:9b:68:4d:70:95:15:72:3f:c5:e2:29:c0:e8:bc:86:df:26:
         22:8a:d8:e5:bd:13:b9:e9:13:0a:dc:90:cb:fb:43:64:5c:12:
         3c:22:f0:72:f7:c7:7b:c2:ed:fb:fa:3c:87:b5:8c:33:e2:3c:
         0e:53:06:22:b7:85:2d:9c:00:ab:91:29:ac:bb:c8:8c:4b:3d:
         d1:eb:7e:f1:19:a2:53:26:63:2a:67:ab:ba:97:66:e9:6a:ee:
         5c:31:2a:e9:d9:c6:fe:33:9e:0a:90:1e:92:48:27:81:2f:9f:
         a9:5b:7d:77:4c:8f:55:3b:45:d8:d0:c7:08:5a:b1:74:68:e8:
         29:11:f0:d1:bc:e5:41:90:2c:96:b0:bb:f0:5f:4c:f8:ed:01:
         83:4b:26:54:ec:a7:98:18:96:77:d0:3e:57:19:3e:79:d6:de:
         12:81:90:c8:3c:c7:58:d8:06:1a:51:38:e7:59:a1:18:9f:85:
         6d:6f:5d:ad:6c:c3:f8:94:06:37:08:37:60:be:e5:69:59:1f:
         45:39:78:83:59:7d:b8:5d:16:cf:83:c8:19:b3:97:7a:9b:41:
         a4:70:a6:6e:c4:00:29:ae:68:c4:c5:aa:22:66:ff:f1:1d:66:
         e9:07:c6:d0:8a:63:e8:7a:4e:1f:ea:90:31:27:e2:4c:cb:71:
         fa:5e:42:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----