Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4abcd8d7-4c9d-3c17-8223-9d433cd58709.roa
File:                     4abcd8d7-4c9d-3c17-8223-9d433cd58709.roa (raw, json)
Hash identifier:          6Fy28cj2SCG1CH4GoJpm8NxbiP1pTCS0W+pi44aAr3U=
Subject key identifier:   73:EB:D3:B9:B2:EC:D0:98:B7:D8:04:E8:5D:BC:81:DA:39:B7:CF:B1
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583D7935DBFC9943F37E9C4AA9E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4abcd8d7-4c9d-3c17-8223-9d433cd58709.roa
Signing time:             Tue 05 Apr 2022 04:00:00 +0000
ROA not before:           Tue 05 Apr 2022 04:00:00 +0000
ROA not after:            Wed 05 Oct 2022 04:00:00 +0000
asID:                     33036
IP address blocks:        2001:470:eb::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:79:35:db:fc:99:43:f3:7e:9c:4a:a9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr  5 04:00:00 2022 GMT
            Not After : Oct  5 04:00:00 2022 GMT
        Subject: CN=36aa9ec5-7528-401d-b628-42ea3a9bb684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:e2:4a:3a:37:8c:45:31:c6:35:bd:be:fc:
                    74:9c:40:e5:54:45:60:3d:64:92:22:0f:fd:f3:b9:
                    54:47:2b:57:02:b1:09:b3:09:7b:04:79:96:bd:fc:
                    ab:b3:cf:05:78:8a:73:90:7f:42:8f:74:b9:75:c2:
                    83:13:91:c8:f4:87:d9:53:28:3e:31:14:ca:ba:f9:
                    ec:6b:2f:13:10:65:1c:6a:01:f1:fc:e2:60:fe:34:
                    58:7e:18:ec:3c:46:0b:f2:e7:df:2c:17:76:c1:96:
                    e5:1b:da:78:fd:30:06:ee:98:48:7c:95:a2:ec:d0:
                    82:91:08:a5:12:b9:9e:fb:58:a6:e8:d8:51:f6:85:
                    71:3a:3d:cb:be:f3:e5:2f:67:2c:6c:19:75:43:a4:
                    8a:2d:c7:8c:85:8c:fc:08:4e:68:e8:ca:e5:a7:50:
                    11:98:b3:d5:3d:4c:a1:07:4c:ac:ab:2c:ed:e9:cf:
                    8f:34:73:03:ff:15:92:37:25:5b:64:80:0e:05:04:
                    25:cf:53:96:fd:d0:d4:c3:2f:aa:4a:69:76:dd:e8:
                    bd:07:d6:db:4a:8e:8e:da:c1:14:09:d0:f2:c8:1e:
                    eb:ac:00:0b:8a:7d:f8:91:31:bb:7b:1e:ad:57:9b:
                    02:b8:55:e9:8d:3c:70:8f:65:3f:4f:9b:bf:2e:fe:
                    51:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EB:D3:B9:B2:EC:D0:98:B7:D8:04:E8:5D:BC:81:DA:39:B7:CF:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4abcd8d7-4c9d-3c17-8223-9d433cd58709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:25:30:7b:92:c0:82:d7:0e:83:80:31:d0:76:28:1f:26:06:
         a6:f4:61:56:f1:0f:31:7d:2a:78:f5:83:d0:8d:28:65:83:73:
         37:69:2a:4d:5f:d1:9b:20:a5:85:1e:e4:f9:68:6c:a9:bb:ea:
         fd:28:bb:1d:a5:11:55:7d:10:18:41:3b:d8:0a:16:93:18:b2:
         48:72:86:12:ec:4b:f3:0a:01:d6:59:76:5a:20:ce:31:89:49:
         17:23:59:85:46:88:d5:bf:9c:c2:e1:85:4a:84:10:d5:33:81:
         bc:fe:94:27:97:bb:79:c8:11:8b:d5:b3:19:9c:5b:98:f9:c3:
         13:9e:dd:35:39:11:e9:f1:f1:ec:85:33:25:70:40:d6:62:d5:
         af:3c:8f:ee:1e:70:c7:16:1e:04:9e:f8:2e:01:4e:9f:f5:77:
         1e:33:44:b5:24:06:93:d0:c3:8a:9f:e5:bc:42:5c:aa:15:f4:
         e7:d3:c1:31:6c:09:ff:e6:db:04:42:af:d1:1c:7a:c4:da:fa:
         af:f5:33:f3:1d:13:0c:0e:ec:60:f8:33:38:09:3e:ac:3f:7f:
         b6:70:0e:91:aa:46:db:61:59:3e:fe:f9:b7:89:b3:07:1e:33:
         7b:0d:1e:30:92:5b:00:e7:4f:03:3b:1b:de:fc:77:c8:4c:02:
         de:50:d1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----