Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b91eafb-4e7c-3536-ac2d-0703e6c3e90c.roa
File:                     4b91eafb-4e7c-3536-ac2d-0703e6c3e90c.roa (raw, json)
Hash identifier:          CQ3DW6jBkWvlCREv3cQyneWUuE3owiT6fb8sXh8znl4=
Subject key identifier:   21:EC:B5:3D:2C:05:96:65:8F:EB:62:74:FD:CB:01:50:B3:45:23:F6
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328583F648EBEB9D955525B72731EC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b91eafb-4e7c-3536-ac2d-0703e6c3e90c.roa
Signing time:             Tue 27 Sep 2022 12:00:00 +0000
ROA not before:           Tue 27 Sep 2022 12:00:00 +0000
ROA not after:            Tue 28 Mar 2023 04:00:00 +0000
asID:                     8059
IP address blocks:        2001:470:a5::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:64:8e:be:b9:d9:55:52:5b:72:73:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 27 12:00:00 2022 GMT
            Not After : Mar 28 04:00:00 2023 GMT
        Subject: CN=5e2bac2b-638b-42c4-9c1c-f1fd636c4f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6d:7c:2d:de:b6:33:03:ad:71:66:a4:37:28:
                    d3:5f:cb:8e:35:29:8d:76:bc:df:f3:9a:e0:b1:76:
                    6d:7e:11:ce:d0:29:ba:2a:12:52:a3:95:e8:72:a4:
                    0e:70:3b:91:a4:4d:eb:7c:6e:18:72:6e:18:11:25:
                    a2:ba:37:88:b0:88:80:58:5e:15:31:bb:89:14:91:
                    84:98:90:4d:c5:20:46:1e:4f:a5:b5:30:9c:f8:2a:
                    49:77:cd:7d:7d:21:bb:ce:ef:25:2e:57:43:71:8b:
                    fb:bb:3e:b7:77:85:b6:e9:d9:3c:c9:6f:2a:a3:0d:
                    03:fd:59:17:a8:db:97:b5:b7:aa:cc:85:02:7b:11:
                    3b:bf:b1:93:5c:be:ca:96:a4:19:87:38:65:e9:43:
                    9c:55:96:55:de:a7:71:e3:0c:c7:1b:97:db:c9:1d:
                    07:70:2d:0d:90:5d:55:39:ec:ae:10:c9:24:25:45:
                    d0:05:20:a1:bb:57:35:7c:ac:25:4f:75:b6:70:92:
                    dd:24:20:df:6c:f4:43:06:bb:a1:ae:1a:03:2e:e9:
                    60:09:e1:b1:28:82:f3:3b:08:ef:d7:84:a3:93:96:
                    07:24:ee:73:b3:61:b3:8e:ed:95:47:75:43:2c:5c:
                    0d:a3:e2:e2:9f:ce:ee:68:cf:8a:4e:87:34:c4:69:
                    96:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EC:B5:3D:2C:05:96:65:8F:EB:62:74:FD:CB:01:50:B3:45:23:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b91eafb-4e7c-3536-ac2d-0703e6c3e90c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:a5::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:d5:c4:0f:a0:35:30:7a:d7:71:a0:e8:4c:4d:43:74:9c:
         62:43:31:d3:cb:f8:a2:6b:7e:c0:ea:2d:4b:d9:38:8e:fc:45:
         96:bd:55:d9:e5:bf:b2:6f:4a:54:65:37:97:80:10:4f:d9:e2:
         f3:76:0d:b8:88:3c:df:f8:99:db:01:c4:c8:f4:9f:9f:39:ca:
         d3:89:67:70:83:99:c0:8e:de:c2:d8:05:96:99:b6:71:98:14:
         b8:b4:7d:ac:2a:5a:fd:3d:b0:a9:5f:7c:73:65:1d:c6:9a:92:
         92:aa:2a:a8:12:95:9f:42:63:1f:1b:be:7f:19:0f:da:d9:c7:
         32:28:f5:2c:b7:20:0a:be:0e:2e:2b:2f:47:b4:b1:d8:39:2b:
         c2:06:8d:47:42:4a:0c:cf:09:24:a3:79:4a:88:24:48:98:ea:
         ea:42:32:f3:2a:5b:cb:82:b2:f9:49:43:71:23:03:18:07:8d:
         62:57:76:3f:df:58:a5:9f:a2:0e:32:a2:f5:9d:a9:b0:48:f7:
         eb:4f:4f:b4:59:bb:bf:f4:ff:9f:01:dd:34:dd:03:fc:de:fb:
         40:d5:17:2a:b5:67:e7:cd:61:94:fe:99:ca:41:18:a0:1b:b3:
         38:ec:f0:0b:62:f6:c8:30:71:89:0d:37:7b:2c:af:4a:a3:36:
         19:4d:b3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----