Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/52331aac-0383-34b1-8bcc-d7a91b54afbd.roa
File:                     52331aac-0383-34b1-8bcc-d7a91b54afbd.roa (raw, json)
Hash identifier:          G9I9L8Hrccow37WsYPEflN+2AbD8IG1HHE9ONVeP8ss=
Subject key identifier:   F9:71:F7:E7:0B:DA:28:37:04:E6:55:16:ED:8D:EE:E0:A6:F8:70:B3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285840843797CA1872B8A038554C20
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/52331aac-0383-34b1-8bcc-d7a91b54afbd.roa
Signing time:             Sun 08 Jan 2023 12:00:00 +0000
ROA not before:           Sun 08 Jan 2023 12:00:00 +0000
ROA not after:            Sun 09 Jul 2023 04:00:00 +0000
asID:                     31769
IP address blocks:        2001:470:133::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:84:37:97:ca:18:72:b8:a0:38:55:4c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan  8 12:00:00 2023 GMT
            Not After : Jul  9 04:00:00 2023 GMT
        Subject: CN=b82bc6a0-5879-4cbb-8beb-097bc86fb0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cb:50:5b:05:e6:da:6e:86:b0:7e:f6:86:c5:
                    b7:02:0c:f9:43:b8:80:59:05:19:12:97:fa:42:61:
                    31:a3:bd:5b:02:82:c2:69:14:e8:32:0e:b1:37:af:
                    3a:fe:ac:04:eb:59:96:ee:80:63:ec:8c:3e:ca:74:
                    3b:4e:dc:ce:ff:d9:41:a4:b4:a4:85:11:8f:68:59:
                    86:65:9a:ac:e5:e3:10:98:28:51:1e:df:31:14:86:
                    97:34:b2:a4:32:5a:c6:44:ee:41:46:b3:2c:c9:73:
                    e5:17:30:d3:55:a1:0e:fb:ec:f3:67:76:f4:d4:0e:
                    1b:d4:5e:36:fb:51:19:37:29:03:f4:36:29:21:65:
                    92:ea:9f:88:fc:21:87:ff:a3:07:fd:60:36:d0:8b:
                    9e:47:d9:f0:a0:4d:e0:72:2f:a3:07:54:fe:c7:cd:
                    54:98:ba:a7:83:45:53:52:e6:9e:ac:85:c2:12:23:
                    8d:1b:13:17:48:41:0f:96:38:15:cc:7a:1f:94:2e:
                    c8:13:a3:df:d1:76:0b:5e:f6:8b:12:fe:d3:f3:6d:
                    56:12:2e:45:b4:0f:be:36:da:77:e6:ec:02:32:c0:
                    47:e1:44:91:42:54:74:e5:60:7d:de:58:83:de:60:
                    11:22:d4:1e:be:66:47:da:2d:94:18:33:9e:1c:1a:
                    aa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:71:F7:E7:0B:DA:28:37:04:E6:55:16:ED:8D:EE:E0:A6:F8:70:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/52331aac-0383-34b1-8bcc-d7a91b54afbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:133::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b5:c7:5f:00:11:2b:c8:96:81:cf:27:5d:25:0e:bc:d6:c6:
         5e:33:d0:a3:0a:08:21:39:ec:10:45:40:ac:41:0d:e1:49:02:
         41:21:15:72:1b:07:83:9c:31:23:88:7e:19:b4:bd:f3:8d:bb:
         86:1c:4f:68:8a:38:d8:4b:20:a1:b2:3d:9f:bd:f9:30:e3:ff:
         c2:2f:e1:ce:8f:97:4d:ee:ff:22:c0:29:59:76:91:ae:22:2d:
         bc:b1:27:2f:6d:d7:d0:7f:b7:82:a2:cb:ce:f3:9f:e5:04:ae:
         71:d4:5d:58:80:91:5c:75:54:2e:58:f0:70:82:dd:b6:53:62:
         3a:40:a5:f6:a8:74:28:b9:2a:ba:01:4e:53:ba:88:c2:ee:5a:
         f8:69:ba:f6:fb:6b:78:9f:b8:79:88:9e:22:16:f9:22:61:a4:
         fa:da:af:a1:f2:ab:e4:73:1d:3f:af:08:11:e6:5b:9a:f5:83:
         5c:f8:01:a1:e8:fb:c3:62:8c:99:8b:17:d0:58:e8:e0:ab:83:
         dd:a1:ff:27:46:62:1f:4b:0d:e1:42:9e:3c:ac:68:59:a6:07:
         ab:a1:3c:06:d5:6e:a2:1d:ce:23:27:09:fb:b6:d9:f0:b5:e9:
         67:87:a2:4b:45:bc:60:db:55:7c:8a:db:f5:1a:5e:48:ab:40:
         92:bc:bb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----